./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 63a498e40ee7fb7960293994084186ed238562f61fafb5e109bd8b394667fc1f --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:10,779 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:10,782 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:10,825 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:10,826 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:10,829 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:10,831 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:10,835 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:10,837 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:10,842 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:10,843 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:10,845 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:10,845 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:10,847 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:10,849 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:10,853 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:10,854 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:10,855 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:10,859 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:10,861 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:10,864 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:10,865 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:10,867 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:10,868 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:10,874 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:10,874 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:10,875 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:10,876 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:10,877 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:10,878 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:10,878 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:10,879 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:10,881 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:10,882 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:10,883 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:10,883 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:10,884 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:10,884 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:10,884 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:10,886 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:10,887 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:10,888 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:10,922 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:10,922 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:10,923 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:10,923 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:10,924 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:10,924 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:10,925 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:10,925 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:10,925 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:10,925 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:10,926 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:10,926 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:10,927 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:10,927 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:10,927 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:10,927 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:10,927 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:10,928 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:10,928 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:10,928 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:10,928 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:10,928 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:10,929 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:10,929 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:10,929 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:10,929 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:10,929 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:10,930 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:10,930 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:10,930 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:10,930 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:10,930 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:10,931 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:10,931 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:10,931 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 63a498e40ee7fb7960293994084186ed238562f61fafb5e109bd8b394667fc1f [2021-12-17 15:09:11,181 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:11,210 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:11,213 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:11,215 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:11,215 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:11,217 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c [2021-12-17 15:09:11,287 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1db3bccc5/397627422b8d43c091fecdeb684a2f8c/FLAGd69865526 [2021-12-17 15:09:11,705 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:11,706 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c [2021-12-17 15:09:11,720 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1db3bccc5/397627422b8d43c091fecdeb684a2f8c/FLAGd69865526 [2021-12-17 15:09:11,732 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1db3bccc5/397627422b8d43c091fecdeb684a2f8c [2021-12-17 15:09:11,735 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:11,737 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:11,740 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:11,740 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:11,743 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:11,743 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:11" (1/1) ... [2021-12-17 15:09:11,744 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4173a645 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:11, skipping insertion in model container [2021-12-17 15:09:11,745 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:11" (1/1) ... [2021-12-17 15:09:11,750 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:11,781 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:12,002 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c[13463,13476] [2021-12-17 15:09:12,066 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:12,076 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:12,134 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product60.cil.c[13463,13476] [2021-12-17 15:09:12,165 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:12,189 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:12,190 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12 WrapperNode [2021-12-17 15:09:12,190 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:12,191 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:12,191 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:12,191 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:12,196 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,208 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,241 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 286 [2021-12-17 15:09:12,242 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:12,243 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:12,247 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:12,248 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:12,255 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,255 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,265 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,266 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,284 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,288 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,290 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,292 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:12,293 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:12,293 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:12,293 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:12,294 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (1/1) ... [2021-12-17 15:09:12,305 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:12,314 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:12,324 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:12,326 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:12,358 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:12,359 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:12,359 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:12,359 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:12,359 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:12,359 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:12,359 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:12,359 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:12,360 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:12,360 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:12,360 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:12,360 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:12,360 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:12,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:12,360 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:12,360 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:12,360 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:12,360 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:12,415 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:12,416 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:12,697 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:12,703 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:12,704 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:12,706 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:12 BoogieIcfgContainer [2021-12-17 15:09:12,706 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:12,707 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:12,708 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:12,711 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:12,711 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:11" (1/3) ... [2021-12-17 15:09:12,711 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19d1be9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:12, skipping insertion in model container [2021-12-17 15:09:12,712 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:12" (2/3) ... [2021-12-17 15:09:12,712 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19d1be9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:12, skipping insertion in model container [2021-12-17 15:09:12,712 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:12" (3/3) ... [2021-12-17 15:09:12,713 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product60.cil.c [2021-12-17 15:09:12,719 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:12,723 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:12,762 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:12,770 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:12,770 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:12,801 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-17 15:09:12,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-17 15:09:12,806 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:12,807 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:12,807 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:12,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:12,812 INFO L85 PathProgramCache]: Analyzing trace with hash 194395982, now seen corresponding path program 1 times [2021-12-17 15:09:12,819 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:12,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1198826820] [2021-12-17 15:09:12,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:12,820 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:12,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,051 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1198826820] [2021-12-17 15:09:13,052 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1198826820] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,052 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,053 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:13,054 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1134041168] [2021-12-17 15:09:13,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,058 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:13,060 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:13,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:13,093 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:13,142 INFO L93 Difference]: Finished difference Result 180 states and 245 transitions. [2021-12-17 15:09:13,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:13,144 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-17 15:09:13,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:13,168 INFO L225 Difference]: With dead ends: 180 [2021-12-17 15:09:13,168 INFO L226 Difference]: Without dead ends: 85 [2021-12-17 15:09:13,172 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:13,176 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:13,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:13,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-17 15:09:13,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-17 15:09:13,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-17 15:09:13,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-12-17 15:09:13,225 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 19 [2021-12-17 15:09:13,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:13,226 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-12-17 15:09:13,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,226 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-12-17 15:09:13,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-17 15:09:13,231 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:13,231 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:13,231 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:13,232 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:13,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:13,235 INFO L85 PathProgramCache]: Analyzing trace with hash -891560987, now seen corresponding path program 1 times [2021-12-17 15:09:13,235 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:13,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1057740999] [2021-12-17 15:09:13,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:13,236 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:13,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,317 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1057740999] [2021-12-17 15:09:13,317 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1057740999] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,317 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:13,318 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1636697087] [2021-12-17 15:09:13,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:13,319 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:13,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,322 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:13,342 INFO L93 Difference]: Finished difference Result 131 states and 169 transitions. [2021-12-17 15:09:13,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:13,343 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-17 15:09:13,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:13,344 INFO L225 Difference]: With dead ends: 131 [2021-12-17 15:09:13,344 INFO L226 Difference]: Without dead ends: 76 [2021-12-17 15:09:13,345 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,346 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 17 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:13,347 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 172 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:13,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-17 15:09:13,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-17 15:09:13,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-17 15:09:13,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2021-12-17 15:09:13,360 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 20 [2021-12-17 15:09:13,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:13,361 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2021-12-17 15:09:13,365 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,365 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2021-12-17 15:09:13,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-17 15:09:13,367 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:13,367 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:13,367 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:13,367 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:13,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:13,368 INFO L85 PathProgramCache]: Analyzing trace with hash 1763827496, now seen corresponding path program 1 times [2021-12-17 15:09:13,368 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:13,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64237050] [2021-12-17 15:09:13,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:13,369 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:13,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,445 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64237050] [2021-12-17 15:09:13,445 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64237050] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,445 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,446 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:13,446 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2040905271] [2021-12-17 15:09:13,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,446 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:13,447 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:13,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,448 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:13,470 INFO L93 Difference]: Finished difference Result 212 states and 279 transitions. [2021-12-17 15:09:13,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:13,471 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2021-12-17 15:09:13,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:13,472 INFO L225 Difference]: With dead ends: 212 [2021-12-17 15:09:13,472 INFO L226 Difference]: Without dead ends: 143 [2021-12-17 15:09:13,473 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,476 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 76 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:13,477 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 202 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:13,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2021-12-17 15:09:13,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 140. [2021-12-17 15:09:13,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 109 states have (on average 1.3577981651376148) internal successors, (148), 124 states have internal predecessors, (148), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 11 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-17 15:09:13,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 184 transitions. [2021-12-17 15:09:13,495 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 184 transitions. Word has length 25 [2021-12-17 15:09:13,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:13,495 INFO L470 AbstractCegarLoop]: Abstraction has 140 states and 184 transitions. [2021-12-17 15:09:13,496 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,496 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 184 transitions. [2021-12-17 15:09:13,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-12-17 15:09:13,497 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:13,497 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:13,498 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:13,498 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:13,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:13,498 INFO L85 PathProgramCache]: Analyzing trace with hash 687850495, now seen corresponding path program 1 times [2021-12-17 15:09:13,499 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:13,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1169516711] [2021-12-17 15:09:13,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:13,499 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:13,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,588 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1169516711] [2021-12-17 15:09:13,588 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1169516711] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,588 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,588 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:09:13,589 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1319607676] [2021-12-17 15:09:13,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,589 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:13,589 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:13,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:13,590 INFO L87 Difference]: Start difference. First operand 140 states and 184 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:13,678 INFO L93 Difference]: Finished difference Result 394 states and 537 transitions. [2021-12-17 15:09:13,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:13,679 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2021-12-17 15:09:13,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:13,681 INFO L225 Difference]: With dead ends: 394 [2021-12-17 15:09:13,685 INFO L226 Difference]: Without dead ends: 261 [2021-12-17 15:09:13,686 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:13,690 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 69 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:13,691 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 385 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:13,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2021-12-17 15:09:13,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2021-12-17 15:09:13,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 202 states have (on average 1.3366336633663367) internal successors, (270), 229 states have internal predecessors, (270), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (38), 20 states have call predecessors, (38), 36 states have call successors, (38) [2021-12-17 15:09:13,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 344 transitions. [2021-12-17 15:09:13,734 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 344 transitions. Word has length 28 [2021-12-17 15:09:13,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:13,735 INFO L470 AbstractCegarLoop]: Abstraction has 261 states and 344 transitions. [2021-12-17 15:09:13,735 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,735 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 344 transitions. [2021-12-17 15:09:13,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-17 15:09:13,738 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:13,738 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:13,738 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:13,739 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:13,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:13,739 INFO L85 PathProgramCache]: Analyzing trace with hash 1450440452, now seen corresponding path program 1 times [2021-12-17 15:09:13,739 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:13,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1684246813] [2021-12-17 15:09:13,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:13,741 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:13,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,793 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1684246813] [2021-12-17 15:09:13,794 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1684246813] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,794 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,794 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:13,794 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045374765] [2021-12-17 15:09:13,794 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,796 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:13,796 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:13,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,797 INFO L87 Difference]: Start difference. First operand 261 states and 344 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:13,843 INFO L93 Difference]: Finished difference Result 635 states and 857 transitions. [2021-12-17 15:09:13,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:13,845 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2021-12-17 15:09:13,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:13,848 INFO L225 Difference]: With dead ends: 635 [2021-12-17 15:09:13,849 INFO L226 Difference]: Without dead ends: 381 [2021-12-17 15:09:13,850 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:13,851 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 57 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:13,851 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 159 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:13,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2021-12-17 15:09:13,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 372. [2021-12-17 15:09:13,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 293 states have (on average 1.2935153583617747) internal successors, (379), 317 states have internal predecessors, (379), 41 states have call successors, (41), 39 states have call predecessors, (41), 37 states have return successors, (59), 36 states have call predecessors, (59), 41 states have call successors, (59) [2021-12-17 15:09:13,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 479 transitions. [2021-12-17 15:09:13,883 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 479 transitions. Word has length 30 [2021-12-17 15:09:13,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:13,894 INFO L470 AbstractCegarLoop]: Abstraction has 372 states and 479 transitions. [2021-12-17 15:09:13,895 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:13,895 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 479 transitions. [2021-12-17 15:09:13,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:13,896 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:13,896 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:13,896 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:13,896 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:13,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:13,897 INFO L85 PathProgramCache]: Analyzing trace with hash 1164230885, now seen corresponding path program 1 times [2021-12-17 15:09:13,897 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:13,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2089576473] [2021-12-17 15:09:13,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:13,898 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:13,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:13,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:13,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:13,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:13,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2089576473] [2021-12-17 15:09:13,995 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2089576473] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:13,995 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:13,995 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:13,996 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049756531] [2021-12-17 15:09:13,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:13,996 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:13,997 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:13,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:13,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:13,999 INFO L87 Difference]: Start difference. First operand 372 states and 479 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:09:14,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:14,246 INFO L93 Difference]: Finished difference Result 466 states and 604 transitions. [2021-12-17 15:09:14,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-17 15:09:14,247 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-12-17 15:09:14,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:14,256 INFO L225 Difference]: With dead ends: 466 [2021-12-17 15:09:14,256 INFO L226 Difference]: Without dead ends: 464 [2021-12-17 15:09:14,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:14,263 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 139 mSDsluCounter, 299 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 408 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:14,265 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [143 Valid, 408 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:14,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2021-12-17 15:09:14,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 438. [2021-12-17 15:09:14,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 438 states, 345 states have (on average 1.281159420289855) internal successors, (442), 379 states have internal predecessors, (442), 47 states have call successors, (47), 39 states have call predecessors, (47), 45 states have return successors, (77), 40 states have call predecessors, (77), 47 states have call successors, (77) [2021-12-17 15:09:14,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 438 states to 438 states and 566 transitions. [2021-12-17 15:09:14,308 INFO L78 Accepts]: Start accepts. Automaton has 438 states and 566 transitions. Word has length 32 [2021-12-17 15:09:14,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:14,309 INFO L470 AbstractCegarLoop]: Abstraction has 438 states and 566 transitions. [2021-12-17 15:09:14,309 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:09:14,310 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 566 transitions. [2021-12-17 15:09:14,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:14,313 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:14,313 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:14,313 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:14,313 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:14,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:14,314 INFO L85 PathProgramCache]: Analyzing trace with hash 108395810, now seen corresponding path program 1 times [2021-12-17 15:09:14,314 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:14,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [727319016] [2021-12-17 15:09:14,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:14,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:14,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:14,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:14,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:14,416 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:14,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [727319016] [2021-12-17 15:09:14,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [727319016] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:14,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:14,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:14,416 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379866284] [2021-12-17 15:09:14,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:14,417 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:14,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:14,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:14,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:14,419 INFO L87 Difference]: Start difference. First operand 438 states and 566 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:14,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:14,675 INFO L93 Difference]: Finished difference Result 983 states and 1318 transitions. [2021-12-17 15:09:14,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:09:14,675 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2021-12-17 15:09:14,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:14,679 INFO L225 Difference]: With dead ends: 983 [2021-12-17 15:09:14,679 INFO L226 Difference]: Without dead ends: 552 [2021-12-17 15:09:14,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:14,682 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 145 mSDsluCounter, 295 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:14,682 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 388 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:14,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 552 states. [2021-12-17 15:09:14,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 552 to 490. [2021-12-17 15:09:14,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 490 states, 391 states have (on average 1.2634271099744245) internal successors, (494), 425 states have internal predecessors, (494), 47 states have call successors, (47), 39 states have call predecessors, (47), 51 states have return successors, (85), 44 states have call predecessors, (85), 47 states have call successors, (85) [2021-12-17 15:09:14,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 490 states to 490 states and 626 transitions. [2021-12-17 15:09:14,713 INFO L78 Accepts]: Start accepts. Automaton has 490 states and 626 transitions. Word has length 47 [2021-12-17 15:09:14,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:14,713 INFO L470 AbstractCegarLoop]: Abstraction has 490 states and 626 transitions. [2021-12-17 15:09:14,714 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:14,714 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 626 transitions. [2021-12-17 15:09:14,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:14,715 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:14,715 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:14,716 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:14,716 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:14,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:14,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1885748896, now seen corresponding path program 1 times [2021-12-17 15:09:14,717 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:14,717 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780304747] [2021-12-17 15:09:14,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:14,717 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:14,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:14,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:14,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:14,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:14,779 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:14,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780304747] [2021-12-17 15:09:14,780 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780304747] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:14,780 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:14,780 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:14,781 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523203609] [2021-12-17 15:09:14,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:14,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:14,781 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:14,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:14,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:14,782 INFO L87 Difference]: Start difference. First operand 490 states and 626 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:14,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:14,989 INFO L93 Difference]: Finished difference Result 953 states and 1247 transitions. [2021-12-17 15:09:14,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:14,990 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2021-12-17 15:09:14,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:14,995 INFO L225 Difference]: With dead ends: 953 [2021-12-17 15:09:14,995 INFO L226 Difference]: Without dead ends: 470 [2021-12-17 15:09:14,998 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:14,998 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 159 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:14,999 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [159 Valid, 280 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:15,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2021-12-17 15:09:15,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 374. [2021-12-17 15:09:15,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 374 states, 297 states have (on average 1.2626262626262625) internal successors, (375), 322 states have internal predecessors, (375), 38 states have call successors, (38), 32 states have call predecessors, (38), 38 states have return successors, (60), 33 states have call predecessors, (60), 38 states have call successors, (60) [2021-12-17 15:09:15,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 374 states to 374 states and 473 transitions. [2021-12-17 15:09:15,035 INFO L78 Accepts]: Start accepts. Automaton has 374 states and 473 transitions. Word has length 47 [2021-12-17 15:09:15,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:15,035 INFO L470 AbstractCegarLoop]: Abstraction has 374 states and 473 transitions. [2021-12-17 15:09:15,036 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:15,036 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 473 transitions. [2021-12-17 15:09:15,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:15,037 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:15,037 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:15,037 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:15,037 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:15,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:15,038 INFO L85 PathProgramCache]: Analyzing trace with hash 1591569950, now seen corresponding path program 1 times [2021-12-17 15:09:15,038 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:15,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040516639] [2021-12-17 15:09:15,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:15,039 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:15,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:15,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:15,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:15,112 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:15,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040516639] [2021-12-17 15:09:15,112 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040516639] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:15,112 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:15,112 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:15,113 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684535247] [2021-12-17 15:09:15,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:15,113 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:15,113 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:15,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:15,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:15,114 INFO L87 Difference]: Start difference. First operand 374 states and 473 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:15,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:15,445 INFO L93 Difference]: Finished difference Result 870 states and 1165 transitions. [2021-12-17 15:09:15,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-17 15:09:15,446 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2021-12-17 15:09:15,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:15,451 INFO L225 Difference]: With dead ends: 870 [2021-12-17 15:09:15,451 INFO L226 Difference]: Without dead ends: 587 [2021-12-17 15:09:15,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2021-12-17 15:09:15,457 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 222 mSDsluCounter, 366 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 500 SdHoareTripleChecker+Invalid, 347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:15,457 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [224 Valid, 500 Invalid, 347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:15,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 587 states. [2021-12-17 15:09:15,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 587 to 562. [2021-12-17 15:09:15,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 562 states, 445 states have (on average 1.2337078651685394) internal successors, (549), 477 states have internal predecessors, (549), 57 states have call successors, (57), 49 states have call predecessors, (57), 59 states have return successors, (115), 58 states have call predecessors, (115), 57 states have call successors, (115) [2021-12-17 15:09:15,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 562 states to 562 states and 721 transitions. [2021-12-17 15:09:15,493 INFO L78 Accepts]: Start accepts. Automaton has 562 states and 721 transitions. Word has length 47 [2021-12-17 15:09:15,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:15,493 INFO L470 AbstractCegarLoop]: Abstraction has 562 states and 721 transitions. [2021-12-17 15:09:15,493 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:15,493 INFO L276 IsEmpty]: Start isEmpty. Operand 562 states and 721 transitions. [2021-12-17 15:09:15,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-12-17 15:09:15,495 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:15,495 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:15,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:15,496 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:15,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:15,496 INFO L85 PathProgramCache]: Analyzing trace with hash 198502002, now seen corresponding path program 1 times [2021-12-17 15:09:15,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:15,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624845007] [2021-12-17 15:09:15,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:15,497 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:15,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:15,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:15,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:15,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,559 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:15,560 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:15,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624845007] [2021-12-17 15:09:15,560 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624845007] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:15,560 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:15,560 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:15,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984276547] [2021-12-17 15:09:15,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:15,561 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:15,561 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:15,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:15,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:15,562 INFO L87 Difference]: Start difference. First operand 562 states and 721 transitions. Second operand has 7 states, 7 states have (on average 9.0) internal successors, (63), 4 states have internal predecessors, (63), 4 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:09:15,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:15,761 INFO L93 Difference]: Finished difference Result 945 states and 1210 transitions. [2021-12-17 15:09:15,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:09:15,762 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.0) internal successors, (63), 4 states have internal predecessors, (63), 4 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 70 [2021-12-17 15:09:15,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:15,765 INFO L225 Difference]: With dead ends: 945 [2021-12-17 15:09:15,765 INFO L226 Difference]: Without dead ends: 390 [2021-12-17 15:09:15,767 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:15,768 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 208 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:15,768 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [216 Valid, 366 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:15,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2021-12-17 15:09:15,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 373. [2021-12-17 15:09:15,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 296 states have (on average 1.2263513513513513) internal successors, (363), 318 states have internal predecessors, (363), 38 states have call successors, (38), 34 states have call predecessors, (38), 38 states have return successors, (68), 38 states have call predecessors, (68), 38 states have call successors, (68) [2021-12-17 15:09:15,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 469 transitions. [2021-12-17 15:09:15,788 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 469 transitions. Word has length 70 [2021-12-17 15:09:15,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:15,789 INFO L470 AbstractCegarLoop]: Abstraction has 373 states and 469 transitions. [2021-12-17 15:09:15,789 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.0) internal successors, (63), 4 states have internal predecessors, (63), 4 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:09:15,789 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 469 transitions. [2021-12-17 15:09:15,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2021-12-17 15:09:15,791 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:15,792 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:15,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-17 15:09:15,793 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:15,793 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:15,793 INFO L85 PathProgramCache]: Analyzing trace with hash -351052253, now seen corresponding path program 1 times [2021-12-17 15:09:15,793 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:15,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36978570] [2021-12-17 15:09:15,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:15,798 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:15,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:15,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:15,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:15,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-17 15:09:15,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:15,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:15,927 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-17 15:09:15,927 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:15,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36978570] [2021-12-17 15:09:15,927 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36978570] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:15,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1591090525] [2021-12-17 15:09:15,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:15,928 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:15,928 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:15,930 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:15,937 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:16,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:16,039 INFO L263 TraceCheckSpWp]: Trace formula consists of 450 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:16,044 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:16,299 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:16,299 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:16,536 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-17 15:09:16,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1591090525] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:16,537 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:16,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2021-12-17 15:09:16,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388437688] [2021-12-17 15:09:16,537 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:16,537 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-17 15:09:16,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:16,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-17 15:09:16,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:16,538 INFO L87 Difference]: Start difference. First operand 373 states and 469 transitions. Second operand has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-17 15:09:17,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:17,033 INFO L93 Difference]: Finished difference Result 882 states and 1164 transitions. [2021-12-17 15:09:17,033 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-17 15:09:17,034 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 82 [2021-12-17 15:09:17,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:17,037 INFO L225 Difference]: With dead ends: 882 [2021-12-17 15:09:17,037 INFO L226 Difference]: Without dead ends: 584 [2021-12-17 15:09:17,039 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 206 GetRequests, 176 SyntacticMatches, 3 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2021-12-17 15:09:17,040 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 353 mSDsluCounter, 445 mSDsCounter, 0 mSdLazyCounter, 426 mSolverCounterSat, 127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 584 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 127 IncrementalHoareTripleChecker+Valid, 426 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:17,040 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [359 Valid, 584 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [127 Valid, 426 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:09:17,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 584 states. [2021-12-17 15:09:17,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 584 to 503. [2021-12-17 15:09:17,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 503 states, 395 states have (on average 1.2329113924050632) internal successors, (487), 426 states have internal predecessors, (487), 54 states have call successors, (54), 48 states have call predecessors, (54), 53 states have return successors, (102), 50 states have call predecessors, (102), 54 states have call successors, (102) [2021-12-17 15:09:17,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 503 states to 503 states and 643 transitions. [2021-12-17 15:09:17,067 INFO L78 Accepts]: Start accepts. Automaton has 503 states and 643 transitions. Word has length 82 [2021-12-17 15:09:17,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:17,068 INFO L470 AbstractCegarLoop]: Abstraction has 503 states and 643 transitions. [2021-12-17 15:09:17,068 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-17 15:09:17,068 INFO L276 IsEmpty]: Start isEmpty. Operand 503 states and 643 transitions. [2021-12-17 15:09:17,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-17 15:09:17,072 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:17,073 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:17,101 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-17 15:09:17,291 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-17 15:09:17,292 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:17,292 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:17,292 INFO L85 PathProgramCache]: Analyzing trace with hash 349407230, now seen corresponding path program 2 times [2021-12-17 15:09:17,292 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:17,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801907310] [2021-12-17 15:09:17,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:17,292 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:17,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:17,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:17,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:17,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-17 15:09:17,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:17,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:17,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-17 15:09:17,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:17,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:17,498 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-17 15:09:17,498 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:17,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801907310] [2021-12-17 15:09:17,498 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801907310] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:17,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1448962996] [2021-12-17 15:09:17,499 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-17 15:09:17,499 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:17,499 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:17,500 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:17,527 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:09:17,617 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-17 15:09:17,617 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-17 15:09:17,620 INFO L263 TraceCheckSpWp]: Trace formula consists of 540 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-17 15:09:17,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:17,845 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-17 15:09:17,846 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:09:17,846 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1448962996] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:17,846 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:09:17,846 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2021-12-17 15:09:17,847 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580156770] [2021-12-17 15:09:17,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:17,847 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:17,847 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:17,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:17,848 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:09:17,848 INFO L87 Difference]: Start difference. First operand 503 states and 643 transitions. Second operand has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-17 15:09:18,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,087 INFO L93 Difference]: Finished difference Result 1358 states and 1801 transitions. [2021-12-17 15:09:18,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-17 15:09:18,087 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 117 [2021-12-17 15:09:18,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,093 INFO L225 Difference]: With dead ends: 1358 [2021-12-17 15:09:18,093 INFO L226 Difference]: Without dead ends: 929 [2021-12-17 15:09:18,095 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 129 SyntacticMatches, 3 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 42 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2021-12-17 15:09:18,096 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 262 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 551 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,096 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [262 Valid, 551 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:18,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 929 states. [2021-12-17 15:09:18,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 929 to 864. [2021-12-17 15:09:18,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 864 states, 681 states have (on average 1.2334801762114538) internal successors, (840), 727 states have internal predecessors, (840), 93 states have call successors, (93), 84 states have call predecessors, (93), 89 states have return successors, (157), 86 states have call predecessors, (157), 93 states have call successors, (157) [2021-12-17 15:09:18,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 864 states to 864 states and 1090 transitions. [2021-12-17 15:09:18,157 INFO L78 Accepts]: Start accepts. Automaton has 864 states and 1090 transitions. Word has length 117 [2021-12-17 15:09:18,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,158 INFO L470 AbstractCegarLoop]: Abstraction has 864 states and 1090 transitions. [2021-12-17 15:09:18,158 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-17 15:09:18,158 INFO L276 IsEmpty]: Start isEmpty. Operand 864 states and 1090 transitions. [2021-12-17 15:09:18,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-17 15:09:18,161 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:18,161 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:18,189 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:18,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-17 15:09:18,376 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:18,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:18,376 INFO L85 PathProgramCache]: Analyzing trace with hash 1225426236, now seen corresponding path program 1 times [2021-12-17 15:09:18,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:18,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1777919912] [2021-12-17 15:09:18,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,377 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:18,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:18,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:18,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-17 15:09:18,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:18,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:18,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-17 15:09:18,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:18,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,470 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 10 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-17 15:09:18,470 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:18,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1777919912] [2021-12-17 15:09:18,470 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1777919912] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:18,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [929161192] [2021-12-17 15:09:18,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,470 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:18,470 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:18,471 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:18,497 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-17 15:09:18,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,586 INFO L263 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-17 15:09:18,589 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:18,745 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2021-12-17 15:09:18,746 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:09:18,746 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [929161192] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:18,746 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:09:18,746 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 11 [2021-12-17 15:09:18,746 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009778218] [2021-12-17 15:09:18,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:18,747 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:18,747 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:18,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:18,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2021-12-17 15:09:18,747 INFO L87 Difference]: Start difference. First operand 864 states and 1090 transitions. Second operand has 5 states, 5 states have (on average 16.8) internal successors, (84), 5 states have internal predecessors, (84), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:09:18,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,791 INFO L93 Difference]: Finished difference Result 1209 states and 1508 transitions. [2021-12-17 15:09:18,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:18,792 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.8) internal successors, (84), 5 states have internal predecessors, (84), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 117 [2021-12-17 15:09:18,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,792 INFO L225 Difference]: With dead ends: 1209 [2021-12-17 15:09:18,792 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:09:18,795 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-17 15:09:18,796 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 24 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,796 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 372 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:18,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:09:18,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:09:18,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:09:18,797 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2021-12-17 15:09:18,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,797 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:09:18,797 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.8) internal successors, (84), 5 states have internal predecessors, (84), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:09:18,797 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:09:18,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:09:18,800 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:09:18,831 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:19,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:19,027 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:09:21,877 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 714 721) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or (= 0 ~systemActive~0) .cse0 (not (<= 2 ~waterLevel~0))) (or (not (<= 1 ~waterLevel~0)) .cse0 (not (= ~systemActive~0 1))))) [2021-12-17 15:09:21,877 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 714 721) no Hoare annotation was computed. [2021-12-17 15:09:21,877 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 714 721) no Hoare annotation was computed. [2021-12-17 15:09:21,877 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2021-12-17 15:09:21,878 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 935 946) the Hoare annotation is: true [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point L939-1(lines 935 946) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 935 946) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2021-12-17 15:09:21,878 INFO L858 garLoopResultBuilder]: For program point L915(lines 915 919) no Hoare annotation was computed. [2021-12-17 15:09:21,879 INFO L854 garLoopResultBuilder]: At program point L915-2(lines 911 922) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse1 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not (= ~systemActive~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse2 .cse1))) [2021-12-17 15:09:21,880 INFO L854 garLoopResultBuilder]: At program point L589(lines 584 591) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0) (or .cse1 .cse2 (not (= ~systemActive~0 0))) (or .cse1 .cse0 .cse2))) [2021-12-17 15:09:21,880 INFO L854 garLoopResultBuilder]: At program point L812(lines 797 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse1 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not (= ~systemActive~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse2 .cse1))) [2021-12-17 15:09:21,881 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2021-12-17 15:09:21,881 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0) (or .cse1 .cse2 (not (= ~systemActive~0 0))) (or .cse1 .cse0 .cse2))) [2021-12-17 15:09:21,881 INFO L854 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse0) (or .cse1 .cse2 (not (= ~systemActive~0 0))) (or .cse1 .cse0 .cse2))) [2021-12-17 15:09:21,881 INFO L854 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0) (or .cse1 .cse2 (not (= ~systemActive~0 0))) (or .cse1 .cse0 .cse2))) [2021-12-17 15:09:21,882 INFO L854 garLoopResultBuilder]: At program point L673(line 673) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse1 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not (= ~systemActive~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse2 .cse1))) [2021-12-17 15:09:21,882 INFO L858 garLoopResultBuilder]: For program point L570(lines 570 576) no Hoare annotation was computed. [2021-12-17 15:09:21,882 INFO L858 garLoopResultBuilder]: For program point L566(lines 566 579) no Hoare annotation was computed. [2021-12-17 15:09:21,882 INFO L854 garLoopResultBuilder]: At program point L566-1(lines 558 582) the Hoare annotation is: (let ((.cse1 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse3 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1|)) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1|)) (.cse9 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (= ~systemActive~0 1))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse11 (= |timeShift_getWaterLevel_#res#1| 1)) (.cse12 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~systemActive~0 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or (and .cse2 .cse6) .cse4 (not (<= 1 |old(~waterLevel~0)|)) .cse7) (or .cse0 (and .cse1 (<= 2 ~waterLevel~0) .cse3) (and .cse8 (<= 1 ~waterLevel~0) .cse9 .cse6) .cse5) (or .cse0 (and .cse8 .cse9) .cse4 .cse7) (or .cse10 .cse4 (and .cse11 .cse2 .cse12 .cse6) .cse5) (or .cse10 (and .cse11 .cse12) .cse4 .cse7))) [2021-12-17 15:09:21,882 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse0) .cse1 .cse2 .cse3) (or .cse1 .cse3 (not (= ~systemActive~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse2))) [2021-12-17 15:09:21,883 INFO L854 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 (not (= ~systemActive~0 0))) (let ((.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse2 .cse3) (and .cse2 .cse4) .cse0 .cse5 .cse1)) (or (not (<= 2 |old(~waterLevel~0)|)) (and (<= 1 ~waterLevel~0) .cse4) .cse3 .cse5))) [2021-12-17 15:09:21,883 INFO L858 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2021-12-17 15:09:21,883 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2021-12-17 15:09:21,883 INFO L858 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2021-12-17 15:09:21,883 INFO L854 garLoopResultBuilder]: At program point L984(lines 979 987) the Hoare annotation is: (let ((.cse9 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (<= 2 ~waterLevel~0)) (.cse13 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse13 .cse8)) (.cse12 (and .cse9 .cse13 .cse10)) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (= ~systemActive~0 0))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3) (or .cse6 (and (<= 1 ~waterLevel~0) .cse7 .cse8) (and .cse9 .cse10) .cse11) (or .cse6 .cse12 .cse2 .cse11) (or .cse4 .cse12 .cse2 .cse11 .cse5) (or .cse6 .cse2 .cse7 .cse3) (or .cse0 .cse1 .cse2 .cse11)))) [2021-12-17 15:09:21,883 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 605 628) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse1 (not (= ~systemActive~0 1))) (.cse2 (and .cse0 (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) (and .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse1 .cse4) (or .cse2 .cse3 .cse4 (not (= ~systemActive~0 0)))))) [2021-12-17 15:09:21,884 INFO L858 garLoopResultBuilder]: For program point L588(line 588) no Hoare annotation was computed. [2021-12-17 15:09:21,884 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2021-12-17 15:09:21,885 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 588) no Hoare annotation was computed. [2021-12-17 15:09:21,885 INFO L861 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2021-12-17 15:09:21,885 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2021-12-17 15:09:21,885 INFO L858 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2021-12-17 15:09:21,885 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 90 119) the Hoare annotation is: true [2021-12-17 15:09:21,885 INFO L861 garLoopResultBuilder]: At program point L115(lines 90 119) the Hoare annotation is: true [2021-12-17 15:09:21,885 INFO L858 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2021-12-17 15:09:21,885 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2021-12-17 15:09:21,886 INFO L861 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2021-12-17 15:09:21,886 INFO L858 garLoopResultBuilder]: For program point L101(line 101) no Hoare annotation was computed. [2021-12-17 15:09:21,886 INFO L861 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2021-12-17 15:09:21,886 INFO L854 garLoopResultBuilder]: At program point L828(lines 816 830) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 0) (<= 1 ~waterLevel~0) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,886 INFO L861 garLoopResultBuilder]: At program point L184(lines 165 187) the Hoare annotation is: true [2021-12-17 15:09:21,886 INFO L854 garLoopResultBuilder]: At program point L151(lines 147 153) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,887 INFO L858 garLoopResultBuilder]: For program point L820(lines 820 826) no Hoare annotation was computed. [2021-12-17 15:09:21,887 INFO L858 garLoopResultBuilder]: For program point L820-1(lines 820 826) no Hoare annotation was computed. [2021-12-17 15:09:21,887 INFO L861 garLoopResultBuilder]: At program point L903(lines 840 907) the Hoare annotation is: true [2021-12-17 15:09:21,887 INFO L858 garLoopResultBuilder]: For program point L870(lines 870 876) no Hoare annotation was computed. [2021-12-17 15:09:21,887 INFO L858 garLoopResultBuilder]: For program point L870-1(lines 870 876) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L854 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse1 (= ~systemActive~0 1)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 (= ~systemActive~0 0) .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3))) [2021-12-17 15:09:21,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L854 garLoopResultBuilder]: At program point L900(lines 849 901) the Hoare annotation is: false [2021-12-17 15:09:21,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L858 garLoopResultBuilder]: For program point L888(lines 888 894) no Hoare annotation was computed. [2021-12-17 15:09:21,888 INFO L854 garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 2 ~waterLevel~0) (not (= 0 ~systemActive~0))) [2021-12-17 15:09:21,890 INFO L854 garLoopResultBuilder]: At program point L888-2(lines 880 895) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse1 (= ~systemActive~0 1)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 (= ~systemActive~0 0) .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3))) [2021-12-17 15:09:21,890 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,890 INFO L858 garLoopResultBuilder]: For program point L851(lines 850 899) no Hoare annotation was computed. [2021-12-17 15:09:21,890 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 895) no Hoare annotation was computed. [2021-12-17 15:09:21,890 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,890 INFO L854 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse1 (= ~systemActive~0 1)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 (= ~systemActive~0 0) .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3))) [2021-12-17 15:09:21,891 INFO L861 garLoopResultBuilder]: At program point L162(lines 155 164) the Hoare annotation is: true [2021-12-17 15:09:21,891 INFO L854 garLoopResultBuilder]: At program point L897(lines 850 899) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse1 (= ~systemActive~0 1)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 (= ~systemActive~0 0) .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3))) [2021-12-17 15:09:21,891 INFO L858 garLoopResultBuilder]: For program point L860(lines 860 866) no Hoare annotation was computed. [2021-12-17 15:09:21,892 INFO L858 garLoopResultBuilder]: For program point L860-1(lines 860 866) no Hoare annotation was computed. [2021-12-17 15:09:21,892 INFO L858 garLoopResultBuilder]: For program point L852(lines 852 856) no Hoare annotation was computed. [2021-12-17 15:09:21,892 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 182) no Hoare annotation was computed. [2021-12-17 15:09:21,892 INFO L858 garLoopResultBuilder]: For program point L175-2(lines 175 182) no Hoare annotation was computed. [2021-12-17 15:09:21,892 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,893 INFO L854 garLoopResultBuilder]: At program point L836(lines 831 838) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 1))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 (<= 1 ~waterLevel~0) .cse1 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:21,894 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 637 661) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:21,894 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2021-12-17 15:09:21,894 INFO L854 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-17 15:09:21,895 INFO L854 garLoopResultBuilder]: At program point L793(lines 778 796) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (= ~waterLevel~0 1)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1)) .cse0 .cse1) (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (not (<= 1 ~waterLevel~0)) .cse0 .cse1))) [2021-12-17 15:09:21,895 INFO L854 garLoopResultBuilder]: At program point L729(lines 722 732) the Hoare annotation is: (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-17 15:09:21,895 INFO L854 garLoopResultBuilder]: At program point L952(lines 947 955) the Hoare annotation is: (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-17 15:09:21,895 INFO L858 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2021-12-17 15:09:21,895 INFO L858 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2021-12-17 15:09:21,895 INFO L854 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (let ((.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1)) .cse3) (or (and .cse1 .cse2) .cse0 .cse3 (not (<= 2 ~waterLevel~0))))) [2021-12-17 15:09:21,895 INFO L858 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2021-12-17 15:09:21,896 INFO L858 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2021-12-17 15:09:21,896 INFO L858 garLoopResultBuilder]: For program point L992(lines 992 998) no Hoare annotation was computed. [2021-12-17 15:09:21,896 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2021-12-17 15:09:21,896 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 695) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-17 15:09:21,896 INFO L854 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-17 15:09:21,896 INFO L858 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2021-12-17 15:09:21,896 INFO L854 garLoopResultBuilder]: At program point L997(lines 988 1001) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= ~waterLevel~0 1)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse0) .cse1 .cse2) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse0))) [2021-12-17 15:09:21,897 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 923 934) no Hoare annotation was computed. [2021-12-17 15:09:21,897 INFO L858 garLoopResultBuilder]: For program point L927-1(lines 923 934) no Hoare annotation was computed. [2021-12-17 15:09:21,897 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 923 934) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 (not (= ~systemActive~0 0))) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 2 |old(~waterLevel~0)|)) .cse1 .cse3))) [2021-12-17 15:09:21,900 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:21,901 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:09:21,924 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:09:21 BoogieIcfgContainer [2021-12-17 15:09:21,925 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:09:21,925 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:09:21,926 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:09:21,926 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:09:21,926 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:12" (3/4) ... [2021-12-17 15:09:21,929 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:09:21,941 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:21,942 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:09:21,949 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-17 15:09:21,950 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:09:21,950 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:09:21,950 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:09:21,951 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:09:21,951 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:21,951 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:21,971 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && ((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:21,972 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || 2 <= waterLevel) || !(systemActive == 1)) [2021-12-17 15:09:21,972 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((1 <= waterLevel && 1 <= \result) && pumpRunning == 0)) || (2 <= \result && 2 <= waterLevel)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 1 <= \result) || !(systemActive == 0))) && (((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-17 15:09:21,972 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= tmp)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((2 <= \result && 2 <= waterLevel) && 2 <= tmp)) || (((1 <= tmp && 1 <= waterLevel) && 1 <= \result) && pumpRunning == 0)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || (1 <= tmp && 1 <= \result)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (((\result == 1 && waterLevel == \old(waterLevel)) && tmp == 1) && pumpRunning == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) == 1) || (\result == 1 && tmp == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) [2021-12-17 15:09:21,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(2 <= \old(waterLevel)) || ((\result == 0 && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:21,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(2 <= waterLevel)) || pumpRunning == 0) [2021-12-17 15:09:21,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(2 <= \old(waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:21,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && ((!(2 <= \old(waterLevel)) || (((((1 <= tmp___0 && tmp == 0) && 1 <= \result) && \result == 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:21,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || (\result == 1 && tmp == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-17 15:09:21,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(2 <= \old(waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:21,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((2 <= waterLevel && pumpRunning == 0) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) [2021-12-17 15:09:21,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((2 <= waterLevel && pumpRunning == 0) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) [2021-12-17 15:09:21,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) [2021-12-17 15:09:21,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) [2021-12-17 15:09:21,998 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:09:21,998 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:09:21,999 INFO L158 Benchmark]: Toolchain (without parser) took 10261.44ms. Allocated memory was 83.9MB in the beginning and 192.9MB in the end (delta: 109.1MB). Free memory was 52.6MB in the beginning and 64.8MB in the end (delta: -12.2MB). Peak memory consumption was 95.0MB. Max. memory is 16.1GB. [2021-12-17 15:09:21,999 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 83.9MB. Free memory was 44.7MB in the beginning and 44.7MB in the end (delta: 45.5kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:09:21,999 INFO L158 Benchmark]: CACSL2BoogieTranslator took 450.53ms. Allocated memory is still 83.9MB. Free memory was 52.4MB in the beginning and 52.2MB in the end (delta: 191.7kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:09:21,999 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.17ms. Allocated memory is still 83.9MB. Free memory was 52.2MB in the beginning and 49.6MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:22,000 INFO L158 Benchmark]: Boogie Preprocessor took 49.34ms. Allocated memory is still 83.9MB. Free memory was 49.6MB in the beginning and 48.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:22,000 INFO L158 Benchmark]: RCFGBuilder took 413.36ms. Allocated memory was 83.9MB in the beginning and 100.7MB in the end (delta: 16.8MB). Free memory was 48.0MB in the beginning and 68.9MB in the end (delta: -21.0MB). Peak memory consumption was 12.7MB. Max. memory is 16.1GB. [2021-12-17 15:09:22,000 INFO L158 Benchmark]: TraceAbstraction took 9217.42ms. Allocated memory was 100.7MB in the beginning and 192.9MB in the end (delta: 92.3MB). Free memory was 68.5MB in the beginning and 72.1MB in the end (delta: -3.6MB). Peak memory consumption was 100.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:22,001 INFO L158 Benchmark]: Witness Printer took 72.67ms. Allocated memory is still 192.9MB. Free memory was 72.1MB in the beginning and 64.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:22,002 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 83.9MB. Free memory was 44.7MB in the beginning and 44.7MB in the end (delta: 45.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 450.53ms. Allocated memory is still 83.9MB. Free memory was 52.4MB in the beginning and 52.2MB in the end (delta: 191.7kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.17ms. Allocated memory is still 83.9MB. Free memory was 52.2MB in the beginning and 49.6MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 49.34ms. Allocated memory is still 83.9MB. Free memory was 49.6MB in the beginning and 48.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 413.36ms. Allocated memory was 83.9MB in the beginning and 100.7MB in the end (delta: 16.8MB). Free memory was 48.0MB in the beginning and 68.9MB in the end (delta: -21.0MB). Peak memory consumption was 12.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9217.42ms. Allocated memory was 100.7MB in the beginning and 192.9MB in the end (delta: 92.3MB). Free memory was 68.5MB in the beginning and 72.1MB in the end (delta: -3.6MB). Peak memory consumption was 100.1MB. Max. memory is 16.1GB. * Witness Printer took 72.67ms. Allocated memory is still 192.9MB. Free memory was 72.1MB in the beginning and 64.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 588]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.1s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1755 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1731 mSDsluCounter, 4486 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3013 mSDsCounter, 417 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1618 IncrementalHoareTripleChecker+Invalid, 2035 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 417 mSolverCounterUnsat, 1473 mSDtfsCounter, 1618 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 600 GetRequests, 476 SyntacticMatches, 7 SemanticMatches, 117 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 345 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=864occurred in iteration=12, InterpolantAutomatonStates: 111, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 384 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2131 PreInvPairs, 2289 NumberOfFragments, 1313 HoareAnnotationTreeSize, 2131 FomulaSimplifications, 2337 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 45 FomulaSimplificationsInter, 15889 FormulaSimplificationTreeSizeReductionInter, 2.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 997 NumberOfCodeBlocks, 997 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1062 ConstructedInterpolants, 0 QuantifiedInterpolants, 1951 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1531 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 346/386 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 584]: Loop Invariant Derived loop invariant: ((!(2 <= \old(waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 90]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= tmp)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((2 <= \result && 2 <= waterLevel) && 2 <= tmp)) || (((1 <= tmp && 1 <= waterLevel) && 1 <= \result) && pumpRunning == 0)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || (1 <= tmp && 1 <= \result)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (((\result == 1 && waterLevel == \old(waterLevel)) && tmp == 1) && pumpRunning == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) == 1) || (\result == 1 && tmp == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || 2 <= waterLevel) || !(systemActive == 1)) - InvariantResult [Line: 850]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0 && 2 <= waterLevel) && systemActive == 1) || (((splverifierCounter == 0 && systemActive == 0) && 1 <= waterLevel) && pumpRunning == 0)) || (((splverifierCounter == 0 && 1 <= waterLevel) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(2 <= waterLevel)) || pumpRunning == 0) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) - InvariantResult [Line: 831]: Loop Invariant Derived loop invariant: ((splverifierCounter == 0 && 2 <= waterLevel) && systemActive == 1) || (((splverifierCounter == 0 && 1 <= waterLevel) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((!(2 <= \old(waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((!(2 <= \old(waterLevel)) || ((\result == 0 && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && ((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && pumpRunning == 0) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && pumpRunning == 0) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && ((!(2 <= \old(waterLevel)) || (((((1 <= tmp___0 && tmp == 0) && 1 <= \result) && \result == 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 1)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((splverifierCounter == 0 && systemActive == 0) && 1 <= waterLevel) && pumpRunning == 0 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((1 <= waterLevel && 1 <= \result) && pumpRunning == 0)) || (2 <= \result && 2 <= waterLevel)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || ((2 <= \result && waterLevel == \old(waterLevel)) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 1 <= \result) || !(systemActive == 0))) && (((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || (\result == 1 && tmp == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:09:22,053 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE