./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:15,540 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:15,542 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:15,596 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:15,597 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:15,598 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:15,599 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:15,600 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:15,602 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:15,603 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:15,604 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:15,605 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:15,605 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:15,606 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:15,607 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:15,608 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:15,609 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:15,610 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:15,611 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:15,613 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:15,614 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:15,622 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:15,624 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:15,625 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:15,627 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:15,627 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:15,628 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:15,629 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:15,630 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:15,631 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:15,631 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:15,632 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:15,632 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:15,633 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:15,634 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:15,634 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:15,635 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:15,635 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:15,635 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:15,636 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:15,637 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:15,638 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:15,667 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:15,669 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:15,669 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:15,670 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:15,671 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:15,671 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:15,672 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:15,672 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:15,672 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:15,672 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:15,673 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:15,673 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:15,673 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:15,674 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:15,674 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:15,674 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:15,674 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:15,674 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:15,675 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:15,675 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:15,675 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:15,675 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:15,675 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:15,676 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:15,676 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:15,676 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:15,676 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:15,677 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:15,678 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:15,678 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:15,678 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:15,678 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:15,678 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:15,679 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:15,679 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f [2021-12-17 15:09:15,941 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:15,963 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:15,965 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:15,966 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:15,967 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:15,968 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2021-12-17 15:09:16,020 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7aebc01dd/a5866bfa49134ba9a0c1d44f530fca01/FLAG14a0c431a [2021-12-17 15:09:16,494 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:16,494 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2021-12-17 15:09:16,519 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7aebc01dd/a5866bfa49134ba9a0c1d44f530fca01/FLAG14a0c431a [2021-12-17 15:09:16,799 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7aebc01dd/a5866bfa49134ba9a0c1d44f530fca01 [2021-12-17 15:09:16,801 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:16,803 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:16,807 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:16,807 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:16,810 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:16,811 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:16" (1/1) ... [2021-12-17 15:09:16,812 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7dc5ccf1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:16, skipping insertion in model container [2021-12-17 15:09:16,813 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:16" (1/1) ... [2021-12-17 15:09:16,818 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:16,849 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:16,950 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2021-12-17 15:09:17,080 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:17,087 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:17,098 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2021-12-17 15:09:17,159 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:17,177 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:17,178 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17 WrapperNode [2021-12-17 15:09:17,178 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:17,179 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:17,179 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:17,179 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:17,184 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,201 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,227 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 292 [2021-12-17 15:09:17,227 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:17,228 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:17,228 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:17,228 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:17,235 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,235 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,237 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,238 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,243 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,254 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,255 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,257 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:17,260 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:17,272 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:17,272 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:17,275 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (1/1) ... [2021-12-17 15:09:17,283 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:17,290 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:17,299 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:17,301 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:17,326 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:17,327 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:17,327 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:17,327 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:17,327 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:17,327 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:17,327 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:17,328 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:17,328 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:17,328 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:17,328 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:17,328 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:17,328 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:17,329 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:09:17,329 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:09:17,329 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:17,329 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:17,329 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:17,329 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:17,329 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:17,329 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:17,330 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:17,410 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:17,412 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:17,769 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:17,775 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:17,775 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:17,777 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:17 BoogieIcfgContainer [2021-12-17 15:09:17,777 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:17,778 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:17,778 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:17,781 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:17,782 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:16" (1/3) ... [2021-12-17 15:09:17,782 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@21bcf377 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:17, skipping insertion in model container [2021-12-17 15:09:17,782 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:17" (2/3) ... [2021-12-17 15:09:17,783 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@21bcf377 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:17, skipping insertion in model container [2021-12-17 15:09:17,783 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:17" (3/3) ... [2021-12-17 15:09:17,784 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2021-12-17 15:09:17,788 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:17,789 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:17,826 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:17,832 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:17,832 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:17,855 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:17,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-17 15:09:17,866 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:17,867 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:17,867 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:17,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:17,876 INFO L85 PathProgramCache]: Analyzing trace with hash 1971423540, now seen corresponding path program 1 times [2021-12-17 15:09:17,884 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:17,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [85436339] [2021-12-17 15:09:17,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:17,886 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,098 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:18,099 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:18,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [85436339] [2021-12-17 15:09:18,100 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [85436339] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:18,100 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:18,100 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:18,102 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261892250] [2021-12-17 15:09:18,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:18,106 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:18,106 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:18,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:18,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:18,136 INFO L87 Difference]: Start difference. First operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,189 INFO L93 Difference]: Finished difference Result 200 states and 271 transitions. [2021-12-17 15:09:18,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:18,191 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-17 15:09:18,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,202 INFO L225 Difference]: With dead ends: 200 [2021-12-17 15:09:18,203 INFO L226 Difference]: Without dead ends: 95 [2021-12-17 15:09:18,207 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:18,211 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,212 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:18,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2021-12-17 15:09:18,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2021-12-17 15:09:18,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:09:18,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2021-12-17 15:09:18,264 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 19 [2021-12-17 15:09:18,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,265 INFO L470 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2021-12-17 15:09:18,265 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,265 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2021-12-17 15:09:18,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-17 15:09:18,269 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:18,269 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:18,269 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:18,270 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:18,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:18,273 INFO L85 PathProgramCache]: Analyzing trace with hash -856589602, now seen corresponding path program 1 times [2021-12-17 15:09:18,274 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:18,274 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650850077] [2021-12-17 15:09:18,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,274 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:18,380 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:18,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650850077] [2021-12-17 15:09:18,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650850077] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:18,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:18,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:18,382 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220332991] [2021-12-17 15:09:18,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:18,383 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:18,383 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:18,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:18,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:18,385 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,410 INFO L93 Difference]: Finished difference Result 155 states and 201 transitions. [2021-12-17 15:09:18,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:18,414 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-17 15:09:18,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,416 INFO L225 Difference]: With dead ends: 155 [2021-12-17 15:09:18,417 INFO L226 Difference]: Without dead ends: 86 [2021-12-17 15:09:18,418 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:18,420 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 13 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,421 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 203 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:18,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-12-17 15:09:18,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-12-17 15:09:18,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.328125) internal successors, (85), 73 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:18,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2021-12-17 15:09:18,437 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 20 [2021-12-17 15:09:18,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,438 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2021-12-17 15:09:18,439 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,439 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2021-12-17 15:09:18,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-17 15:09:18,440 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:18,440 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:18,440 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:18,441 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:18,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:18,441 INFO L85 PathProgramCache]: Analyzing trace with hash 2135542647, now seen corresponding path program 1 times [2021-12-17 15:09:18,442 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:18,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537947956] [2021-12-17 15:09:18,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,442 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:18,562 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:18,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537947956] [2021-12-17 15:09:18,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537947956] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:18,562 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:18,562 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:18,562 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587770002] [2021-12-17 15:09:18,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:18,563 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:18,563 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:18,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:18,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:18,564 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,639 INFO L93 Difference]: Finished difference Result 165 states and 216 transitions. [2021-12-17 15:09:18,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:18,639 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2021-12-17 15:09:18,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,641 INFO L225 Difference]: With dead ends: 165 [2021-12-17 15:09:18,641 INFO L226 Difference]: Without dead ends: 86 [2021-12-17 15:09:18,642 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:18,645 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 136 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,646 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 280 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:18,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-12-17 15:09:18,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-12-17 15:09:18,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 73 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:18,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2021-12-17 15:09:18,658 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 25 [2021-12-17 15:09:18,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,659 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2021-12-17 15:09:18,659 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:18,659 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2021-12-17 15:09:18,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:18,661 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:18,661 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:18,661 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:18,661 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:18,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:18,662 INFO L85 PathProgramCache]: Analyzing trace with hash -181443690, now seen corresponding path program 1 times [2021-12-17 15:09:18,662 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:18,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1923014975] [2021-12-17 15:09:18,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,663 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:18,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:18,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:18,723 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:18,724 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:18,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1923014975] [2021-12-17 15:09:18,724 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1923014975] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:18,724 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:18,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:09:18,725 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [363648033] [2021-12-17 15:09:18,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:18,726 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-17 15:09:18,726 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:18,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-17 15:09:18,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:09:18,727 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:18,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:18,884 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2021-12-17 15:09:18,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:18,885 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-17 15:09:18,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:18,887 INFO L225 Difference]: With dead ends: 241 [2021-12-17 15:09:18,887 INFO L226 Difference]: Without dead ends: 162 [2021-12-17 15:09:18,888 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:18,889 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 153 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:18,889 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 203 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:18,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-17 15:09:18,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2021-12-17 15:09:18,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.26890756302521) internal successors, (151), 128 states have internal predecessors, (151), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2021-12-17 15:09:18,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 194 transitions. [2021-12-17 15:09:18,918 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 194 transitions. Word has length 38 [2021-12-17 15:09:18,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:18,919 INFO L470 AbstractCegarLoop]: Abstraction has 156 states and 194 transitions. [2021-12-17 15:09:18,919 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:18,919 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 194 transitions. [2021-12-17 15:09:18,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-17 15:09:18,924 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:18,924 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:18,924 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:18,925 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:18,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:18,925 INFO L85 PathProgramCache]: Analyzing trace with hash -91120732, now seen corresponding path program 1 times [2021-12-17 15:09:18,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:18,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375598711] [2021-12-17 15:09:18,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:18,926 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:18,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:19,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:19,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:19,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:19,043 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:19,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375598711] [2021-12-17 15:09:19,043 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1375598711] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:19,044 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:19,044 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-17 15:09:19,044 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1431159705] [2021-12-17 15:09:19,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:19,045 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-17 15:09:19,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:19,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-17 15:09:19,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:19,046 INFO L87 Difference]: Start difference. First operand 156 states and 194 transitions. Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:19,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:19,531 INFO L93 Difference]: Finished difference Result 544 states and 736 transitions. [2021-12-17 15:09:19,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-12-17 15:09:19,532 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-17 15:09:19,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:19,535 INFO L225 Difference]: With dead ends: 544 [2021-12-17 15:09:19,535 INFO L226 Difference]: Without dead ends: 395 [2021-12-17 15:09:19,536 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2021-12-17 15:09:19,537 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 339 mSDsluCounter, 577 mSDsCounter, 0 mSdLazyCounter, 466 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 690 SdHoareTripleChecker+Invalid, 566 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 466 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:19,537 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [344 Valid, 690 Invalid, 566 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 466 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:09:19,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2021-12-17 15:09:19,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2021-12-17 15:09:19,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 286 states have (on average 1.2377622377622377) internal successors, (354), 306 states have internal predecessors, (354), 40 states have call successors, (40), 38 states have call predecessors, (40), 50 states have return successors, (90), 46 states have call predecessors, (90), 40 states have call successors, (90) [2021-12-17 15:09:19,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 484 transitions. [2021-12-17 15:09:19,569 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 484 transitions. Word has length 46 [2021-12-17 15:09:19,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:19,569 INFO L470 AbstractCegarLoop]: Abstraction has 377 states and 484 transitions. [2021-12-17 15:09:19,569 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:19,569 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 484 transitions. [2021-12-17 15:09:19,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2021-12-17 15:09:19,571 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:19,571 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:19,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:19,572 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:19,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:19,572 INFO L85 PathProgramCache]: Analyzing trace with hash 908063002, now seen corresponding path program 1 times [2021-12-17 15:09:19,572 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:19,573 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1453153174] [2021-12-17 15:09:19,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:19,573 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:19,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:19,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:19,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:19,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:19,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-17 15:09:19,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-17 15:09:19,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-17 15:09:19,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:19,704 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:09:19,704 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:19,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1453153174] [2021-12-17 15:09:19,705 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1453153174] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:19,705 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:19,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-17 15:09:19,705 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043138702] [2021-12-17 15:09:19,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:19,706 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:09:19,706 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:19,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:09:19,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:19,707 INFO L87 Difference]: Start difference. First operand 377 states and 484 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-17 15:09:19,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:19,956 INFO L93 Difference]: Finished difference Result 840 states and 1145 transitions. [2021-12-17 15:09:19,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:09:19,957 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2021-12-17 15:09:19,957 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:19,963 INFO L225 Difference]: With dead ends: 840 [2021-12-17 15:09:19,963 INFO L226 Difference]: Without dead ends: 470 [2021-12-17 15:09:19,965 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:19,966 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 109 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:19,966 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [113 Valid, 432 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:19,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2021-12-17 15:09:19,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 431. [2021-12-17 15:09:19,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 355 states have internal predecessors, (404), 44 states have call successors, (44), 38 states have call predecessors, (44), 56 states have return successors, (104), 51 states have call predecessors, (104), 44 states have call successors, (104) [2021-12-17 15:09:20,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 552 transitions. [2021-12-17 15:09:20,006 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 552 transitions. Word has length 93 [2021-12-17 15:09:20,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:20,006 INFO L470 AbstractCegarLoop]: Abstraction has 431 states and 552 transitions. [2021-12-17 15:09:20,007 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-17 15:09:20,007 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 552 transitions. [2021-12-17 15:09:20,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2021-12-17 15:09:20,008 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:20,009 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:20,009 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:20,009 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:20,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:20,010 INFO L85 PathProgramCache]: Analyzing trace with hash -1534943524, now seen corresponding path program 1 times [2021-12-17 15:09:20,010 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:20,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [308359445] [2021-12-17 15:09:20,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:20,010 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:20,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-17 15:09:20,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:20,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:20,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:20,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-17 15:09:20,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-17 15:09:20,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,141 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-17 15:09:20,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:20,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [308359445] [2021-12-17 15:09:20,141 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [308359445] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:20,142 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:20,142 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:20,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029607551] [2021-12-17 15:09:20,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:20,144 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:20,144 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:20,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:20,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:20,145 INFO L87 Difference]: Start difference. First operand 431 states and 552 transitions. Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:09:20,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:20,319 INFO L93 Difference]: Finished difference Result 805 states and 1066 transitions. [2021-12-17 15:09:20,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:09:20,320 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) Word has length 85 [2021-12-17 15:09:20,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:20,323 INFO L225 Difference]: With dead ends: 805 [2021-12-17 15:09:20,323 INFO L226 Difference]: Without dead ends: 381 [2021-12-17 15:09:20,324 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:20,326 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 145 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 183 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 231 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:20,326 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [150 Valid, 298 Invalid, 231 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:20,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2021-12-17 15:09:20,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 368. [2021-12-17 15:09:20,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 280 states have (on average 1.2142857142857142) internal successors, (340), 301 states have internal predecessors, (340), 40 states have call successors, (40), 33 states have call predecessors, (40), 47 states have return successors, (86), 44 states have call predecessors, (86), 40 states have call successors, (86) [2021-12-17 15:09:20,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 466 transitions. [2021-12-17 15:09:20,354 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 466 transitions. Word has length 85 [2021-12-17 15:09:20,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:20,355 INFO L470 AbstractCegarLoop]: Abstraction has 368 states and 466 transitions. [2021-12-17 15:09:20,355 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:09:20,355 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 466 transitions. [2021-12-17 15:09:20,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2021-12-17 15:09:20,357 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:20,358 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:20,358 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:20,358 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:20,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:20,359 INFO L85 PathProgramCache]: Analyzing trace with hash -1842726242, now seen corresponding path program 1 times [2021-12-17 15:09:20,359 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:20,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192722097] [2021-12-17 15:09:20,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:20,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:20,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:20,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:20,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:20,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:20,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:20,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-17 15:09:20,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-17 15:09:20,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-17 15:09:20,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,487 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-12-17 15:09:20,487 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:20,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192722097] [2021-12-17 15:09:20,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192722097] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:20,488 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:20,488 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:20,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702130093] [2021-12-17 15:09:20,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:20,489 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:20,489 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:20,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:20,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:20,490 INFO L87 Difference]: Start difference. First operand 368 states and 466 transitions. Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 4 states have internal predecessors, (73), 3 states have call successors, (9), 5 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-17 15:09:20,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:20,828 INFO L93 Difference]: Finished difference Result 721 states and 937 transitions. [2021-12-17 15:09:20,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:09:20,828 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 4 states have internal predecessors, (73), 3 states have call successors, (9), 5 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 93 [2021-12-17 15:09:20,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:20,832 INFO L225 Difference]: With dead ends: 721 [2021-12-17 15:09:20,832 INFO L226 Difference]: Without dead ends: 408 [2021-12-17 15:09:20,833 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 17 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-17 15:09:20,835 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 356 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 460 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:20,835 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [359 Valid, 406 Invalid, 460 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:09:20,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2021-12-17 15:09:20,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 393. [2021-12-17 15:09:20,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 393 states, 298 states have (on average 1.2080536912751678) internal successors, (360), 317 states have internal predecessors, (360), 45 states have call successors, (45), 42 states have call predecessors, (45), 49 states have return successors, (87), 46 states have call predecessors, (87), 45 states have call successors, (87) [2021-12-17 15:09:20,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 393 states to 393 states and 492 transitions. [2021-12-17 15:09:20,860 INFO L78 Accepts]: Start accepts. Automaton has 393 states and 492 transitions. Word has length 93 [2021-12-17 15:09:20,861 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:20,861 INFO L470 AbstractCegarLoop]: Abstraction has 393 states and 492 transitions. [2021-12-17 15:09:20,861 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 4 states have internal predecessors, (73), 3 states have call successors, (9), 5 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-17 15:09:20,861 INFO L276 IsEmpty]: Start isEmpty. Operand 393 states and 492 transitions. [2021-12-17 15:09:20,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-17 15:09:20,868 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:20,868 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:20,868 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:20,869 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:20,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:20,869 INFO L85 PathProgramCache]: Analyzing trace with hash -1438943688, now seen corresponding path program 1 times [2021-12-17 15:09:20,869 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:20,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [389674472] [2021-12-17 15:09:20,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:20,870 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:20,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:20,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:20,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:20,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:20,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:20,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-17 15:09:20,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-17 15:09:20,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:20,959 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-17 15:09:20,959 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:20,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [389674472] [2021-12-17 15:09:20,959 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [389674472] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:20,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1474338087] [2021-12-17 15:09:20,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:20,960 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:20,960 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:20,962 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:20,963 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:21,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:21,060 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:21,065 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:21,363 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:21,364 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:21,601 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-12-17 15:09:21,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1474338087] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:21,602 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:21,602 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2021-12-17 15:09:21,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736895040] [2021-12-17 15:09:21,602 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:21,603 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-17 15:09:21,603 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:21,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-17 15:09:21,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:21,606 INFO L87 Difference]: Start difference. First operand 393 states and 492 transitions. Second operand has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-17 15:09:22,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:22,780 INFO L93 Difference]: Finished difference Result 897 states and 1184 transitions. [2021-12-17 15:09:22,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2021-12-17 15:09:22,781 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 89 [2021-12-17 15:09:22,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:22,789 INFO L225 Difference]: With dead ends: 897 [2021-12-17 15:09:22,789 INFO L226 Difference]: Without dead ends: 559 [2021-12-17 15:09:22,791 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 204 SyntacticMatches, 1 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 826 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=481, Invalid=2275, Unknown=0, NotChecked=0, Total=2756 [2021-12-17 15:09:22,794 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 770 mSDsluCounter, 732 mSDsCounter, 0 mSdLazyCounter, 1119 mSolverCounterSat, 301 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 777 SdHoareTripleChecker+Valid, 889 SdHoareTripleChecker+Invalid, 1420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 301 IncrementalHoareTripleChecker+Valid, 1119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:22,794 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [777 Valid, 889 Invalid, 1420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [301 Valid, 1119 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-17 15:09:22,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 559 states. [2021-12-17 15:09:22,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 559 to 468. [2021-12-17 15:09:22,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 351 states have (on average 1.207977207977208) internal successors, (424), 376 states have internal predecessors, (424), 56 states have call successors, (56), 51 states have call predecessors, (56), 60 states have return successors, (115), 53 states have call predecessors, (115), 56 states have call successors, (115) [2021-12-17 15:09:22,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 595 transitions. [2021-12-17 15:09:22,819 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 595 transitions. Word has length 89 [2021-12-17 15:09:22,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:22,820 INFO L470 AbstractCegarLoop]: Abstraction has 468 states and 595 transitions. [2021-12-17 15:09:22,820 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-17 15:09:22,820 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 595 transitions. [2021-12-17 15:09:22,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-17 15:09:22,823 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:22,824 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:22,853 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-17 15:09:23,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:23,050 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:23,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:23,050 INFO L85 PathProgramCache]: Analyzing trace with hash 1270234994, now seen corresponding path program 1 times [2021-12-17 15:09:23,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:23,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2007114261] [2021-12-17 15:09:23,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:23,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:23,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:23,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:23,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:23,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:23,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:23,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:09:23,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2021-12-17 15:09:23,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:23,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:23,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:23,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-17 15:09:23,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-12-17 15:09:23,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:23,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:23,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,260 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-17 15:09:23,260 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:23,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2007114261] [2021-12-17 15:09:23,261 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2007114261] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:23,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [596724314] [2021-12-17 15:09:23,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:23,261 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:23,261 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:23,262 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:23,272 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:09:23,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:23,384 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-17 15:09:23,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:23,763 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 88 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-17 15:09:23,763 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:24,249 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-17 15:09:24,249 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [596724314] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:24,249 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:24,250 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 17 [2021-12-17 15:09:24,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1478631792] [2021-12-17 15:09:24,250 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:24,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-12-17 15:09:24,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:24,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-17 15:09:24,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=211, Unknown=0, NotChecked=0, Total=272 [2021-12-17 15:09:24,252 INFO L87 Difference]: Start difference. First operand 468 states and 595 transitions. Second operand has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-17 15:09:25,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:25,367 INFO L93 Difference]: Finished difference Result 1253 states and 1679 transitions. [2021-12-17 15:09:25,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-12-17 15:09:25,368 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 150 [2021-12-17 15:09:25,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:25,373 INFO L225 Difference]: With dead ends: 1253 [2021-12-17 15:09:25,373 INFO L226 Difference]: Without dead ends: 839 [2021-12-17 15:09:25,375 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 370 GetRequests, 324 SyntacticMatches, 9 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 302 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=384, Invalid=1098, Unknown=0, NotChecked=0, Total=1482 [2021-12-17 15:09:25,376 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 670 mSDsluCounter, 683 mSDsCounter, 0 mSdLazyCounter, 977 mSolverCounterSat, 387 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 674 SdHoareTripleChecker+Valid, 890 SdHoareTripleChecker+Invalid, 1364 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 387 IncrementalHoareTripleChecker+Valid, 977 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:25,377 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [674 Valid, 890 Invalid, 1364 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [387 Valid, 977 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-17 15:09:25,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2021-12-17 15:09:25,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 729. [2021-12-17 15:09:25,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 729 states, 544 states have (on average 1.2022058823529411) internal successors, (654), 578 states have internal predecessors, (654), 86 states have call successors, (86), 79 states have call predecessors, (86), 98 states have return successors, (181), 88 states have call predecessors, (181), 86 states have call successors, (181) [2021-12-17 15:09:25,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 729 states to 729 states and 921 transitions. [2021-12-17 15:09:25,418 INFO L78 Accepts]: Start accepts. Automaton has 729 states and 921 transitions. Word has length 150 [2021-12-17 15:09:25,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:25,418 INFO L470 AbstractCegarLoop]: Abstraction has 729 states and 921 transitions. [2021-12-17 15:09:25,418 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-17 15:09:25,419 INFO L276 IsEmpty]: Start isEmpty. Operand 729 states and 921 transitions. [2021-12-17 15:09:25,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-17 15:09:25,421 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:25,421 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:25,448 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:25,635 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:25,636 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:25,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:25,636 INFO L85 PathProgramCache]: Analyzing trace with hash -2070792144, now seen corresponding path program 1 times [2021-12-17 15:09:25,636 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:25,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464067015] [2021-12-17 15:09:25,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:25,637 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:25,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:09:25,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:25,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:09:25,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:25,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:25,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:09:25,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2021-12-17 15:09:25,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:25,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:25,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:25,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-17 15:09:25,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-12-17 15:09:25,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:25,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:25,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,752 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-17 15:09:25,752 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:25,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464067015] [2021-12-17 15:09:25,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464067015] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:25,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [861309917] [2021-12-17 15:09:25,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:25,753 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:25,753 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:25,754 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:25,762 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-17 15:09:25,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:25,861 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-17 15:09:25,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:26,129 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2021-12-17 15:09:26,130 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:09:26,130 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [861309917] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:26,130 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:09:26,130 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 10 [2021-12-17 15:09:26,131 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82371035] [2021-12-17 15:09:26,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:26,131 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:26,132 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:26,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:26,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:26,133 INFO L87 Difference]: Start difference. First operand 729 states and 921 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-17 15:09:26,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:26,170 INFO L93 Difference]: Finished difference Result 961 states and 1203 transitions. [2021-12-17 15:09:26,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:26,171 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2021-12-17 15:09:26,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:26,171 INFO L225 Difference]: With dead ends: 961 [2021-12-17 15:09:26,172 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:09:26,175 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 180 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:09:26,175 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 9 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:26,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 415 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:26,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:09:26,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:09:26,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:26,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:09:26,177 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2021-12-17 15:09:26,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:26,177 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:09:26,178 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-17 15:09:26,178 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:09:26,178 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:09:26,180 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:09:26,207 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:26,399 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:26,401 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:09:28,506 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 278 285) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0)) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) [2021-12-17 15:09:28,506 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 278 285) no Hoare annotation was computed. [2021-12-17 15:09:28,506 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 278 285) no Hoare annotation was computed. [2021-12-17 15:09:28,506 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 168 174) no Hoare annotation was computed. [2021-12-17 15:09:28,506 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 168 174) the Hoare annotation is: true [2021-12-17 15:09:28,506 INFO L858 garLoopResultBuilder]: For program point L946-1(lines 942 953) no Hoare annotation was computed. [2021-12-17 15:09:28,506 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 942 953) the Hoare annotation is: true [2021-12-17 15:09:28,506 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 942 953) no Hoare annotation was computed. [2021-12-17 15:09:28,507 INFO L861 garLoopResultBuilder]: At program point L480(lines 455 484) the Hoare annotation is: true [2021-12-17 15:09:28,507 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 455 484) no Hoare annotation was computed. [2021-12-17 15:09:28,507 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 455 484) the Hoare annotation is: true [2021-12-17 15:09:28,507 INFO L858 garLoopResultBuilder]: For program point L476(line 476) no Hoare annotation was computed. [2021-12-17 15:09:28,507 INFO L858 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2021-12-17 15:09:28,507 INFO L861 garLoopResultBuilder]: At program point L469-1(lines 469 473) the Hoare annotation is: true [2021-12-17 15:09:28,507 INFO L858 garLoopResultBuilder]: For program point L466(line 466) no Hoare annotation was computed. [2021-12-17 15:09:28,507 INFO L861 garLoopResultBuilder]: At program point L465-2(lines 465 479) the Hoare annotation is: true [2021-12-17 15:09:28,508 INFO L861 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: true [2021-12-17 15:09:28,508 INFO L858 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2021-12-17 15:09:28,508 INFO L858 garLoopResultBuilder]: For program point L155-1(lines 155 161) no Hoare annotation was computed. [2021-12-17 15:09:28,508 INFO L854 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-17 15:09:28,508 INFO L854 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-17 15:09:28,508 INFO L854 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-17 15:09:28,509 INFO L858 garLoopResultBuilder]: For program point L234-1(line 234) no Hoare annotation was computed. [2021-12-17 15:09:28,509 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 144 167) no Hoare annotation was computed. [2021-12-17 15:09:28,509 INFO L854 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse1) (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1)))) [2021-12-17 15:09:28,509 INFO L854 garLoopResultBuilder]: At program point L247-1(lines 228 252) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0))) (and (let ((.cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and .cse1 .cse2) (and .cse3 .cse1))) (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse4 .cse3) (and .cse4 .cse2) (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)))))) [2021-12-17 15:09:28,509 INFO L858 garLoopResultBuilder]: For program point L148-1(lines 147 166) no Hoare annotation was computed. [2021-12-17 15:09:28,509 INFO L854 garLoopResultBuilder]: At program point L991(lines 986 994) the Hoare annotation is: (let ((.cse2 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse3 (= ~pumpRunning~0 0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 .cse3) .cse4) (let ((.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse5 .cse0 (and (<= 2 ~waterLevel~0) .cse6 .cse2) (and .cse6 .cse2 .cse3))) (or .cse5 .cse0 .cse1 .cse4))) [2021-12-17 15:09:28,510 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-17 15:09:28,510 INFO L854 garLoopResultBuilder]: At program point L302(lines 297 305) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0))) [2021-12-17 15:09:28,510 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 244) no Hoare annotation was computed. [2021-12-17 15:09:28,510 INFO L858 garLoopResultBuilder]: For program point L232(lines 232 249) no Hoare annotation was computed. [2021-12-17 15:09:28,510 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2021-12-17 15:09:28,510 INFO L854 garLoopResultBuilder]: At program point L922-2(lines 918 929) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-17 15:09:28,511 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0))) [2021-12-17 15:09:28,511 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2021-12-17 15:09:28,511 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 144 167) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))))) [2021-12-17 15:09:28,511 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 411) no Hoare annotation was computed. [2021-12-17 15:09:28,512 INFO L854 garLoopResultBuilder]: At program point L398-1(lines 390 414) the Hoare annotation is: (let ((.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (let ((.cse2 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 (and (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse2 .cse3 .cse4 .cse5))) (or (and .cse3 .cse4 .cse5) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2021-12-17 15:09:28,516 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 144 167) no Hoare annotation was computed. [2021-12-17 15:09:28,516 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-17 15:09:28,516 INFO L854 garLoopResultBuilder]: At program point L122(lines 73 123) the Hoare annotation is: false [2021-12-17 15:09:28,516 INFO L861 garLoopResultBuilder]: At program point L523(lines 516 525) the Hoare annotation is: true [2021-12-17 15:09:28,516 INFO L854 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:28,516 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:09:28,517 INFO L858 garLoopResultBuilder]: For program point L94(lines 94 100) no Hoare annotation was computed. [2021-12-17 15:09:28,517 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:09:28,517 INFO L858 garLoopResultBuilder]: For program point L94-1(lines 94 100) no Hoare annotation was computed. [2021-12-17 15:09:28,517 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:09:28,518 INFO L854 garLoopResultBuilder]: At program point L441(lines 437 443) the Hoare annotation is: (and (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:28,518 INFO L858 garLoopResultBuilder]: For program point L536(lines 536 543) no Hoare annotation was computed. [2021-12-17 15:09:28,518 INFO L854 garLoopResultBuilder]: At program point L119(lines 74 121) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 |ULTIMATE.start_main_~tmp~8#1|) .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse1 .cse2 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,519 INFO L854 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 |ULTIMATE.start_main_~tmp~8#1|) .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse1 .cse2 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,520 INFO L858 garLoopResultBuilder]: For program point L536-2(lines 536 543) no Hoare annotation was computed. [2021-12-17 15:09:28,520 INFO L861 garLoopResultBuilder]: At program point L545(lines 526 548) the Hoare annotation is: true [2021-12-17 15:09:28,520 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:09:28,520 INFO L854 garLoopResultBuilder]: At program point L434(lines 430 436) the Hoare annotation is: (and (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:28,520 INFO L858 garLoopResultBuilder]: For program point L112(lines 112 116) no Hoare annotation was computed. [2021-12-17 15:09:28,520 INFO L854 garLoopResultBuilder]: At program point L112-2(lines 104 117) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 |ULTIMATE.start_main_~tmp~8#1|) .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse1 .cse2 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,521 INFO L858 garLoopResultBuilder]: For program point L75(lines 74 121) no Hoare annotation was computed. [2021-12-17 15:09:28,521 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 117) no Hoare annotation was computed. [2021-12-17 15:09:28,521 INFO L854 garLoopResultBuilder]: At program point L513(lines 509 515) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:28,521 INFO L854 garLoopResultBuilder]: At program point L385(lines 380 387) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 |ULTIMATE.start_main_~tmp~8#1|) .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse1 .cse2 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,521 INFO L854 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 |ULTIMATE.start_main_~tmp~8#1|) .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse1 .cse2 (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,522 INFO L861 garLoopResultBuilder]: At program point L125(lines 64 129) the Hoare annotation is: true [2021-12-17 15:09:28,522 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2021-12-17 15:09:28,522 INFO L858 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2021-12-17 15:09:28,522 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2021-12-17 15:09:28,522 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 176 200) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:28,522 INFO L858 garLoopResultBuilder]: For program point L351(lines 351 355) no Hoare annotation was computed. [2021-12-17 15:09:28,522 INFO L854 garLoopResultBuilder]: At program point L190(line 190) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (and .cse2 .cse3) (not (<= 2 ~waterLevel~0))) (or .cse0 (not (= ~waterLevel~0 1)) .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 1) .cse2 .cse3)))) [2021-12-17 15:09:28,524 INFO L858 garLoopResultBuilder]: For program point L351-2(lines 351 355) no Hoare annotation was computed. [2021-12-17 15:09:28,524 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 192) no Hoare annotation was computed. [2021-12-17 15:09:28,524 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2021-12-17 15:09:28,524 INFO L854 garLoopResultBuilder]: At program point L1004(lines 995 1008) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or .cse0 (not (= ~waterLevel~0 1)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse2) .cse1))) [2021-12-17 15:09:28,524 INFO L854 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0))) [2021-12-17 15:09:28,524 INFO L858 garLoopResultBuilder]: For program point L195-1(lines 176 200) no Hoare annotation was computed. [2021-12-17 15:09:28,525 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 176 200) no Hoare annotation was computed. [2021-12-17 15:09:28,525 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2021-12-17 15:09:28,525 INFO L854 garLoopResultBuilder]: At program point L266(line 266) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= ~waterLevel~0 1)) .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:09:28,526 INFO L854 garLoopResultBuilder]: At program point L268-2(lines 261 277) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0))) [2021-12-17 15:09:28,526 INFO L858 garLoopResultBuilder]: For program point L266-1(line 266) no Hoare annotation was computed. [2021-12-17 15:09:28,526 INFO L858 garLoopResultBuilder]: For program point L999(lines 999 1005) no Hoare annotation was computed. [2021-12-17 15:09:28,526 INFO L854 garLoopResultBuilder]: At program point L357(lines 342 360) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse1) (not (= ~waterLevel~0 1)) .cse2) (or .cse0 .cse2 (not (<= 2 ~waterLevel~0)) .cse1))) [2021-12-17 15:09:28,526 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 260) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (<= 2 ~waterLevel~0)) [2021-12-17 15:09:28,526 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 930 941) no Hoare annotation was computed. [2021-12-17 15:09:28,526 INFO L858 garLoopResultBuilder]: For program point L934-1(lines 930 941) no Hoare annotation was computed. [2021-12-17 15:09:28,527 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 930 941) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse1))) [2021-12-17 15:09:28,527 INFO L854 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (or (= 0 ~systemActive~0) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (not (<= 1 ~waterLevel~0))) [2021-12-17 15:09:28,527 INFO L858 garLoopResultBuilder]: For program point L221-1(lines 202 226) no Hoare annotation was computed. [2021-12-17 15:09:28,527 INFO L854 garLoopResultBuilder]: At program point L376(lines 361 379) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= 0 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|))))) [2021-12-17 15:09:28,528 INFO L854 garLoopResultBuilder]: At program point L1014(lines 1009 1017) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 (and (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse1) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:28,528 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2021-12-17 15:09:28,528 INFO L858 garLoopResultBuilder]: For program point L370-2(lines 370 374) no Hoare annotation was computed. [2021-12-17 15:09:28,529 INFO L854 garLoopResultBuilder]: At program point L216(line 216) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0))) [2021-12-17 15:09:28,529 INFO L854 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= 0 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|)) .cse1) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:28,529 INFO L858 garLoopResultBuilder]: For program point L210(lines 210 218) no Hoare annotation was computed. [2021-12-17 15:09:28,529 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 202 226) the Hoare annotation is: (or (= 0 ~systemActive~0) (not (<= 1 ~waterLevel~0)) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) [2021-12-17 15:09:28,529 INFO L858 garLoopResultBuilder]: For program point L206(lines 206 223) no Hoare annotation was computed. [2021-12-17 15:09:28,529 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 202 226) no Hoare annotation was computed. [2021-12-17 15:09:28,530 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 286 296) the Hoare annotation is: true [2021-12-17 15:09:28,530 INFO L861 garLoopResultBuilder]: At program point L959(lines 954 962) the Hoare annotation is: true [2021-12-17 15:09:28,530 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 286 296) no Hoare annotation was computed. [2021-12-17 15:09:28,530 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 286 296) no Hoare annotation was computed. [2021-12-17 15:09:28,533 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:28,534 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:09:28,554 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:09:28 BoogieIcfgContainer [2021-12-17 15:09:28,554 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:09:28,555 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:09:28,555 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:09:28,555 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:09:28,556 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:17" (3/4) ... [2021-12-17 15:09:28,558 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:09:28,563 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:09:28,563 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:09:28,563 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:09:28,563 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:09:28,563 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:09:28,564 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:28,564 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:09:28,564 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:28,564 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:09:28,571 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-17 15:09:28,571 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:09:28,572 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:09:28,572 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:09:28,573 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:09:28,573 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:28,573 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:28,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((waterLevel == 1 && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:09:28,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:09:28,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && !(0 == systemActive)) || (((((splverifierCounter == 0 && waterLevel == 1) && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) [2021-12-17 15:09:28,593 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && ((!(2 <= \old(waterLevel)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2021-12-17 15:09:28,593 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(2 <= \old(waterLevel)) || 0 == systemActive) || (\old(waterLevel) <= waterLevel + 1 && pumpRunning == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) && ((((0 == systemActive || (waterLevel == \old(waterLevel) && 2 <= waterLevel)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) [2021-12-17 15:09:28,594 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && !(0 == systemActive)) || (((((splverifierCounter == 0 && waterLevel == 1) && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) [2021-12-17 15:09:28,594 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || !(\old(waterLevel) == 1)) || ((waterLevel == \old(waterLevel) && 1 <= \result) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((\old(waterLevel) <= waterLevel + 1 && 1 <= \result) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:28,594 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && 1 <= \result)) || (((\old(waterLevel) <= waterLevel + 1 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0))) && (((((1 <= tmp && 1 <= \result) && pumpRunning == 0) || 0 == systemActive) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:28,595 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || (\result == 0 && pumpRunning == \old(pumpRunning))) || !(1 <= waterLevel)) && ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:28,595 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (!(2 <= \old(waterLevel)) || 0 == systemActive) [2021-12-17 15:09:28,595 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (0 == systemActive || !(waterLevel == 1)) || !(\old(pumpRunning) == 0) [2021-12-17 15:09:28,595 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(2 <= waterLevel)) || pumpRunning == 0) && (((0 == systemActive || !(waterLevel == 1)) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:28,595 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel [2021-12-17 15:09:28,596 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) && ((0 == systemActive || !(1 <= waterLevel)) || ((((1 <= \result && \result == 0) && 0 == tmp) && pumpRunning == \old(pumpRunning)) && 1 <= tmp___0)) [2021-12-17 15:09:28,596 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (!(2 <= \old(waterLevel)) || 0 == systemActive) [2021-12-17 15:09:28,596 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || ((((\result == 1 && tmp == 1) && \result == 0) && tmp___0 == 0) && pumpRunning == 0)) || !(waterLevel == 1)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(2 <= waterLevel)) || pumpRunning == 0) [2021-12-17 15:09:28,634 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:09:28,635 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:09:28,635 INFO L158 Benchmark]: Toolchain (without parser) took 11832.78ms. Allocated memory was 102.8MB in the beginning and 188.7MB in the end (delta: 86.0MB). Free memory was 75.2MB in the beginning and 111.8MB in the end (delta: -36.6MB). Peak memory consumption was 48.6MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,636 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 102.8MB. Free memory was 60.7MB in the beginning and 60.7MB in the end (delta: 41.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:09:28,636 INFO L158 Benchmark]: CACSL2BoogieTranslator took 370.77ms. Allocated memory is still 102.8MB. Free memory was 75.0MB in the beginning and 71.4MB in the end (delta: 3.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,636 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.48ms. Allocated memory is still 102.8MB. Free memory was 71.4MB in the beginning and 68.6MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,636 INFO L158 Benchmark]: Boogie Preprocessor took 31.74ms. Allocated memory is still 102.8MB. Free memory was 68.6MB in the beginning and 66.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,637 INFO L158 Benchmark]: RCFGBuilder took 516.90ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 66.9MB in the beginning and 99.2MB in the end (delta: -32.3MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,638 INFO L158 Benchmark]: TraceAbstraction took 10776.20ms. Allocated memory was 123.7MB in the beginning and 188.7MB in the end (delta: 65.0MB). Free memory was 98.6MB in the beginning and 119.1MB in the end (delta: -20.6MB). Peak memory consumption was 115.0MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,638 INFO L158 Benchmark]: Witness Printer took 80.01ms. Allocated memory is still 188.7MB. Free memory was 119.1MB in the beginning and 111.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:28,640 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 102.8MB. Free memory was 60.7MB in the beginning and 60.7MB in the end (delta: 41.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 370.77ms. Allocated memory is still 102.8MB. Free memory was 75.0MB in the beginning and 71.4MB in the end (delta: 3.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.48ms. Allocated memory is still 102.8MB. Free memory was 71.4MB in the beginning and 68.6MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.74ms. Allocated memory is still 102.8MB. Free memory was 68.6MB in the beginning and 66.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 516.90ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 66.9MB in the beginning and 99.2MB in the end (delta: -32.3MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. * TraceAbstraction took 10776.20ms. Allocated memory was 123.7MB in the beginning and 188.7MB in the end (delta: 65.0MB). Free memory was 98.6MB in the beginning and 119.1MB in the end (delta: -20.6MB). Peak memory consumption was 115.0MB. Max. memory is 16.1GB. * Witness Printer took 80.01ms. Allocated memory is still 188.7MB. Free memory was 119.1MB in the beginning and 111.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.7s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2735 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2700 mSDsluCounter, 4838 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3443 mSDsCounter, 1074 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3458 IncrementalHoareTripleChecker+Invalid, 4532 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1074 mSolverCounterUnsat, 1395 mSDtfsCounter, 3458 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 948 GetRequests, 781 SyntacticMatches, 13 SemanticMatches, 154 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1245 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=729occurred in iteration=10, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 292 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1625 PreInvPairs, 1739 NumberOfFragments, 1070 HoareAnnotationTreeSize, 1625 FomulaSimplifications, 2050 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 49 FomulaSimplificationsInter, 8416 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 1197 NumberOfCodeBlocks, 1197 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1420 ConstructedInterpolants, 0 QuantifiedInterpolants, 2480 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1666 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 16 InterpolantComputations, 9 PerfectInterpolantSequences, 579/659 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: (((!(2 <= \old(waterLevel)) || 0 == systemActive) || (\old(waterLevel) <= waterLevel + 1 && pumpRunning == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) && ((((0 == systemActive || (waterLevel == \old(waterLevel) && 2 <= waterLevel)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && ((!(2 <= \old(waterLevel)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) && ((0 == systemActive || !(1 <= waterLevel)) || ((((1 <= \result && \result == 0) && 0 == tmp) && pumpRunning == \old(pumpRunning)) && 1 <= tmp___0)) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((0 == systemActive || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && 1 <= \result)) || (((\old(waterLevel) <= waterLevel + 1 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0))) && (((((1 <= tmp && 1 <= \result) && pumpRunning == 0) || 0 == systemActive) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && !(0 == systemActive)) || (((((splverifierCounter == 0 && waterLevel == 1) && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((0 == systemActive || (\result == 0 && pumpRunning == \old(pumpRunning))) || !(1 <= waterLevel)) && ((0 == systemActive || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: (0 == systemActive || !(waterLevel == 1)) || !(\old(pumpRunning) == 0) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (waterLevel == 1 && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(2 <= waterLevel)) || pumpRunning == 0) && (((0 == systemActive || !(waterLevel == 1)) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && !(0 == systemActive)) || (((((splverifierCounter == 0 && waterLevel == 1) && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) - InvariantResult [Line: 342]: Loop Invariant Derived loop invariant: (((0 == systemActive || ((((\result == 1 && tmp == 1) && \result == 0) && tmp___0 == 0) && pumpRunning == 0)) || !(waterLevel == 1)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(2 <= waterLevel)) || pumpRunning == 0) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (waterLevel == 1 && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((0 == systemActive || !(\old(waterLevel) == 1)) || ((waterLevel == \old(waterLevel) && 1 <= \result) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((\old(waterLevel) <= waterLevel + 1 && 1 <= \result) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && waterLevel == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (!(2 <= \old(waterLevel)) || 0 == systemActive) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((0 == systemActive || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (!(2 <= \old(waterLevel)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:09:28,704 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE