./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 86e7038cbd7079ed991c0d8924416f9d170b15a53536a052f3097e1f394171ef --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:36,132 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:36,133 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:36,152 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:36,153 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:36,153 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:36,154 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:36,156 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:36,158 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:36,160 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:36,161 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:36,162 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:36,162 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:36,163 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:36,164 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:36,165 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:36,180 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:36,181 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:36,182 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:36,184 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:36,185 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:36,189 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:36,190 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:36,191 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:36,200 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:36,211 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:36,211 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:36,212 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:36,212 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:36,213 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:36,213 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:36,214 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:36,214 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:36,215 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:36,220 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:36,220 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:36,220 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:36,221 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:36,221 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:36,221 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:36,222 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:36,223 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:36,250 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:36,271 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:36,272 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:36,272 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:36,273 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:36,273 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:36,274 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:36,274 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:36,274 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:36,274 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:36,275 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:36,275 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:36,275 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:36,275 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:36,275 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:36,276 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:36,276 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:36,277 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:36,277 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:36,278 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 86e7038cbd7079ed991c0d8924416f9d170b15a53536a052f3097e1f394171ef [2021-12-17 15:09:36,637 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:36,679 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:36,683 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:36,684 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:36,685 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:36,686 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c [2021-12-17 15:09:36,795 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dc2179ed0/67f195d73a1647f08f8b0f7364f563cb/FLAG638b71834 [2021-12-17 15:09:37,514 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:37,516 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c [2021-12-17 15:09:37,528 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dc2179ed0/67f195d73a1647f08f8b0f7364f563cb/FLAG638b71834 [2021-12-17 15:09:37,556 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dc2179ed0/67f195d73a1647f08f8b0f7364f563cb [2021-12-17 15:09:37,558 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:37,559 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:37,561 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:37,561 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:37,563 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:37,571 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,572 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@cedb7fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37, skipping insertion in model container [2021-12-17 15:09:37,573 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,578 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:37,618 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:37,773 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c[2141,2154] [2021-12-17 15:09:37,829 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:37,835 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:37,845 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product34.cil.c[2141,2154] [2021-12-17 15:09:37,878 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:37,889 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:37,890 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37 WrapperNode [2021-12-17 15:09:37,890 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:37,891 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:37,891 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:37,891 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:37,896 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,912 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,931 INFO L137 Inliner]: procedures = 55, calls = 153, calls flagged for inlining = 23, calls inlined = 19, statements flattened = 231 [2021-12-17 15:09:37,932 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:37,932 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:37,933 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:37,933 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:37,938 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,939 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,940 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,940 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,944 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,947 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,948 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,950 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:37,950 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:37,950 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:37,951 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:37,951 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (1/1) ... [2021-12-17 15:09:37,956 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:37,963 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:37,973 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:37,989 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:38,012 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:38,012 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:38,012 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:38,012 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:38,013 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:38,019 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:38,019 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:38,019 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:38,019 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:38,019 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:38,020 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:38,020 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:38,021 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:38,021 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:38,021 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:38,021 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:38,085 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:38,086 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:38,300 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:38,305 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:38,306 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:38,307 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:38 BoogieIcfgContainer [2021-12-17 15:09:38,307 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:38,309 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:38,309 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:38,312 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:38,312 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:37" (1/3) ... [2021-12-17 15:09:38,313 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56dab627 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:38, skipping insertion in model container [2021-12-17 15:09:38,313 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:37" (2/3) ... [2021-12-17 15:09:38,313 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56dab627 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:38, skipping insertion in model container [2021-12-17 15:09:38,313 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:38" (3/3) ... [2021-12-17 15:09:38,314 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product34.cil.c [2021-12-17 15:09:38,318 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:38,319 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:38,358 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:38,381 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:38,382 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:38,401 INFO L276 IsEmpty]: Start isEmpty. Operand has 81 states, 63 states have (on average 1.380952380952381) internal successors, (87), 69 states have internal predecessors, (87), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-17 15:09:38,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:38,406 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:38,407 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:38,408 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:38,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:38,412 INFO L85 PathProgramCache]: Analyzing trace with hash -1727540319, now seen corresponding path program 1 times [2021-12-17 15:09:38,418 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:38,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1763513457] [2021-12-17 15:09:38,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:38,420 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:38,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:38,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:38,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,558 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:38,558 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:38,558 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1763513457] [2021-12-17 15:09:38,559 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1763513457] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:38,559 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:38,559 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:38,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [794755220] [2021-12-17 15:09:38,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:38,564 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:38,564 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:38,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:38,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:38,585 INFO L87 Difference]: Start difference. First operand has 81 states, 63 states have (on average 1.380952380952381) internal successors, (87), 69 states have internal predecessors, (87), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:38,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:38,606 INFO L93 Difference]: Finished difference Result 153 states and 208 transitions. [2021-12-17 15:09:38,606 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:38,607 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:38,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:38,613 INFO L225 Difference]: With dead ends: 153 [2021-12-17 15:09:38,613 INFO L226 Difference]: Without dead ends: 72 [2021-12-17 15:09:38,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:38,619 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:38,620 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:38,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2021-12-17 15:09:38,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2021-12-17 15:09:38,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 61 states have internal predecessors, (73), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-17 15:09:38,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 92 transitions. [2021-12-17 15:09:38,648 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 92 transitions. Word has length 32 [2021-12-17 15:09:38,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:38,649 INFO L470 AbstractCegarLoop]: Abstraction has 72 states and 92 transitions. [2021-12-17 15:09:38,649 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:38,649 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 92 transitions. [2021-12-17 15:09:38,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:38,651 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:38,651 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:38,652 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:38,652 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:38,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:38,654 INFO L85 PathProgramCache]: Analyzing trace with hash -1451153767, now seen corresponding path program 1 times [2021-12-17 15:09:38,654 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:38,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844094767] [2021-12-17 15:09:38,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:38,655 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:38,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:38,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:38,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,713 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:38,713 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:38,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844094767] [2021-12-17 15:09:38,713 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844094767] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:38,714 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:38,714 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:38,714 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1104227230] [2021-12-17 15:09:38,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:38,715 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:38,715 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:38,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:38,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:38,716 INFO L87 Difference]: Start difference. First operand 72 states and 92 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:38,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:38,734 INFO L93 Difference]: Finished difference Result 108 states and 138 transitions. [2021-12-17 15:09:38,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:38,735 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:38,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:38,736 INFO L225 Difference]: With dead ends: 108 [2021-12-17 15:09:38,737 INFO L226 Difference]: Without dead ends: 63 [2021-12-17 15:09:38,738 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:38,740 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 13 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:38,741 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 141 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:38,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2021-12-17 15:09:38,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2021-12-17 15:09:38,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 50 states have (on average 1.32) internal successors, (66), 55 states have internal predecessors, (66), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-17 15:09:38,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 80 transitions. [2021-12-17 15:09:38,751 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 80 transitions. Word has length 33 [2021-12-17 15:09:38,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:38,752 INFO L470 AbstractCegarLoop]: Abstraction has 63 states and 80 transitions. [2021-12-17 15:09:38,752 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:38,752 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 80 transitions. [2021-12-17 15:09:38,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:38,753 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:38,753 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:38,753 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:38,754 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:38,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:38,754 INFO L85 PathProgramCache]: Analyzing trace with hash -1441161401, now seen corresponding path program 1 times [2021-12-17 15:09:38,754 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:38,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714561561] [2021-12-17 15:09:38,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:38,755 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:38,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:38,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:38,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,837 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:38,838 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:38,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714561561] [2021-12-17 15:09:38,838 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714561561] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:38,838 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:38,838 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:38,839 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [291705067] [2021-12-17 15:09:38,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:38,839 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:38,839 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:38,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:38,840 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:38,840 INFO L87 Difference]: Start difference. First operand 63 states and 80 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 6 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:38,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:38,902 INFO L93 Difference]: Finished difference Result 118 states and 153 transitions. [2021-12-17 15:09:38,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:38,903 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 6 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:09:38,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:38,905 INFO L225 Difference]: With dead ends: 118 [2021-12-17 15:09:38,905 INFO L226 Difference]: Without dead ends: 63 [2021-12-17 15:09:38,907 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:38,912 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 107 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:38,913 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [107 Valid, 161 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:38,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2021-12-17 15:09:38,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2021-12-17 15:09:38,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 50 states have (on average 1.3) internal successors, (65), 55 states have internal predecessors, (65), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-17 15:09:38,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 79 transitions. [2021-12-17 15:09:38,921 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 79 transitions. Word has length 38 [2021-12-17 15:09:38,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:38,922 INFO L470 AbstractCegarLoop]: Abstraction has 63 states and 79 transitions. [2021-12-17 15:09:38,922 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 6 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:38,922 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 79 transitions. [2021-12-17 15:09:38,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-12-17 15:09:38,923 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:38,923 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:38,924 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:38,924 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:38,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:38,924 INFO L85 PathProgramCache]: Analyzing trace with hash 700709160, now seen corresponding path program 1 times [2021-12-17 15:09:38,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:38,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592139251] [2021-12-17 15:09:38,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:38,925 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:38,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:38,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:38,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-17 15:09:38,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:38,982 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:38,983 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:38,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592139251] [2021-12-17 15:09:38,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592139251] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:38,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:38,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:38,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501647552] [2021-12-17 15:09:38,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:38,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:38,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:38,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:38,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:38,985 INFO L87 Difference]: Start difference. First operand 63 states and 79 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:39,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,002 INFO L93 Difference]: Finished difference Result 162 states and 208 transitions. [2021-12-17 15:09:39,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:39,002 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 43 [2021-12-17 15:09:39,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,004 INFO L225 Difference]: With dead ends: 162 [2021-12-17 15:09:39,004 INFO L226 Difference]: Without dead ends: 107 [2021-12-17 15:09:39,004 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:39,005 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 47 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,005 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [47 Valid, 153 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:39,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2021-12-17 15:09:39,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 105. [2021-12-17 15:09:39,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 82 states have (on average 1.2926829268292683) internal successors, (106), 88 states have internal predecessors, (106), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2021-12-17 15:09:39,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 132 transitions. [2021-12-17 15:09:39,015 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 132 transitions. Word has length 43 [2021-12-17 15:09:39,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,016 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 132 transitions. [2021-12-17 15:09:39,016 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:39,016 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 132 transitions. [2021-12-17 15:09:39,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:39,017 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,017 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,017 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:39,018 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,018 INFO L85 PathProgramCache]: Analyzing trace with hash 1850730352, now seen corresponding path program 1 times [2021-12-17 15:09:39,018 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [977299346] [2021-12-17 15:09:39,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:39,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-17 15:09:39,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,062 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:39,062 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [977299346] [2021-12-17 15:09:39,062 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [977299346] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:39,062 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:39,062 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:39,063 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1601536566] [2021-12-17 15:09:39,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:39,063 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:39,063 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:39,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:39,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:39,064 INFO L87 Difference]: Start difference. First operand 105 states and 132 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,096 INFO L93 Difference]: Finished difference Result 221 states and 282 transitions. [2021-12-17 15:09:39,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:09:39,097 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2021-12-17 15:09:39,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,098 INFO L225 Difference]: With dead ends: 221 [2021-12-17 15:09:39,098 INFO L226 Difference]: Without dead ends: 124 [2021-12-17 15:09:39,098 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:39,099 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 58 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,099 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 352 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:39,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2021-12-17 15:09:39,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 108. [2021-12-17 15:09:39,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 85 states have (on average 1.2823529411764707) internal successors, (109), 91 states have internal predecessors, (109), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2021-12-17 15:09:39,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 135 transitions. [2021-12-17 15:09:39,109 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 135 transitions. Word has length 47 [2021-12-17 15:09:39,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,109 INFO L470 AbstractCegarLoop]: Abstraction has 108 states and 135 transitions. [2021-12-17 15:09:39,109 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,109 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 135 transitions. [2021-12-17 15:09:39,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:39,110 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,110 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,111 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:39,111 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,111 INFO L85 PathProgramCache]: Analyzing trace with hash 262382450, now seen corresponding path program 1 times [2021-12-17 15:09:39,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301884349] [2021-12-17 15:09:39,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,112 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:39,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-17 15:09:39,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,156 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:39,157 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301884349] [2021-12-17 15:09:39,157 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301884349] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:39,157 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:39,157 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:39,157 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [636027947] [2021-12-17 15:09:39,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:39,158 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:39,158 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:39,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:39,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:39,159 INFO L87 Difference]: Start difference. First operand 108 states and 135 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,195 INFO L93 Difference]: Finished difference Result 241 states and 310 transitions. [2021-12-17 15:09:39,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:39,195 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2021-12-17 15:09:39,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,197 INFO L225 Difference]: With dead ends: 241 [2021-12-17 15:09:39,197 INFO L226 Difference]: Without dead ends: 141 [2021-12-17 15:09:39,197 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:39,198 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 79 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 434 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:39,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2021-12-17 15:09:39,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 110. [2021-12-17 15:09:39,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 87 states have (on average 1.2758620689655173) internal successors, (111), 93 states have internal predecessors, (111), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2021-12-17 15:09:39,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 137 transitions. [2021-12-17 15:09:39,206 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 137 transitions. Word has length 47 [2021-12-17 15:09:39,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,206 INFO L470 AbstractCegarLoop]: Abstraction has 110 states and 137 transitions. [2021-12-17 15:09:39,206 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,207 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 137 transitions. [2021-12-17 15:09:39,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:39,208 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,208 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,208 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:39,208 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,209 INFO L85 PathProgramCache]: Analyzing trace with hash -1426561292, now seen corresponding path program 1 times [2021-12-17 15:09:39,209 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66782800] [2021-12-17 15:09:39,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,209 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:39,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-17 15:09:39,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,248 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:39,248 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [66782800] [2021-12-17 15:09:39,248 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [66782800] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:39,248 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:39,248 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:39,249 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [225999931] [2021-12-17 15:09:39,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:39,249 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:39,249 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:39,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:39,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:39,250 INFO L87 Difference]: Start difference. First operand 110 states and 137 transitions. Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,264 INFO L93 Difference]: Finished difference Result 261 states and 329 transitions. [2021-12-17 15:09:39,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:39,265 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2021-12-17 15:09:39,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,266 INFO L225 Difference]: With dead ends: 261 [2021-12-17 15:09:39,266 INFO L226 Difference]: Without dead ends: 159 [2021-12-17 15:09:39,266 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:39,267 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 39 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,267 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [39 Valid, 153 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:39,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2021-12-17 15:09:39,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 157. [2021-12-17 15:09:39,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 124 states have (on average 1.2580645161290323) internal successors, (156), 131 states have internal predecessors, (156), 18 states have call successors, (18), 15 states have call predecessors, (18), 14 states have return successors, (20), 17 states have call predecessors, (20), 18 states have call successors, (20) [2021-12-17 15:09:39,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 194 transitions. [2021-12-17 15:09:39,290 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 194 transitions. Word has length 47 [2021-12-17 15:09:39,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,293 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 194 transitions. [2021-12-17 15:09:39,293 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:39,293 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 194 transitions. [2021-12-17 15:09:39,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-17 15:09:39,299 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,300 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,300 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:39,300 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,302 INFO L85 PathProgramCache]: Analyzing trace with hash -316039472, now seen corresponding path program 1 times [2021-12-17 15:09:39,302 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53150352] [2021-12-17 15:09:39,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,303 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:39,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-17 15:09:39,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-17 15:09:39,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,373 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:39,374 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53150352] [2021-12-17 15:09:39,374 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53150352] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:39,374 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:39,374 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:39,375 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433933777] [2021-12-17 15:09:39,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:39,376 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:39,376 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:39,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:39,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:39,377 INFO L87 Difference]: Start difference. First operand 157 states and 194 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-17 15:09:39,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,442 INFO L93 Difference]: Finished difference Result 313 states and 390 transitions. [2021-12-17 15:09:39,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:09:39,442 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2021-12-17 15:09:39,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,444 INFO L225 Difference]: With dead ends: 313 [2021-12-17 15:09:39,444 INFO L226 Difference]: Without dead ends: 164 [2021-12-17 15:09:39,444 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:39,444 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 31 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,445 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [32 Valid, 388 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:39,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2021-12-17 15:09:39,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 155. [2021-12-17 15:09:39,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 122 states have (on average 1.2295081967213115) internal successors, (150), 129 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 14 states have return successors, (20), 17 states have call predecessors, (20), 18 states have call successors, (20) [2021-12-17 15:09:39,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 188 transitions. [2021-12-17 15:09:39,451 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 188 transitions. Word has length 49 [2021-12-17 15:09:39,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,451 INFO L470 AbstractCegarLoop]: Abstraction has 155 states and 188 transitions. [2021-12-17 15:09:39,451 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-17 15:09:39,452 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 188 transitions. [2021-12-17 15:09:39,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-17 15:09:39,453 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,453 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,453 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:39,453 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,453 INFO L85 PathProgramCache]: Analyzing trace with hash -1105737062, now seen corresponding path program 1 times [2021-12-17 15:09:39,454 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,454 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [958639369] [2021-12-17 15:09:39,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,454 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:39,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:39,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-17 15:09:39,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,567 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:39,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [958639369] [2021-12-17 15:09:39,568 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [958639369] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:39,568 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:39,568 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-17 15:09:39,568 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521147910] [2021-12-17 15:09:39,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:39,568 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:09:39,568 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:39,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:09:39,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:39,569 INFO L87 Difference]: Start difference. First operand 155 states and 188 transitions. Second operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:09:39,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:39,802 INFO L93 Difference]: Finished difference Result 520 states and 655 transitions. [2021-12-17 15:09:39,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-17 15:09:39,802 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2021-12-17 15:09:39,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:39,804 INFO L225 Difference]: With dead ends: 520 [2021-12-17 15:09:39,804 INFO L226 Difference]: Without dead ends: 419 [2021-12-17 15:09:39,805 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=184, Unknown=0, NotChecked=0, Total=240 [2021-12-17 15:09:39,805 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 212 mSDsluCounter, 482 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 221 SdHoareTripleChecker+Valid, 605 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:39,805 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [221 Valid, 605 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:39,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 419 states. [2021-12-17 15:09:39,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 419 to 385. [2021-12-17 15:09:39,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 385 states, 304 states have (on average 1.2171052631578947) internal successors, (370), 323 states have internal predecessors, (370), 44 states have call successors, (44), 33 states have call predecessors, (44), 36 states have return successors, (54), 42 states have call predecessors, (54), 44 states have call successors, (54) [2021-12-17 15:09:39,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 468 transitions. [2021-12-17 15:09:39,829 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 468 transitions. Word has length 51 [2021-12-17 15:09:39,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:39,829 INFO L470 AbstractCegarLoop]: Abstraction has 385 states and 468 transitions. [2021-12-17 15:09:39,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:09:39,830 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 468 transitions. [2021-12-17 15:09:39,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2021-12-17 15:09:39,831 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:39,831 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:39,831 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:39,831 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:39,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:39,832 INFO L85 PathProgramCache]: Analyzing trace with hash -1979077538, now seen corresponding path program 1 times [2021-12-17 15:09:39,832 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:39,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064098220] [2021-12-17 15:09:39,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,832 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:39,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:39,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:39,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:39,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-17 15:09:39,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-17 15:09:39,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-17 15:09:39,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:39,984 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 18 proven. 7 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-12-17 15:09:39,984 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:39,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064098220] [2021-12-17 15:09:39,984 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064098220] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:39,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [738668982] [2021-12-17 15:09:39,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:39,985 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:39,985 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:40,000 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:40,067 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:40,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:40,145 INFO L263 TraceCheckSpWp]: Trace formula consists of 443 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:40,150 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:40,383 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 23 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:40,383 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:40,584 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-12-17 15:09:40,584 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [738668982] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:40,584 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:40,585 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-17 15:09:40,585 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408211305] [2021-12-17 15:09:40,585 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:40,585 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-17 15:09:40,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:40,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-17 15:09:40,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:40,586 INFO L87 Difference]: Start difference. First operand 385 states and 468 transitions. Second operand has 15 states, 15 states have (on average 6.933333333333334) internal successors, (104), 11 states have internal predecessors, (104), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2021-12-17 15:09:40,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:40,995 INFO L93 Difference]: Finished difference Result 618 states and 776 transitions. [2021-12-17 15:09:40,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-17 15:09:40,996 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.933333333333334) internal successors, (104), 11 states have internal predecessors, (104), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) Word has length 83 [2021-12-17 15:09:40,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:40,997 INFO L225 Difference]: With dead ends: 618 [2021-12-17 15:09:40,997 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:09:40,998 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 211 GetRequests, 181 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 154 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=176, Invalid=754, Unknown=0, NotChecked=0, Total=930 [2021-12-17 15:09:40,999 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 283 mSDsluCounter, 848 mSDsCounter, 0 mSdLazyCounter, 558 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 284 SdHoareTripleChecker+Valid, 994 SdHoareTripleChecker+Invalid, 681 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 558 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:40,999 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [284 Valid, 994 Invalid, 681 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 558 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:40,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:09:41,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:09:41,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:41,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:09:41,000 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 83 [2021-12-17 15:09:41,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:41,000 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:09:41,001 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.933333333333334) internal successors, (104), 11 states have internal predecessors, (104), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2021-12-17 15:09:41,001 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:09:41,001 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:09:41,003 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:09:41,025 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:41,211 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:41,213 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:09:43,169 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 670 676) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 670 676) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 496 507) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 496 507) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point L500-1(lines 496 507) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point L864(line 864) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 853 882) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point L863-2(lines 863 877) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 853 882) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point L859-1(line 859) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point L878(lines 853 882) the Hoare annotation is: true [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point L874(line 874) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L858 garLoopResultBuilder]: For program point L867(lines 867 871) no Hoare annotation was computed. [2021-12-17 15:09:43,170 INFO L861 garLoopResultBuilder]: At program point L867-1(lines 867 871) the Hoare annotation is: true [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse0 .cse1) .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse2) (or .cse4 (and .cse0 (= ~waterLevel~0 1) .cse1) .cse6 .cse2 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse5 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= |timeShift_processEnvironment_~tmp~4#1| 0) (= ~pumpRunning~0 0)) .cse2))) [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L832-1(line 832) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L93(lines 88 95) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2) (or .cse3 .cse0 .cse4 .cse1))) [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= |timeShift_processEnvironment_~tmp~4#1| 0) (= ~pumpRunning~0 0))) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse0 .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse4 .cse3 .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0))) [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 643 669) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L697(line 697) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse0 .cse1) .cse2 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse2) (or .cse5 .cse4 .cse6 .cse2) (or .cse5 (and .cse0 (= ~waterLevel~0 1) .cse1) .cse6 .cse2 .cse3))) [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L697-1(lines 678 702) the Hoare annotation is: (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (<= 1 ~pumpRunning~0)) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse1 (= |timeShift_processEnvironment_~tmp~4#1| 0) (= ~pumpRunning~0 0))) (.cse6 (not (= ~systemActive~0 1)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse7 .cse2) .cse6 .cse8) (or .cse0 (and .cse7 (= ~waterLevel~0 1) .cse2) .cse4 .cse6 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse5 .cse6)))) [2021-12-17 15:09:43,171 INFO L854 garLoopResultBuilder]: At program point L817(line 817) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (and .cse7 .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (and .cse7 .cse8 (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 1)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse1) (or .cse0 .cse5 .cse6 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse6 .cse1)))) [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L817-1(line 817) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L784(lines 784 788) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L784-2(lines 784 788) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L553(lines 553 559) no Hoare annotation was computed. [2021-12-17 15:09:43,171 INFO L858 garLoopResultBuilder]: For program point L834(lines 834 844) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L545(lines 540 548) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |timeShift_processEnvironment_~tmp~4#1| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (not (= ~systemActive~0 1)))) (and (let ((.cse0 (= |timeShift_getWaterLevel_#res#1| 2))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (and .cse0 .cse1 .cse5) .cse6 .cse7 .cse8)) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse9 .cse5) .cse8 .cse10) (or .cse4 (and .cse9 (= ~waterLevel~0 1) .cse5) .cse7 .cse8 .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse6 (and .cse1 .cse2 .cse3) .cse8))) [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L830(lines 830 847) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L830-1(lines 822 850) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (= |timeShift_processEnvironment_~tmp~4#1| 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse4) .cse5 .cse6) (or (and .cse3 .cse7 .cse8) (not (= |old(~waterLevel~0)| 1)) .cse9 .cse5) (let ((.cse10 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse11 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 2))) (or (and .cse10 .cse11 .cse4 .cse12) .cse0 (and .cse10 .cse11 .cse7 .cse12 .cse8) .cse9 .cse1 .cse5)))) [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L657-1(lines 657 663) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L558(lines 549 562) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) (and .cse2 (not (= 0 |timeShift_isHighWaterSensorDry_#res#1|)) .cse3) .cse4 .cse0) (or .cse5 .cse6 .cse0 .cse1) (or .cse5 (and .cse2 .cse3) .cse4 .cse6 .cse0))) [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L686(lines 686 694) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L682(lines 682 699) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L835(lines 835 841) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L476(lines 476 480) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point L92(line 92) no Hoare annotation was computed. [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L476-2(lines 472 483) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse0 .cse1) .cse2 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse2) (or .cse5 .cse4 .cse6 .cse2) (or .cse5 (and .cse0 (= ~waterLevel~0 1) .cse1) .cse6 .cse2 .cse3))) [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L790(lines 775 793) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 1)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 (and (not (= 0 |timeShift_isHighWaterLevel_~tmp~5#1|)) .cse1 (= |timeShift_isHighWaterLevel_#res#1| 0) .cse2 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0)) .cse3) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 .cse4) (or .cse5 .cse6 .cse3 .cse4) (or .cse5 (and .cse1 .cse2) .cse0 .cse6 .cse3))) [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point L819(lines 812 821) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse3 (and (<= 1 ~switchedOnBeforeTS~0) .cse7 (<= 1 ~pumpRunning~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and .cse7 (= ~pumpRunning~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse2) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse1 .cse2)))) [2021-12-17 15:09:43,172 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 643 669) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (and .cse7 .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (and .cse7 .cse8 (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 1)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse1) (or .cse0 .cse5 .cse6 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse6 .cse1)))) [2021-12-17 15:09:43,172 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 643 669) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L650(lines 650 656) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 92) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L650-2(lines 646 668) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L708(lines 703 710) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 1))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse3) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse4))) [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L799(lines 794 801) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= ~waterLevel~0 1) .cse2 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L861 garLoopResultBuilder]: At program point L944(lines 925 947) the Hoare annotation is: true [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L911(lines 907 913) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= ~waterLevel~0 1) .cse2 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= ~waterLevel~0 1) .cse2 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:09:43,173 INFO L854 garLoopResultBuilder]: At program point L809(lines 804 811) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:43,173 INFO L858 garLoopResultBuilder]: For program point L615(lines 615 619) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L615-2(lines 607 620) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= ~waterLevel~0 1) .cse2 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~7#1|)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= ~waterLevel~0 1) .cse2 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:09:43,174 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L861 garLoopResultBuilder]: At program point L922(lines 914 924) the Hoare annotation is: true [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L935(lines 935 942) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L935-2(lines 935 942) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 484 495) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L858 garLoopResultBuilder]: For program point L488-1(lines 484 495) no Hoare annotation was computed. [2021-12-17 15:09:43,174 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 484 495) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse2 .cse4) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse4))) [2021-12-17 15:09:43,175 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 730 738) no Hoare annotation was computed. [2021-12-17 15:09:43,175 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 730 738) the Hoare annotation is: true [2021-12-17 15:09:43,175 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 730 738) no Hoare annotation was computed. [2021-12-17 15:09:43,177 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:43,178 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:09:43,199 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:09:43 BoogieIcfgContainer [2021-12-17 15:09:43,199 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:09:43,200 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:09:43,200 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:09:43,200 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:09:43,200 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:38" (3/4) ... [2021-12-17 15:09:43,202 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:09:43,207 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:09:43,207 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:09:43,207 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:09:43,207 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:09:43,207 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:09:43,208 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:09:43,212 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 48 nodes and edges [2021-12-17 15:09:43,213 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:09:43,213 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:09:43,213 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:09:43,213 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:09:43,214 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:43,214 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:43,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((waterLevel == 1 && 1 == \result) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:09:43,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:09:43,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:09:43,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || (((((splverifierCounter == 0 && waterLevel == 1) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && systemActive == 1) [2021-12-17 15:09:43,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(1 <= \old(pumpRunning))) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) [2021-12-17 15:09:43,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:09:43,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || (((((splverifierCounter == 0 && waterLevel == 1) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && systemActive == 1) [2021-12-17 15:09:43,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((waterLevel == 1 && tmp == 0) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && tmp == 2) || !(\old(waterLevel) <= 2)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 0) && tmp == 2) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) [2021-12-17 15:09:43,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) [2021-12-17 15:09:43,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) [2021-12-17 15:09:43,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 0) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || ((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) [2021-12-17 15:09:43,232 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) == 1) || ((waterLevel == \old(waterLevel) && !(0 == \result)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) [2021-12-17 15:09:43,232 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((((!(0 == tmp) && waterLevel == \old(waterLevel)) && \result == 0) && pumpRunning == 0) && tmp___0 == 0)) || !(systemActive == 1)) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) [2021-12-17 15:09:43,232 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:09:43,254 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:09:43,255 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:09:43,255 INFO L158 Benchmark]: Toolchain (without parser) took 5695.70ms. Allocated memory was 144.7MB in the beginning and 186.6MB in the end (delta: 41.9MB). Free memory was 107.6MB in the beginning and 75.6MB in the end (delta: 32.0MB). Peak memory consumption was 73.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,255 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 144.7MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:09:43,256 INFO L158 Benchmark]: CACSL2BoogieTranslator took 329.52ms. Allocated memory is still 144.7MB. Free memory was 107.3MB in the beginning and 112.6MB in the end (delta: -5.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,256 INFO L158 Benchmark]: Boogie Procedure Inliner took 41.33ms. Allocated memory is still 144.7MB. Free memory was 112.6MB in the beginning and 110.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,256 INFO L158 Benchmark]: Boogie Preprocessor took 17.34ms. Allocated memory is still 144.7MB. Free memory was 110.5MB in the beginning and 109.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,256 INFO L158 Benchmark]: RCFGBuilder took 357.26ms. Allocated memory is still 144.7MB. Free memory was 109.0MB in the beginning and 93.7MB in the end (delta: 15.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,257 INFO L158 Benchmark]: TraceAbstraction took 4890.37ms. Allocated memory was 144.7MB in the beginning and 186.6MB in the end (delta: 41.9MB). Free memory was 92.9MB in the beginning and 81.8MB in the end (delta: 11.1MB). Peak memory consumption was 76.7MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,257 INFO L158 Benchmark]: Witness Printer took 55.06ms. Allocated memory is still 186.6MB. Free memory was 81.8MB in the beginning and 75.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:43,258 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 144.7MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 329.52ms. Allocated memory is still 144.7MB. Free memory was 107.3MB in the beginning and 112.6MB in the end (delta: -5.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 41.33ms. Allocated memory is still 144.7MB. Free memory was 112.6MB in the beginning and 110.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 17.34ms. Allocated memory is still 144.7MB. Free memory was 110.5MB in the beginning and 109.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 357.26ms. Allocated memory is still 144.7MB. Free memory was 109.0MB in the beginning and 93.7MB in the end (delta: 15.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 4890.37ms. Allocated memory was 144.7MB in the beginning and 186.6MB in the end (delta: 41.9MB). Free memory was 92.9MB in the beginning and 81.8MB in the end (delta: 11.1MB). Peak memory consumption was 76.7MB. Max. memory is 16.1GB. * Witness Printer took 55.06ms. Allocated memory is still 186.6MB. Free memory was 81.8MB in the beginning and 75.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 92]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 81 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.8s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 887 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 869 mSDsluCounter, 3482 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2487 mSDsCounter, 212 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 970 IncrementalHoareTripleChecker+Invalid, 1182 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 212 mSolverCounterUnsat, 995 mSDtfsCounter, 970 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 313 GetRequests, 241 SyntacticMatches, 2 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 182 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=385occurred in iteration=9, InterpolantAutomatonStates: 73, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 10 MinimizatonAttempts, 94 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 611 PreInvPairs, 716 NumberOfFragments, 1813 HoareAnnotationTreeSize, 611 FomulaSimplifications, 578 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 37 FomulaSimplificationsInter, 3598 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 553 NumberOfCodeBlocks, 553 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 624 ConstructedInterpolants, 0 QuantifiedInterpolants, 1363 SizeOfPredicates, 3 NumberOfNonLiveVariables, 443 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 97/117 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 925]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && 1 == \result) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || (((((splverifierCounter == 0 && waterLevel == 1) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && systemActive == 1) - InvariantResult [Line: 775]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((((!(0 == tmp) && waterLevel == \old(waterLevel)) && \result == 0) && pumpRunning == 0) && tmp___0 == 0)) || !(systemActive == 1)) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(1 <= \old(pumpRunning))) && ((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) == 1) || ((waterLevel == \old(waterLevel) && !(0 == \result)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || (((((splverifierCounter == 0 && waterLevel == 1) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 < waterLevel) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && systemActive == 1) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: ((((((((((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 0) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || ((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) - InvariantResult [Line: 472]: Loop Invariant Derived loop invariant: (((((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(1 <= \old(switchedOnBeforeTS)) || (1 <= switchedOnBeforeTS && 1 <= pumpRunning)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((waterLevel == 1 && tmp == 0) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && tmp == 2) || !(\old(waterLevel) <= 2)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 0) && tmp == 2) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) - InvariantResult [Line: 88]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(1 <= \old(switchedOnBeforeTS)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 < \old(waterLevel))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(systemActive == 1)) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:09:43,307 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE