./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:15:34,962 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:15:34,976 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:15:35,018 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:15:35,018 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:15:35,020 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:15:35,021 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:15:35,024 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:15:35,025 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:15:35,028 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:15:35,029 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:15:35,030 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:15:35,030 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:15:35,031 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:15:35,033 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:15:35,035 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:15:35,051 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:15:35,052 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:15:35,054 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:15:35,059 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:15:35,060 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:15:35,060 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:15:35,061 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:15:35,062 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:15:35,066 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:15:35,067 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:15:35,067 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:15:35,068 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:15:35,068 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:15:35,069 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:15:35,069 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:15:35,070 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:15:35,072 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:15:35,072 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:15:35,073 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:15:35,073 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:15:35,074 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:15:35,074 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:15:35,074 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:15:35,074 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:15:35,075 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:15:35,076 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:15:35,121 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:15:35,121 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:15:35,121 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:15:35,121 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:15:35,122 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:15:35,122 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:15:35,122 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:15:35,122 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:15:35,122 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:15:35,123 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:15:35,123 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:15:35,123 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:15:35,123 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:15:35,123 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:15:35,123 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:15:35,124 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:35,124 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:15:35,124 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:15:35,125 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b [2021-12-21 13:15:35,436 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:15:35,452 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:15:35,472 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:15:35,472 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:15:35,473 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:15:35,474 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2021-12-21 13:15:35,516 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f5fd961/079e4f2e998b4b7a8cb0b4cac41dac43/FLAGac93b57c2 [2021-12-21 13:15:35,945 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:15:35,959 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2021-12-21 13:15:35,975 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f5fd961/079e4f2e998b4b7a8cb0b4cac41dac43/FLAGac93b57c2 [2021-12-21 13:15:35,986 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f5fd961/079e4f2e998b4b7a8cb0b4cac41dac43 [2021-12-21 13:15:35,988 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:15:35,989 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:15:35,991 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:35,991 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:15:35,993 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:15:35,994 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:35" (1/1) ... [2021-12-21 13:15:35,995 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62c5d563 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:35, skipping insertion in model container [2021-12-21 13:15:35,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:35" (1/1) ... [2021-12-21 13:15:36,001 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:15:36,035 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:15:36,185 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2021-12-21 13:15:36,369 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:36,380 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:15:36,393 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2021-12-21 13:15:36,450 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:36,468 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:15:36,468 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36 WrapperNode [2021-12-21 13:15:36,469 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:36,469 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:36,470 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:15:36,470 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:15:36,475 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,495 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,516 INFO L137 Inliner]: procedures = 56, calls = 159, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 281 [2021-12-21 13:15:36,532 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:36,533 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:15:36,533 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:15:36,533 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:15:36,538 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,539 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,541 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,553 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,557 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,566 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,580 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,582 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:15:36,583 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:15:36,583 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:15:36,584 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:15:36,584 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (1/1) ... [2021-12-21 13:15:36,597 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:36,618 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:36,714 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:15:36,764 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:15:36,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:15:36,785 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:15:36,785 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:15:36,785 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:15:36,785 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:15:36,786 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:15:36,786 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:15:36,787 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:15:36,787 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:15:36,787 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:15:36,868 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:15:36,869 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:15:37,123 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:15:37,128 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:15:37,129 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:15:37,130 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:37 BoogieIcfgContainer [2021-12-21 13:15:37,130 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:15:37,132 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:15:37,132 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:15:37,134 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:15:37,134 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:15:35" (1/3) ... [2021-12-21 13:15:37,135 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d9be255 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:37, skipping insertion in model container [2021-12-21 13:15:37,135 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:36" (2/3) ... [2021-12-21 13:15:37,135 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d9be255 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:37, skipping insertion in model container [2021-12-21 13:15:37,135 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:37" (3/3) ... [2021-12-21 13:15:37,136 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product53.cil.c [2021-12-21 13:15:37,140 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:15:37,140 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:15:37,176 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:15:37,183 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:15:37,183 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:15:37,208 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-21 13:15:37,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:15:37,215 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:37,216 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:37,216 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:37,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:37,220 INFO L85 PathProgramCache]: Analyzing trace with hash 1763060088, now seen corresponding path program 1 times [2021-12-21 13:15:37,225 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:37,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740961947] [2021-12-21 13:15:37,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:37,226 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:37,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:15:37,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,358 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:37,359 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:37,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740961947] [2021-12-21 13:15:37,359 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740961947] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:37,359 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:37,360 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:15:37,361 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291199299] [2021-12-21 13:15:37,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:37,364 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:15:37,364 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:37,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:15:37,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:37,387 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:37,419 INFO L93 Difference]: Finished difference Result 196 states and 267 transitions. [2021-12-21 13:15:37,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:15:37,420 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:15:37,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:37,426 INFO L225 Difference]: With dead ends: 196 [2021-12-21 13:15:37,426 INFO L226 Difference]: Without dead ends: 93 [2021-12-21 13:15:37,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:37,432 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:37,432 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:37,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-12-21 13:15:37,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2021-12-21 13:15:37,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-21 13:15:37,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 121 transitions. [2021-12-21 13:15:37,460 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 121 transitions. Word has length 25 [2021-12-21 13:15:37,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:37,460 INFO L470 AbstractCegarLoop]: Abstraction has 93 states and 121 transitions. [2021-12-21 13:15:37,461 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,461 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 121 transitions. [2021-12-21 13:15:37,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:15:37,463 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:37,463 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:37,463 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:15:37,463 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:37,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:37,464 INFO L85 PathProgramCache]: Analyzing trace with hash 1681284877, now seen corresponding path program 1 times [2021-12-21 13:15:37,464 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:37,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925732480] [2021-12-21 13:15:37,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:37,465 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:37,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:15:37,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:37,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:37,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925732480] [2021-12-21 13:15:37,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925732480] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:37,538 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:37,538 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:15:37,538 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470383770] [2021-12-21 13:15:37,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:37,539 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:37,539 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:37,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:37,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:37,540 INFO L87 Difference]: Start difference. First operand 93 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:37,563 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2021-12-21 13:15:37,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:37,564 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:15:37,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:37,567 INFO L225 Difference]: With dead ends: 152 [2021-12-21 13:15:37,567 INFO L226 Difference]: Without dead ends: 84 [2021-12-21 13:15:37,568 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:37,568 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 12 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:37,569 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:37,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2021-12-21 13:15:37,587 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2021-12-21 13:15:37,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3387096774193548) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:15:37,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2021-12-21 13:15:37,589 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 26 [2021-12-21 13:15:37,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:37,589 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2021-12-21 13:15:37,590 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,590 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2021-12-21 13:15:37,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-21 13:15:37,591 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:37,591 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:37,591 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:15:37,591 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:37,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:37,592 INFO L85 PathProgramCache]: Analyzing trace with hash -1900585844, now seen corresponding path program 1 times [2021-12-21 13:15:37,592 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:37,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487697920] [2021-12-21 13:15:37,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:37,593 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:37,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:37,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,673 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:37,673 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:37,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487697920] [2021-12-21 13:15:37,673 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487697920] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:37,674 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:37,674 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:15:37,674 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1228985093] [2021-12-21 13:15:37,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:37,674 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:37,675 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:37,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:37,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:37,675 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:37,689 INFO L93 Difference]: Finished difference Result 161 states and 212 transitions. [2021-12-21 13:15:37,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:37,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-21 13:15:37,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:37,691 INFO L225 Difference]: With dead ends: 161 [2021-12-21 13:15:37,691 INFO L226 Difference]: Without dead ends: 84 [2021-12-21 13:15:37,692 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:37,693 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 91 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:37,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [91 Valid, 107 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:37,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2021-12-21 13:15:37,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2021-12-21 13:15:37,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 71 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:15:37,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2021-12-21 13:15:37,701 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 30 [2021-12-21 13:15:37,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:37,701 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2021-12-21 13:15:37,701 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:37,701 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2021-12-21 13:15:37,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-12-21 13:15:37,703 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:37,703 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:37,703 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:15:37,703 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:37,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:37,704 INFO L85 PathProgramCache]: Analyzing trace with hash 810060833, now seen corresponding path program 1 times [2021-12-21 13:15:37,704 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:37,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [912188581] [2021-12-21 13:15:37,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:37,705 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:37,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:37,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2021-12-21 13:15:37,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-21 13:15:37,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:37,759 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:37,759 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:37,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [912188581] [2021-12-21 13:15:37,759 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [912188581] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:37,759 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:37,760 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 13:15:37,760 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677302285] [2021-12-21 13:15:37,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:37,760 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 13:15:37,760 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:37,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 13:15:37,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:15:37,761 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-21 13:15:37,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:37,901 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2021-12-21 13:15:37,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:15:37,902 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 43 [2021-12-21 13:15:37,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:37,903 INFO L225 Difference]: With dead ends: 243 [2021-12-21 13:15:37,905 INFO L226 Difference]: Without dead ends: 166 [2021-12-21 13:15:37,906 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:15:37,909 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 154 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:37,909 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 235 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:37,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2021-12-21 13:15:37,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 160. [2021-12-21 13:15:37,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 120 states have (on average 1.2916666666666667) internal successors, (155), 128 states have internal predecessors, (155), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-21 13:15:37,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 204 transitions. [2021-12-21 13:15:37,933 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 204 transitions. Word has length 43 [2021-12-21 13:15:37,933 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:37,934 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 204 transitions. [2021-12-21 13:15:37,934 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-21 13:15:37,934 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 204 transitions. [2021-12-21 13:15:37,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-21 13:15:37,938 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:37,938 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:37,938 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:15:37,938 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:37,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:37,939 INFO L85 PathProgramCache]: Analyzing trace with hash 1861351509, now seen corresponding path program 1 times [2021-12-21 13:15:37,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:37,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486350941] [2021-12-21 13:15:37,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:37,939 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:37,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:38,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:38,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 13:15:38,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:38,044 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:38,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486350941] [2021-12-21 13:15:38,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486350941] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:38,044 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:38,044 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:38,045 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1870698937] [2021-12-21 13:15:38,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:38,045 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:38,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:38,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:38,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:38,046 INFO L87 Difference]: Start difference. First operand 160 states and 204 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:15:38,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:38,218 INFO L93 Difference]: Finished difference Result 439 states and 590 transitions. [2021-12-21 13:15:38,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 13:15:38,219 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2021-12-21 13:15:38,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:38,221 INFO L225 Difference]: With dead ends: 439 [2021-12-21 13:15:38,221 INFO L226 Difference]: Without dead ends: 286 [2021-12-21 13:15:38,222 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-21 13:15:38,223 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 176 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:38,223 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [182 Valid, 472 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:38,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2021-12-21 13:15:38,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 253. [2021-12-21 13:15:38,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 191 states have (on average 1.2827225130890052) internal successors, (245), 201 states have internal predecessors, (245), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (49), 32 states have call predecessors, (49), 30 states have call successors, (49) [2021-12-21 13:15:38,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 324 transitions. [2021-12-21 13:15:38,242 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 324 transitions. Word has length 49 [2021-12-21 13:15:38,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:38,242 INFO L470 AbstractCegarLoop]: Abstraction has 253 states and 324 transitions. [2021-12-21 13:15:38,242 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:15:38,242 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 324 transitions. [2021-12-21 13:15:38,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-21 13:15:38,244 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:38,244 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:38,244 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:15:38,244 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:38,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:38,245 INFO L85 PathProgramCache]: Analyzing trace with hash 1995365015, now seen corresponding path program 1 times [2021-12-21 13:15:38,245 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:38,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [744357906] [2021-12-21 13:15:38,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:38,245 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:38,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:38,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:38,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 13:15:38,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,299 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:38,300 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:38,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [744357906] [2021-12-21 13:15:38,300 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [744357906] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:38,300 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:38,300 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:38,300 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1360645639] [2021-12-21 13:15:38,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:38,301 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:38,301 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:38,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:38,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:38,302 INFO L87 Difference]: Start difference. First operand 253 states and 324 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:15:38,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:38,419 INFO L93 Difference]: Finished difference Result 513 states and 670 transitions. [2021-12-21 13:15:38,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:38,420 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2021-12-21 13:15:38,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:38,422 INFO L225 Difference]: With dead ends: 513 [2021-12-21 13:15:38,422 INFO L226 Difference]: Without dead ends: 267 [2021-12-21 13:15:38,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:38,426 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 73 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 445 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:38,426 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 445 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:38,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2021-12-21 13:15:38,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 259. [2021-12-21 13:15:38,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 197 states have (on average 1.2741116751269035) internal successors, (251), 207 states have internal predecessors, (251), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (49), 32 states have call predecessors, (49), 30 states have call successors, (49) [2021-12-21 13:15:38,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 330 transitions. [2021-12-21 13:15:38,441 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 330 transitions. Word has length 49 [2021-12-21 13:15:38,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:38,441 INFO L470 AbstractCegarLoop]: Abstraction has 259 states and 330 transitions. [2021-12-21 13:15:38,442 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:15:38,442 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 330 transitions. [2021-12-21 13:15:38,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-21 13:15:38,443 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:38,443 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:38,443 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:15:38,443 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:38,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:38,444 INFO L85 PathProgramCache]: Analyzing trace with hash -2080747563, now seen corresponding path program 1 times [2021-12-21 13:15:38,444 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:38,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1350721037] [2021-12-21 13:15:38,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:38,444 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:38,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:38,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:38,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 13:15:38,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:38,533 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:38,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1350721037] [2021-12-21 13:15:38,533 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1350721037] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:38,534 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:38,534 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:38,534 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [903399409] [2021-12-21 13:15:38,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:38,534 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:38,534 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:38,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:38,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:38,535 INFO L87 Difference]: Start difference. First operand 259 states and 330 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:15:38,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:38,661 INFO L93 Difference]: Finished difference Result 475 states and 619 transitions. [2021-12-21 13:15:38,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-21 13:15:38,662 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2021-12-21 13:15:38,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:38,664 INFO L225 Difference]: With dead ends: 475 [2021-12-21 13:15:38,664 INFO L226 Difference]: Without dead ends: 223 [2021-12-21 13:15:38,665 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:15:38,666 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 170 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:38,667 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [174 Valid, 278 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:38,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2021-12-21 13:15:38,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 218. [2021-12-21 13:15:38,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 165 states have (on average 1.2545454545454546) internal successors, (207), 174 states have internal predecessors, (207), 26 states have call successors, (26), 22 states have call predecessors, (26), 26 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2021-12-21 13:15:38,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 270 transitions. [2021-12-21 13:15:38,689 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 270 transitions. Word has length 49 [2021-12-21 13:15:38,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:38,690 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 270 transitions. [2021-12-21 13:15:38,690 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:15:38,690 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 270 transitions. [2021-12-21 13:15:38,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-21 13:15:38,696 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:38,696 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:38,696 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:15:38,697 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:38,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:38,697 INFO L85 PathProgramCache]: Analyzing trace with hash 1736726981, now seen corresponding path program 1 times [2021-12-21 13:15:38,697 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:38,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648141259] [2021-12-21 13:15:38,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:38,698 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:38,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:38,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:38,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:38,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:15:38,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:38,754 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:38,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648141259] [2021-12-21 13:15:38,754 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648141259] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:38,755 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:38,755 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:38,755 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345237318] [2021-12-21 13:15:38,755 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:38,755 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:38,755 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:38,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:38,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:38,756 INFO L87 Difference]: Start difference. First operand 218 states and 270 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:38,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:38,877 INFO L93 Difference]: Finished difference Result 432 states and 535 transitions. [2021-12-21 13:15:38,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:38,878 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-21 13:15:38,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:38,880 INFO L225 Difference]: With dead ends: 432 [2021-12-21 13:15:38,880 INFO L226 Difference]: Without dead ends: 221 [2021-12-21 13:15:38,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:15:38,883 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 126 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:38,883 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 411 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:38,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2021-12-21 13:15:38,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 216. [2021-12-21 13:15:38,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 163 states have (on average 1.2453987730061349) internal successors, (203), 172 states have internal predecessors, (203), 26 states have call successors, (26), 22 states have call predecessors, (26), 26 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2021-12-21 13:15:38,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 266 transitions. [2021-12-21 13:15:38,894 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 266 transitions. Word has length 51 [2021-12-21 13:15:38,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:38,897 INFO L470 AbstractCegarLoop]: Abstraction has 216 states and 266 transitions. [2021-12-21 13:15:38,897 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:38,897 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 266 transitions. [2021-12-21 13:15:38,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-21 13:15:38,898 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:38,898 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:38,898 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:15:38,898 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:38,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:38,899 INFO L85 PathProgramCache]: Analyzing trace with hash 1340244461, now seen corresponding path program 1 times [2021-12-21 13:15:38,899 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:38,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028624382] [2021-12-21 13:15:38,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:38,899 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:38,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:38,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:38,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:15:38,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:39,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-21 13:15:39,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,030 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:39,031 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:39,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028624382] [2021-12-21 13:15:39,031 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2028624382] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:39,031 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:39,031 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-21 13:15:39,031 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [161614870] [2021-12-21 13:15:39,031 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:39,032 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-21 13:15:39,032 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:39,032 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-21 13:15:39,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:15:39,032 INFO L87 Difference]: Start difference. First operand 216 states and 266 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:39,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:39,374 INFO L93 Difference]: Finished difference Result 433 states and 540 transitions. [2021-12-21 13:15:39,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-12-21 13:15:39,374 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2021-12-21 13:15:39,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:39,376 INFO L225 Difference]: With dead ends: 433 [2021-12-21 13:15:39,376 INFO L226 Difference]: Without dead ends: 275 [2021-12-21 13:15:39,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 104 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=175, Invalid=425, Unknown=0, NotChecked=0, Total=600 [2021-12-21 13:15:39,377 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 430 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 366 mSolverCounterSat, 167 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 434 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 533 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 167 IncrementalHoareTripleChecker+Valid, 366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:39,377 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [434 Valid, 476 Invalid, 533 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [167 Valid, 366 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:39,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2021-12-21 13:15:39,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 218. [2021-12-21 13:15:39,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 164 states have (on average 1.2073170731707317) internal successors, (198), 174 states have internal predecessors, (198), 26 states have call successors, (26), 22 states have call predecessors, (26), 27 states have return successors, (32), 27 states have call predecessors, (32), 26 states have call successors, (32) [2021-12-21 13:15:39,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 256 transitions. [2021-12-21 13:15:39,385 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 256 transitions. Word has length 53 [2021-12-21 13:15:39,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:39,385 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 256 transitions. [2021-12-21 13:15:39,386 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:39,386 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 256 transitions. [2021-12-21 13:15:39,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-21 13:15:39,386 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:39,386 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:39,386 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:15:39,386 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:39,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:39,387 INFO L85 PathProgramCache]: Analyzing trace with hash -768900197, now seen corresponding path program 1 times [2021-12-21 13:15:39,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:39,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045242257] [2021-12-21 13:15:39,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:39,387 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:39,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:39,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:15:39,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:39,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:39,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-21 13:15:39,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:39,477 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:39,477 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045242257] [2021-12-21 13:15:39,477 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2045242257] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:39,477 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:39,477 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:15:39,478 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453759474] [2021-12-21 13:15:39,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:39,478 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:39,478 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:39,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:39,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:39,479 INFO L87 Difference]: Start difference. First operand 218 states and 256 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:39,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:39,771 INFO L93 Difference]: Finished difference Result 417 states and 499 transitions. [2021-12-21 13:15:39,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:15:39,772 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2021-12-21 13:15:39,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:39,773 INFO L225 Difference]: With dead ends: 417 [2021-12-21 13:15:39,773 INFO L226 Difference]: Without dead ends: 257 [2021-12-21 13:15:39,774 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:39,774 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 150 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 250 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:39,774 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [153 Valid, 381 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:39,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2021-12-21 13:15:39,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 218. [2021-12-21 13:15:39,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 164 states have (on average 1.201219512195122) internal successors, (197), 174 states have internal predecessors, (197), 26 states have call successors, (26), 22 states have call predecessors, (26), 27 states have return successors, (32), 27 states have call predecessors, (32), 26 states have call successors, (32) [2021-12-21 13:15:39,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 255 transitions. [2021-12-21 13:15:39,801 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 255 transitions. Word has length 55 [2021-12-21 13:15:39,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:39,801 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 255 transitions. [2021-12-21 13:15:39,801 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:39,801 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 255 transitions. [2021-12-21 13:15:39,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-21 13:15:39,802 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:39,802 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:39,802 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-21 13:15:39,802 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:39,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:39,802 INFO L85 PathProgramCache]: Analyzing trace with hash -696926305, now seen corresponding path program 1 times [2021-12-21 13:15:39,803 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:39,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [676839057] [2021-12-21 13:15:39,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:39,803 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:39,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:39,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:15:39,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:39,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:39,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-21 13:15:39,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:39,943 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:39,943 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:39,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [676839057] [2021-12-21 13:15:39,943 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [676839057] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:39,943 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:39,943 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 13:15:39,943 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1572629637] [2021-12-21 13:15:39,943 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:39,943 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:15:39,944 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:39,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:15:39,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:15:39,944 INFO L87 Difference]: Start difference. First operand 218 states and 255 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:40,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:40,452 INFO L93 Difference]: Finished difference Result 536 states and 657 transitions. [2021-12-21 13:15:40,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-12-21 13:15:40,453 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 55 [2021-12-21 13:15:40,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:40,454 INFO L225 Difference]: With dead ends: 536 [2021-12-21 13:15:40,454 INFO L226 Difference]: Without dead ends: 376 [2021-12-21 13:15:40,455 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=132, Invalid=330, Unknown=0, NotChecked=0, Total=462 [2021-12-21 13:15:40,455 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 385 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 159 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 390 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 516 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 159 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:40,455 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [390 Valid, 403 Invalid, 516 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [159 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:15:40,456 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 376 states. [2021-12-21 13:15:40,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 376 to 347. [2021-12-21 13:15:40,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 259 states have (on average 1.193050193050193) internal successors, (309), 275 states have internal predecessors, (309), 46 states have call successors, (46), 35 states have call predecessors, (46), 41 states have return successors, (60), 44 states have call predecessors, (60), 46 states have call successors, (60) [2021-12-21 13:15:40,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 415 transitions. [2021-12-21 13:15:40,506 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 415 transitions. Word has length 55 [2021-12-21 13:15:40,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:40,507 INFO L470 AbstractCegarLoop]: Abstraction has 347 states and 415 transitions. [2021-12-21 13:15:40,507 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:40,507 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 415 transitions. [2021-12-21 13:15:40,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-21 13:15:40,508 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:40,508 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:40,508 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-21 13:15:40,509 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:40,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:40,509 INFO L85 PathProgramCache]: Analyzing trace with hash 1626295211, now seen corresponding path program 1 times [2021-12-21 13:15:40,509 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:40,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1844542161] [2021-12-21 13:15:40,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:40,509 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:40,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:40,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:15:40,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:40,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:40,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:15:40,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:15:40,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2021-12-21 13:15:40,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-21 13:15:40,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,715 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 5 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-12-21 13:15:40,715 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:40,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1844542161] [2021-12-21 13:15:40,715 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1844542161] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:40,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1715464959] [2021-12-21 13:15:40,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:40,715 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:40,715 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:40,740 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:40,741 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:40,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:40,826 INFO L263 TraceCheckSpWp]: Trace formula consists of 449 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:15:40,831 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:41,064 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-21 13:15:41,065 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:15:41,387 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-21 13:15:41,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1715464959] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:15:41,387 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:15:41,388 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 20 [2021-12-21 13:15:41,388 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581264300] [2021-12-21 13:15:41,388 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:15:41,389 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-21 13:15:41,389 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:41,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-21 13:15:41,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=316, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:15:41,390 INFO L87 Difference]: Start difference. First operand 347 states and 415 transitions. Second operand has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:42,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:42,670 INFO L93 Difference]: Finished difference Result 1073 states and 1374 transitions. [2021-12-21 13:15:42,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2021-12-21 13:15:42,670 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) Word has length 89 [2021-12-21 13:15:42,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:42,671 INFO L225 Difference]: With dead ends: 1073 [2021-12-21 13:15:42,671 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:42,674 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 260 GetRequests, 193 SyntacticMatches, 1 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1176 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=1031, Invalid=3525, Unknown=0, NotChecked=0, Total=4556 [2021-12-21 13:15:42,675 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 713 mSDsluCounter, 736 mSDsCounter, 0 mSdLazyCounter, 1326 mSolverCounterSat, 394 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 715 SdHoareTripleChecker+Valid, 860 SdHoareTripleChecker+Invalid, 1720 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 394 IncrementalHoareTripleChecker+Valid, 1326 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:42,675 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [715 Valid, 860 Invalid, 1720 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [394 Valid, 1326 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:15:42,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:42,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:42,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:42,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:42,676 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 89 [2021-12-21 13:15:42,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:42,676 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:42,676 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:42,676 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:42,676 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:42,678 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:42,698 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:42,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-21 13:15:42,897 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:45,909 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 296 303) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) [2021-12-21 13:15:45,909 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 296 303) no Hoare annotation was computed. [2021-12-21 13:15:45,909 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 296 303) no Hoare annotation was computed. [2021-12-21 13:15:45,909 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 203 209) no Hoare annotation was computed. [2021-12-21 13:15:45,909 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 203 209) the Hoare annotation is: true [2021-12-21 13:15:45,909 INFO L858 garLoopResultBuilder]: For program point L430-1(lines 426 437) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 426 437) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~pumpRunning~0)) .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 426 437) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 438 446) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 438 446) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 438 446) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 904 933) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L861 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2021-12-21 13:15:45,910 INFO L858 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2021-12-21 13:15:45,910 INFO L854 garLoopResultBuilder]: At program point L320(lines 315 323) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0)) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L510(line 510) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse7 (and .cse1 .cse4 .cse2 .cse9 .cse8)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7) (or .cse6 .cse0 .cse7 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L510-1(line 510) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L271(lines 271 279) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L267(lines 267 284) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 179 202) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L309(line 309) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L309-1(line 309) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L512(lines 512 532) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L190-1(lines 190 196) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L475(lines 470 478) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~pumpRunning~0 0)) (.cse5 (or (not .cse1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0))) (.cse9 (<= ~waterLevel~0 1)) (.cse13 (= 1 ~systemActive~0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse12 .cse8 .cse5 .cse9 .cse13 .cse6 .cse11)) (.cse2 (not .cse13)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse5 .cse6) .cse2 .cse4 .cse3) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 .cse7 (and .cse8 .cse5 .cse9 .cse10 .cse11) .cse3 (and .cse12 .cse5 .cse9 .cse10 .cse11))) (or .cse1 .cse2 .cse7 .cse3))))) [2021-12-21 13:15:45,911 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L277(line 277) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L273(line 273) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,911 INFO L854 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point L282-1(lines 263 287) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse7 (and .cse1 .cse4 .cse2 .cse9 .cse8)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7) (or .cse6 .cse0 .cse7 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point L311(lines 304 314) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point L406(lines 406 410) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point L183-1(lines 182 201) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point L406-2(lines 402 413) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 179 202) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 179 202) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point L522(lines 522 528) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point L518(lines 518 531) no Hoare annotation was computed. [2021-12-21 13:15:45,912 INFO L854 garLoopResultBuilder]: At program point L518-1(lines 503 535) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse21 (not .cse18)) (.cse22 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0))) (let ((.cse20 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse19 (not .cse22)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (or .cse21 .cse22)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~systemActive~0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1| 1)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse15 (and .cse11 .cse3 .cse4 .cse5 .cse6 .cse17 .cse7 .cse8)) (.cse16 (and .cse11 .cse3 .cse5 .cse6 .cse21 .cse19 .cse17)) (.cse2 (and .cse10 .cse11 .cse5 .cse6 .cse21 .cse19)) (.cse9 (and .cse3 .cse5 .cse6 .cse21 .cse19 .cse20)) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not .cse6)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse10 .cse11 .cse4 .cse5 .cse6 .cse7 .cse8) .cse12) (or .cse13 .cse14 .cse15 .cse16 .cse0) (or .cse14 .cse15 .cse16 (and .cse10 .cse4 .cse17) .cse0 .cse12) (or .cse18 .cse0 .cse1 .cse2 .cse9 .cse12) (or .cse14 .cse18 .cse0 .cse19 .cse12) (or .cse13 .cse0 .cse1 .cse20)))))) [2021-12-21 13:15:45,912 INFO L858 garLoopResultBuilder]: For program point L985(lines 985 992) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L985-2(lines 985 992) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L147(lines 147 151) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L854 garLoopResultBuilder]: At program point L147-2(lines 141 152) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2021-12-21 13:15:45,913 INFO L854 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 137) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L861 garLoopResultBuilder]: At program point L994(lines 975 997) the Hoare annotation is: true [2021-12-21 13:15:45,913 INFO L861 garLoopResultBuilder]: At program point L160(lines 101 164) the Hoare annotation is: true [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L854 garLoopResultBuilder]: At program point L123(line 123) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2021-12-21 13:15:45,913 INFO L854 garLoopResultBuilder]: At program point L962(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:45,913 INFO L854 garLoopResultBuilder]: At program point L157(lines 110 158) the Hoare annotation is: false [2021-12-21 13:15:45,913 INFO L858 garLoopResultBuilder]: For program point L112(lines 111 156) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 152) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L154(lines 111 156) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L121(lines 121 127) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L121-1(lines 121 127) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L113(lines 113 117) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L861 garLoopResultBuilder]: At program point L972(lines 965 974) the Hoare annotation is: true [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)))))) [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 211 235) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L219(lines 219 227) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L858 garLoopResultBuilder]: For program point L215(lines 215 232) no Hoare annotation was computed. [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L488(lines 479 492) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse7 (= 1 ~systemActive~0)) (.cse6 (<= ~waterLevel~0 1))) (let ((.cse3 (not .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse6 (not .cse5) .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 .cse1 .cse2 (and .cse4 .cse5) (not (<= ~waterLevel~0 2)))))) [2021-12-21 13:15:45,914 INFO L854 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L230-1(lines 211 235) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 211 235) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point L375(lines 360 378) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 1))) (let ((.cse3 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (and .cse4 .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse7 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 (and .cse4 .cse5 .cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) .cse1 (not (<= ~waterLevel~0 2)) .cse2)))) [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L369-2(lines 369 373) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point L293(lines 288 295) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= ~waterLevel~0 2)) (and (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|))) (or .cse2 .cse0 .cse1))) [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L483(lines 483 489) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L418-1(lines 414 425) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 414 425) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 414 425) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point L256(line 256) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,915 INFO L858 garLoopResultBuilder]: For program point L256-1(lines 237 261) no Hoare annotation was computed. [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 237 261) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2021-12-21 13:15:45,915 INFO L854 garLoopResultBuilder]: At program point L498(lines 493 501) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,916 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 237 261) no Hoare annotation was computed. [2021-12-21 13:15:45,916 INFO L854 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,916 INFO L854 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,916 INFO L858 garLoopResultBuilder]: For program point L245(lines 245 253) no Hoare annotation was computed. [2021-12-21 13:15:45,916 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 258) no Hoare annotation was computed. [2021-12-21 13:15:45,916 INFO L854 garLoopResultBuilder]: At program point L394(lines 379 397) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:15:45,916 INFO L858 garLoopResultBuilder]: For program point L388(lines 388 392) no Hoare annotation was computed. [2021-12-21 13:15:45,916 INFO L858 garLoopResultBuilder]: For program point L388-2(lines 388 392) no Hoare annotation was computed. [2021-12-21 13:15:45,918 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:45,919 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:45,942 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:45 BoogieIcfgContainer [2021-12-21 13:15:45,945 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:45,945 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:45,945 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:45,946 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:45,946 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:37" (3/4) ... [2021-12-21 13:15:45,948 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:45,952 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:15:45,952 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:45,952 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:45,953 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:45,953 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:45,953 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:45,953 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:45,954 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:45,954 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:15:45,958 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-21 13:15:45,960 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:45,960 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:45,961 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:45,961 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:45,961 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:45,961 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:45,976 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0))) || (((((pumpRunning == 0 && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && \result <= 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && waterLevel <= \old(waterLevel))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && \result <= 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp___0 <= 1) && \result <= 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp___0 <= 1) && \result <= 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && (!(methaneLevelCritical == 0) || tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0))) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) [2021-12-21 13:15:45,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (!(methaneLevelCritical == 0) || tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:15:45,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2021-12-21 13:15:45,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:15:45,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) [2021-12-21 13:15:45,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:45,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2021-12-21 13:15:46,014 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:46,014 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:46,015 INFO L158 Benchmark]: Toolchain (without parser) took 10025.53ms. Allocated memory was 92.3MB in the beginning and 167.8MB in the end (delta: 75.5MB). Free memory was 62.4MB in the beginning and 49.0MB in the end (delta: 13.4MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,015 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 75.5MB. Free memory is still 38.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:46,015 INFO L158 Benchmark]: CACSL2BoogieTranslator took 478.23ms. Allocated memory is still 92.3MB. Free memory was 62.1MB in the beginning and 61.7MB in the end (delta: 396.4kB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,016 INFO L158 Benchmark]: Boogie Procedure Inliner took 62.78ms. Allocated memory is still 92.3MB. Free memory was 61.7MB in the beginning and 59.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,016 INFO L158 Benchmark]: Boogie Preprocessor took 49.44ms. Allocated memory is still 92.3MB. Free memory was 59.2MB in the beginning and 57.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,016 INFO L158 Benchmark]: RCFGBuilder took 546.96ms. Allocated memory is still 92.3MB. Free memory was 57.5MB in the beginning and 70.1MB in the end (delta: -12.6MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,016 INFO L158 Benchmark]: TraceAbstraction took 8813.32ms. Allocated memory was 92.3MB in the beginning and 167.8MB in the end (delta: 75.5MB). Free memory was 69.6MB in the beginning and 56.3MB in the end (delta: 13.3MB). Peak memory consumption was 98.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,016 INFO L158 Benchmark]: Witness Printer took 69.25ms. Allocated memory is still 167.8MB. Free memory was 56.3MB in the beginning and 49.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:46,018 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 75.5MB. Free memory is still 38.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 478.23ms. Allocated memory is still 92.3MB. Free memory was 62.1MB in the beginning and 61.7MB in the end (delta: 396.4kB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 62.78ms. Allocated memory is still 92.3MB. Free memory was 61.7MB in the beginning and 59.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 49.44ms. Allocated memory is still 92.3MB. Free memory was 59.2MB in the beginning and 57.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 546.96ms. Allocated memory is still 92.3MB. Free memory was 57.5MB in the beginning and 70.1MB in the end (delta: -12.6MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 8813.32ms. Allocated memory was 92.3MB in the beginning and 167.8MB in the end (delta: 75.5MB). Free memory was 69.6MB in the beginning and 56.3MB in the end (delta: 13.3MB). Peak memory consumption was 98.5MB. Max. memory is 16.1GB. * Witness Printer took 69.25ms. Allocated memory is still 167.8MB. Free memory was 56.3MB in the beginning and 49.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2521 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2480 mSDsluCounter, 4398 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3052 mSDsCounter, 966 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2935 IncrementalHoareTripleChecker+Invalid, 3901 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 966 mSolverCounterUnsat, 1346 mSDtfsCounter, 2935 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 450 GetRequests, 291 SyntacticMatches, 2 SemanticMatches, 157 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1393 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=347occurred in iteration=11, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 182 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 1364 PreInvPairs, 1631 NumberOfFragments, 1902 HoareAnnotationTreeSize, 1364 FomulaSimplifications, 216 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 47 FomulaSimplificationsInter, 22540 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 663 NumberOfCodeBlocks, 663 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 738 ConstructedInterpolants, 0 QuantifiedInterpolants, 1535 SizeOfPredicates, 4 NumberOfNonLiveVariables, 449 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 60/81 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (!(methaneLevelCritical == 0) || tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 379]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 288]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0))) || (((((pumpRunning == 0 && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && \result <= 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && waterLevel <= \old(waterLevel))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && \result <= 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp___0 <= 1) && \result <= 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && (!(methaneLevelCritical == 0) || tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp___0 <= 1) && \result <= 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && (!(methaneLevelCritical == 0) || tmp == 0)) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0))) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:46,089 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE