./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:16:13,038 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:16:13,040 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:16:13,105 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:16:13,106 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:16:13,107 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:16:13,108 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:16:13,109 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:16:13,110 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:16:13,111 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:16:13,111 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:16:13,112 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:16:13,113 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:16:13,113 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:16:13,114 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:16:13,115 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:16:13,116 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:16:13,117 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:16:13,118 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:16:13,119 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:16:13,120 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:16:13,121 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:16:13,122 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:16:13,123 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:16:13,124 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:16:13,125 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:16:13,125 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:16:13,125 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:16:13,126 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:16:13,126 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:16:13,126 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:16:13,127 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:16:13,127 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:16:13,128 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:16:13,128 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:16:13,129 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:16:13,129 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:16:13,129 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:16:13,130 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:16:13,130 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:16:13,131 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:16:13,141 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:16:13,163 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:16:13,163 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:16:13,163 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:16:13,163 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:16:13,164 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:16:13,164 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:16:13,164 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:16:13,164 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:16:13,164 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:16:13,165 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:16:13,165 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:16:13,165 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:16:13,165 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:16:13,165 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:16:13,165 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:16:13,166 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:16:13,166 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:16:13,167 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:16:13,167 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:16:13,167 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:13,167 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:16:13,167 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:16:13,167 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:16:13,168 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 [2021-12-21 13:16:13,350 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:16:13,381 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:16:13,383 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:16:13,384 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:16:13,385 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:16:13,385 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2021-12-21 13:16:13,448 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a47afeea8/1e1ad0a4d1da4c4bb2373f9b25acd2bd/FLAGd9c2de963 [2021-12-21 13:16:13,997 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:16:13,997 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2021-12-21 13:16:14,008 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a47afeea8/1e1ad0a4d1da4c4bb2373f9b25acd2bd/FLAGd9c2de963 [2021-12-21 13:16:14,395 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a47afeea8/1e1ad0a4d1da4c4bb2373f9b25acd2bd [2021-12-21 13:16:14,398 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:16:14,399 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:16:14,401 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:14,401 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:16:14,403 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:16:14,404 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,405 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7f23594d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14, skipping insertion in model container [2021-12-21 13:16:14,405 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,410 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:16:14,462 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:16:14,639 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2021-12-21 13:16:14,734 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:14,740 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:16:14,748 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2021-12-21 13:16:14,792 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:14,803 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:16:14,803 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14 WrapperNode [2021-12-21 13:16:14,803 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:14,804 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:14,804 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:16:14,804 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:16:14,809 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,818 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,851 INFO L137 Inliner]: procedures = 55, calls = 154, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 257 [2021-12-21 13:16:14,851 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:14,853 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:16:14,853 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:16:14,853 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:16:14,859 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,859 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,871 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,873 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,877 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,888 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,889 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,891 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:16:14,895 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:16:14,895 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:16:14,895 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:16:14,896 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (1/1) ... [2021-12-21 13:16:14,901 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:14,910 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:14,935 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:16:14,941 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:16:14,961 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:16:14,961 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:16:14,962 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:16:14,962 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:16:14,962 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:16:14,962 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:16:14,962 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:16:14,962 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:14,963 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:14,963 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:16:14,963 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:16:14,963 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:16:14,963 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:16:14,963 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:16:14,963 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:16:14,963 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:16:15,012 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:16:15,013 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:16:15,190 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:16:15,195 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:16:15,196 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:16:15,197 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:15 BoogieIcfgContainer [2021-12-21 13:16:15,197 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:16:15,198 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:16:15,198 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:16:15,201 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:16:15,201 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:16:14" (1/3) ... [2021-12-21 13:16:15,202 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69c73841 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:15, skipping insertion in model container [2021-12-21 13:16:15,202 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:14" (2/3) ... [2021-12-21 13:16:15,202 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69c73841 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:15, skipping insertion in model container [2021-12-21 13:16:15,202 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:15" (3/3) ... [2021-12-21 13:16:15,203 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product49.cil.c [2021-12-21 13:16:15,206 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:16:15,207 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:16:15,237 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:16:15,248 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:16:15,248 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:16:15,274 INFO L276 IsEmpty]: Start isEmpty. Operand has 82 states, 64 states have (on average 1.40625) internal successors, (90), 72 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-21 13:16:15,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-21 13:16:15,279 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:15,279 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:15,280 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:15,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:15,284 INFO L85 PathProgramCache]: Analyzing trace with hash -1722090408, now seen corresponding path program 1 times [2021-12-21 13:16:15,290 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:15,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1785149069] [2021-12-21 13:16:15,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:15,291 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:15,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:15,467 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:15,467 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1785149069] [2021-12-21 13:16:15,468 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1785149069] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:15,468 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:15,468 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:15,469 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [966799879] [2021-12-21 13:16:15,470 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:15,473 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:16:15,473 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:15,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:16:15,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:15,502 INFO L87 Difference]: Start difference. First operand has 82 states, 64 states have (on average 1.40625) internal successors, (90), 72 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:15,528 INFO L93 Difference]: Finished difference Result 156 states and 215 transitions. [2021-12-21 13:16:15,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:16:15,530 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-21 13:16:15,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:15,538 INFO L225 Difference]: With dead ends: 156 [2021-12-21 13:16:15,538 INFO L226 Difference]: Without dead ends: 73 [2021-12-21 13:16:15,543 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:15,556 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:15,557 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:15,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2021-12-21 13:16:15,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2021-12-21 13:16:15,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 64 states have internal predecessors, (76), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-21 13:16:15,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 95 transitions. [2021-12-21 13:16:15,605 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 95 transitions. Word has length 19 [2021-12-21 13:16:15,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:15,606 INFO L470 AbstractCegarLoop]: Abstraction has 73 states and 95 transitions. [2021-12-21 13:16:15,606 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,606 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 95 transitions. [2021-12-21 13:16:15,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-21 13:16:15,609 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:15,609 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:15,610 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:16:15,610 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:15,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:15,614 INFO L85 PathProgramCache]: Analyzing trace with hash 1895744144, now seen corresponding path program 1 times [2021-12-21 13:16:15,614 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:15,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019335899] [2021-12-21 13:16:15,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:15,615 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:15,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,710 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:15,711 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:15,711 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019335899] [2021-12-21 13:16:15,712 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2019335899] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:15,712 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:15,712 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:15,712 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933861335] [2021-12-21 13:16:15,712 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:15,713 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:15,713 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:15,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:15,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:15,715 INFO L87 Difference]: Start difference. First operand 73 states and 95 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:15,735 INFO L93 Difference]: Finished difference Result 112 states and 146 transitions. [2021-12-21 13:16:15,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:15,736 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-21 13:16:15,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:15,739 INFO L225 Difference]: With dead ends: 112 [2021-12-21 13:16:15,739 INFO L226 Difference]: Without dead ends: 64 [2021-12-21 13:16:15,742 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:15,743 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 12 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:15,744 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 148 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:15,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2021-12-21 13:16:15,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2021-12-21 13:16:15,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 51 states have (on average 1.3529411764705883) internal successors, (69), 58 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-21 13:16:15,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2021-12-21 13:16:15,754 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 20 [2021-12-21 13:16:15,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:15,755 INFO L470 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2021-12-21 13:16:15,756 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,756 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2021-12-21 13:16:15,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-21 13:16:15,759 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:15,759 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:15,759 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:16:15,759 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:15,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:15,761 INFO L85 PathProgramCache]: Analyzing trace with hash 540813392, now seen corresponding path program 1 times [2021-12-21 13:16:15,761 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:15,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1722933353] [2021-12-21 13:16:15,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:15,762 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:15,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:15,832 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:15,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1722933353] [2021-12-21 13:16:15,833 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1722933353] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:15,833 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:15,833 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:15,833 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [898383327] [2021-12-21 13:16:15,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:15,834 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:15,834 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:15,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:15,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:15,836 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:15,852 INFO L93 Difference]: Finished difference Result 121 states and 160 transitions. [2021-12-21 13:16:15,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:15,854 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-12-21 13:16:15,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:15,855 INFO L225 Difference]: With dead ends: 121 [2021-12-21 13:16:15,856 INFO L226 Difference]: Without dead ends: 64 [2021-12-21 13:16:15,857 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:15,859 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 65 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:15,860 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [65 Valid, 81 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:15,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2021-12-21 13:16:15,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2021-12-21 13:16:15,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 51 states have (on average 1.3333333333333333) internal successors, (68), 58 states have internal predecessors, (68), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-21 13:16:15,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 82 transitions. [2021-12-21 13:16:15,869 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 82 transitions. Word has length 24 [2021-12-21 13:16:15,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:15,869 INFO L470 AbstractCegarLoop]: Abstraction has 64 states and 82 transitions. [2021-12-21 13:16:15,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:15,870 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 82 transitions. [2021-12-21 13:16:15,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-21 13:16:15,874 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:15,874 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:15,874 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:16:15,874 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:15,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:15,875 INFO L85 PathProgramCache]: Analyzing trace with hash 412315462, now seen corresponding path program 1 times [2021-12-21 13:16:15,875 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:15,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1908069444] [2021-12-21 13:16:15,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:15,876 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:15,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:15,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:15,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:15,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:15,971 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:15,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1908069444] [2021-12-21 13:16:15,972 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1908069444] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:15,973 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:15,973 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:15,973 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1856278194] [2021-12-21 13:16:15,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:15,974 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:15,975 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:15,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:15,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:15,975 INFO L87 Difference]: Start difference. First operand 64 states and 82 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:16,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:16,160 INFO L93 Difference]: Finished difference Result 183 states and 235 transitions. [2021-12-21 13:16:16,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:16,160 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 34 [2021-12-21 13:16:16,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:16,162 INFO L225 Difference]: With dead ends: 183 [2021-12-21 13:16:16,168 INFO L226 Difference]: Without dead ends: 126 [2021-12-21 13:16:16,169 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:16,170 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 149 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:16,170 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [151 Valid, 267 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:16,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2021-12-21 13:16:16,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 120. [2021-12-21 13:16:16,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 96 states have (on average 1.28125) internal successors, (123), 103 states have internal predecessors, (123), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2021-12-21 13:16:16,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 148 transitions. [2021-12-21 13:16:16,187 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 148 transitions. Word has length 34 [2021-12-21 13:16:16,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:16,188 INFO L470 AbstractCegarLoop]: Abstraction has 120 states and 148 transitions. [2021-12-21 13:16:16,188 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:16,189 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 148 transitions. [2021-12-21 13:16:16,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:16:16,190 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:16,190 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:16,190 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:16:16,191 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:16,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:16,192 INFO L85 PathProgramCache]: Analyzing trace with hash 1451427371, now seen corresponding path program 1 times [2021-12-21 13:16:16,192 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:16,192 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277862458] [2021-12-21 13:16:16,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:16,193 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:16,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:16,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:16,288 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:16,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277862458] [2021-12-21 13:16:16,288 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277862458] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:16,288 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:16,289 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:16,289 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486625992] [2021-12-21 13:16:16,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:16,289 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:16,289 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:16,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:16,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:16,290 INFO L87 Difference]: Start difference. First operand 120 states and 148 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:16,377 INFO L93 Difference]: Finished difference Result 241 states and 301 transitions. [2021-12-21 13:16:16,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:16,377 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-21 13:16:16,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:16,379 INFO L225 Difference]: With dead ends: 241 [2021-12-21 13:16:16,379 INFO L226 Difference]: Without dead ends: 128 [2021-12-21 13:16:16,379 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:16,380 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 59 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:16,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 339 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:16,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2021-12-21 13:16:16,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 123. [2021-12-21 13:16:16,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 99 states have (on average 1.2727272727272727) internal successors, (126), 106 states have internal predecessors, (126), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2021-12-21 13:16:16,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 151 transitions. [2021-12-21 13:16:16,390 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 151 transitions. Word has length 38 [2021-12-21 13:16:16,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:16,390 INFO L470 AbstractCegarLoop]: Abstraction has 123 states and 151 transitions. [2021-12-21 13:16:16,390 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,390 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 151 transitions. [2021-12-21 13:16:16,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:16:16,391 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:16,391 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:16,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:16:16,392 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:16,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:16,392 INFO L85 PathProgramCache]: Analyzing trace with hash 440310121, now seen corresponding path program 1 times [2021-12-21 13:16:16,392 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:16,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802898923] [2021-12-21 13:16:16,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:16,393 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:16,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:16,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:16,440 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:16,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802898923] [2021-12-21 13:16:16,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [802898923] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:16,440 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:16,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:16,441 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [66069148] [2021-12-21 13:16:16,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:16,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:16,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:16,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:16,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:16,442 INFO L87 Difference]: Start difference. First operand 123 states and 151 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:16,526 INFO L93 Difference]: Finished difference Result 252 states and 316 transitions. [2021-12-21 13:16:16,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:16,526 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-21 13:16:16,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:16,527 INFO L225 Difference]: With dead ends: 252 [2021-12-21 13:16:16,528 INFO L226 Difference]: Without dead ends: 136 [2021-12-21 13:16:16,528 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:16,529 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 130 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 263 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:16,529 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [132 Valid, 263 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:16,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2021-12-21 13:16:16,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 125. [2021-12-21 13:16:16,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 101 states have (on average 1.2673267326732673) internal successors, (128), 108 states have internal predecessors, (128), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2021-12-21 13:16:16,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 153 transitions. [2021-12-21 13:16:16,538 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 153 transitions. Word has length 38 [2021-12-21 13:16:16,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:16,538 INFO L470 AbstractCegarLoop]: Abstraction has 125 states and 153 transitions. [2021-12-21 13:16:16,538 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,538 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 153 transitions. [2021-12-21 13:16:16,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:16:16,539 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:16,539 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:16,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:16:16,540 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:16,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:16,540 INFO L85 PathProgramCache]: Analyzing trace with hash -580758233, now seen corresponding path program 1 times [2021-12-21 13:16:16,540 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:16,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1955360660] [2021-12-21 13:16:16,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:16,545 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:16,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:16,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:16,585 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:16,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1955360660] [2021-12-21 13:16:16,585 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1955360660] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:16,585 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:16,585 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:16,585 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [985332515] [2021-12-21 13:16:16,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:16,586 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:16,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:16,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:16,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:16,587 INFO L87 Difference]: Start difference. First operand 125 states and 153 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:16,706 INFO L93 Difference]: Finished difference Result 355 states and 457 transitions. [2021-12-21 13:16:16,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:16,707 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-21 13:16:16,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:16,708 INFO L225 Difference]: With dead ends: 355 [2021-12-21 13:16:16,708 INFO L226 Difference]: Without dead ends: 237 [2021-12-21 13:16:16,709 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:16,709 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 177 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:16,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [181 Valid, 279 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:16,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2021-12-21 13:16:16,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 229. [2021-12-21 13:16:16,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 181 states have (on average 1.2596685082872927) internal successors, (228), 192 states have internal predecessors, (228), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (38), 23 states have call predecessors, (38), 23 states have call successors, (38) [2021-12-21 13:16:16,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 289 transitions. [2021-12-21 13:16:16,723 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 289 transitions. Word has length 38 [2021-12-21 13:16:16,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:16,724 INFO L470 AbstractCegarLoop]: Abstraction has 229 states and 289 transitions. [2021-12-21 13:16:16,724 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:16:16,724 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 289 transitions. [2021-12-21 13:16:16,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-21 13:16:16,725 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:16,725 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:16,725 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:16:16,725 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:16,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:16,725 INFO L85 PathProgramCache]: Analyzing trace with hash -360899650, now seen corresponding path program 1 times [2021-12-21 13:16:16,726 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:16,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349542157] [2021-12-21 13:16:16,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:16,726 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:16,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:16,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:16,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:16,770 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:16,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349542157] [2021-12-21 13:16:16,770 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349542157] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:16,770 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:16,770 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:16,770 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1431011739] [2021-12-21 13:16:16,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:16,771 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:16,771 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:16,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:16,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:16,772 INFO L87 Difference]: Start difference. First operand 229 states and 289 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:16,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:16,881 INFO L93 Difference]: Finished difference Result 451 states and 570 transitions. [2021-12-21 13:16:16,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:16,888 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2021-12-21 13:16:16,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:16,892 INFO L225 Difference]: With dead ends: 451 [2021-12-21 13:16:16,892 INFO L226 Difference]: Without dead ends: 229 [2021-12-21 13:16:16,893 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:16:16,893 INFO L933 BasicCegarLoop]: 76 mSDtfsCounter, 98 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:16,894 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 320 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:16,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2021-12-21 13:16:16,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 227. [2021-12-21 13:16:16,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 179 states have (on average 1.2513966480446927) internal successors, (224), 190 states have internal predecessors, (224), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (38), 23 states have call predecessors, (38), 23 states have call successors, (38) [2021-12-21 13:16:16,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 285 transitions. [2021-12-21 13:16:16,906 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 285 transitions. Word has length 40 [2021-12-21 13:16:16,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:16,906 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 285 transitions. [2021-12-21 13:16:16,906 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:16,907 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 285 transitions. [2021-12-21 13:16:16,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-12-21 13:16:16,907 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:16,907 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:16,907 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:16:16,908 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:16,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:16,908 INFO L85 PathProgramCache]: Analyzing trace with hash 2038696205, now seen corresponding path program 1 times [2021-12-21 13:16:16,908 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:16,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426546867] [2021-12-21 13:16:16,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:16,909 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:16,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:16,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:16:16,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:16,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:16,963 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:16,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426546867] [2021-12-21 13:16:16,964 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1426546867] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:16,964 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:16,964 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:16:16,964 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [794463715] [2021-12-21 13:16:16,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:16,964 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:16:16,965 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:16,965 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:16:16,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:16,965 INFO L87 Difference]: Start difference. First operand 227 states and 285 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:17,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:17,149 INFO L93 Difference]: Finished difference Result 456 states and 585 transitions. [2021-12-21 13:16:17,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 13:16:17,149 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2021-12-21 13:16:17,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:17,151 INFO L225 Difference]: With dead ends: 456 [2021-12-21 13:16:17,151 INFO L226 Difference]: Without dead ends: 276 [2021-12-21 13:16:17,152 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2021-12-21 13:16:17,152 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 159 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 484 SdHoareTripleChecker+Invalid, 280 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:17,152 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 484 Invalid, 280 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:17,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2021-12-21 13:16:17,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 253. [2021-12-21 13:16:17,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 201 states have (on average 1.2338308457711442) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 27 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2021-12-21 13:16:17,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 313 transitions. [2021-12-21 13:16:17,163 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 313 transitions. Word has length 42 [2021-12-21 13:16:17,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:17,163 INFO L470 AbstractCegarLoop]: Abstraction has 253 states and 313 transitions. [2021-12-21 13:16:17,163 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:17,163 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 313 transitions. [2021-12-21 13:16:17,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-21 13:16:17,164 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:17,164 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:17,165 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:16:17,165 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:17,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:17,165 INFO L85 PathProgramCache]: Analyzing trace with hash 871440435, now seen corresponding path program 1 times [2021-12-21 13:16:17,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:17,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101585434] [2021-12-21 13:16:17,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:17,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:17,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:17,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:17,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:17,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:17,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:17,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:17,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:17,222 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:17,222 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:17,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101585434] [2021-12-21 13:16:17,222 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101585434] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:17,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1203039671] [2021-12-21 13:16:17,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:17,223 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:17,223 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:17,243 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:17,245 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:16:17,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:17,323 INFO L263 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:16:17,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:17,496 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 12 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:17,496 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:17,618 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 12 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:17,618 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1203039671] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:17,618 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:17,618 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2021-12-21 13:16:17,619 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [491643902] [2021-12-21 13:16:17,619 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:17,619 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-21 13:16:17,619 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:17,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-21 13:16:17,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:16:17,620 INFO L87 Difference]: Start difference. First operand 253 states and 313 transitions. Second operand has 12 states, 12 states have (on average 7.833333333333333) internal successors, (94), 9 states have internal predecessors, (94), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-21 13:16:18,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:18,280 INFO L93 Difference]: Finished difference Result 628 states and 814 transitions. [2021-12-21 13:16:18,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2021-12-21 13:16:18,281 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 7.833333333333333) internal successors, (94), 9 states have internal predecessors, (94), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 69 [2021-12-21 13:16:18,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:18,283 INFO L225 Difference]: With dead ends: 628 [2021-12-21 13:16:18,283 INFO L226 Difference]: Without dead ends: 424 [2021-12-21 13:16:18,284 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 142 SyntacticMatches, 4 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 402 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=312, Invalid=1328, Unknown=0, NotChecked=0, Total=1640 [2021-12-21 13:16:18,285 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 307 mSDsluCounter, 841 mSDsCounter, 0 mSdLazyCounter, 753 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 311 SdHoareTripleChecker+Valid, 981 SdHoareTripleChecker+Invalid, 838 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 753 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:18,285 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [311 Valid, 981 Invalid, 838 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 753 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-21 13:16:18,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2021-12-21 13:16:18,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 355. [2021-12-21 13:16:18,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 282 states have (on average 1.2234042553191489) internal successors, (345), 301 states have internal predecessors, (345), 34 states have call successors, (34), 33 states have call predecessors, (34), 38 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2021-12-21 13:16:18,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 440 transitions. [2021-12-21 13:16:18,300 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 440 transitions. Word has length 69 [2021-12-21 13:16:18,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:18,301 INFO L470 AbstractCegarLoop]: Abstraction has 355 states and 440 transitions. [2021-12-21 13:16:18,301 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 7.833333333333333) internal successors, (94), 9 states have internal predecessors, (94), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-21 13:16:18,301 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 440 transitions. [2021-12-21 13:16:18,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-12-21 13:16:18,302 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:18,302 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:18,321 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:18,519 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:16:18,519 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:18,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:18,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1761843705, now seen corresponding path program 1 times [2021-12-21 13:16:18,520 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:18,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294878342] [2021-12-21 13:16:18,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:18,520 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:18,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:18,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:18,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:18,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:16:18,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:18,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:18,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,598 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 8 proven. 2 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2021-12-21 13:16:18,598 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:18,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294878342] [2021-12-21 13:16:18,598 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294878342] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:18,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [217126023] [2021-12-21 13:16:18,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:18,599 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:18,599 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:18,600 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:18,661 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:16:18,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:18,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 491 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-21 13:16:18,716 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:19,002 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 53 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:19,002 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:19,308 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 51 proven. 9 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-21 13:16:19,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [217126023] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:19,308 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:19,308 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 8] total 20 [2021-12-21 13:16:19,308 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1571753616] [2021-12-21 13:16:19,308 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:19,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-21 13:16:19,310 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:19,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-21 13:16:19,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=309, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:16:19,310 INFO L87 Difference]: Start difference. First operand 355 states and 440 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (14), 8 states have call predecessors, (14), 5 states have return successors, (12), 6 states have call predecessors, (12), 5 states have call successors, (12) [2021-12-21 13:16:20,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:20,672 INFO L93 Difference]: Finished difference Result 916 states and 1194 transitions. [2021-12-21 13:16:20,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2021-12-21 13:16:20,673 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (14), 8 states have call predecessors, (14), 5 states have return successors, (12), 6 states have call predecessors, (12), 5 states have call successors, (12) Word has length 103 [2021-12-21 13:16:20,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:20,676 INFO L225 Difference]: With dead ends: 916 [2021-12-21 13:16:20,676 INFO L226 Difference]: Without dead ends: 609 [2021-12-21 13:16:20,677 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 226 SyntacticMatches, 1 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 580 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=636, Invalid=2334, Unknown=0, NotChecked=0, Total=2970 [2021-12-21 13:16:20,678 INFO L933 BasicCegarLoop]: 244 mSDtfsCounter, 656 mSDsluCounter, 1470 mSDsCounter, 0 mSdLazyCounter, 1634 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 663 SdHoareTripleChecker+Valid, 1714 SdHoareTripleChecker+Invalid, 1833 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 1634 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:20,678 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [663 Valid, 1714 Invalid, 1833 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 1634 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:16:20,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 609 states. [2021-12-21 13:16:20,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 609 to 525. [2021-12-21 13:16:20,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 525 states, 411 states have (on average 1.2092457420924574) internal successors, (497), 435 states have internal predecessors, (497), 56 states have call successors, (56), 54 states have call predecessors, (56), 57 states have return successors, (91), 51 states have call predecessors, (91), 56 states have call successors, (91) [2021-12-21 13:16:20,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 525 states to 525 states and 644 transitions. [2021-12-21 13:16:20,707 INFO L78 Accepts]: Start accepts. Automaton has 525 states and 644 transitions. Word has length 103 [2021-12-21 13:16:20,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:20,707 INFO L470 AbstractCegarLoop]: Abstraction has 525 states and 644 transitions. [2021-12-21 13:16:20,708 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (14), 8 states have call predecessors, (14), 5 states have return successors, (12), 6 states have call predecessors, (12), 5 states have call successors, (12) [2021-12-21 13:16:20,708 INFO L276 IsEmpty]: Start isEmpty. Operand 525 states and 644 transitions. [2021-12-21 13:16:20,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-12-21 13:16:20,709 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:20,709 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:20,733 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:20,930 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:16:20,930 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:20,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:20,931 INFO L85 PathProgramCache]: Analyzing trace with hash 1113823743, now seen corresponding path program 1 times [2021-12-21 13:16:20,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:20,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850143675] [2021-12-21 13:16:20,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:20,931 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:20,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:20,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:20,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:20,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:16:20,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:20,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:20,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-21 13:16:20,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:20,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:20,995 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-21 13:16:20,996 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:20,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850143675] [2021-12-21 13:16:20,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850143675] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:20,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [217858442] [2021-12-21 13:16:20,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:20,996 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:20,996 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:21,012 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:21,013 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:16:21,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:21,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 503 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-21 13:16:21,093 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:21,223 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-21 13:16:21,223 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:16:21,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [217858442] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:21,224 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:16:21,224 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 9 [2021-12-21 13:16:21,224 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190543414] [2021-12-21 13:16:21,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:21,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:21,225 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:21,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:21,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:16:21,225 INFO L87 Difference]: Start difference. First operand 525 states and 644 transitions. Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:16:21,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:21,251 INFO L93 Difference]: Finished difference Result 676 states and 824 transitions. [2021-12-21 13:16:21,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:21,252 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 110 [2021-12-21 13:16:21,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:21,252 INFO L225 Difference]: With dead ends: 676 [2021-12-21 13:16:21,252 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:16:21,254 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2021-12-21 13:16:21,254 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 27 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:21,254 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 297 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:21,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:16:21,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:16:21,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:21,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:16:21,255 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2021-12-21 13:16:21,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:21,255 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:16:21,256 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:16:21,256 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:16:21,256 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:16:21,258 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:16:21,295 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-21 13:16:21,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:21,498 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 303 309) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 303 309) the Hoare annotation is: true [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point L97-1(lines 93 104) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 93 104) the Hoare annotation is: true [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 93 104) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point L283-1(lines 282 301) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point L345(lines 345 353) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point L341(lines 341 358) no Hoare annotation was computed. [2021-12-21 13:16:22,882 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 77) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L73-2(lines 69 80) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 279 302) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L581-1(lines 573 597) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 2 ~waterLevel~0) .cse6 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|) .cse5 (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse2 (not .cse6)) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) (and .cse3 .cse4 .cse5)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse1 .cse2 .cse4 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_getWaterLevel_#res#1|)))))) [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L375(lines 370 377) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 (< |old(~waterLevel~0)| 2)))) [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L462(lines 462 466) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L462-2(lines 462 466) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 168) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L356(line 356) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0)))) [2021-12-21 13:16:22,883 INFO L854 garLoopResultBuilder]: At program point L356-1(lines 337 361) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse1 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0) (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 .cse2 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:22,883 INFO L858 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2021-12-21 13:16:22,884 INFO L854 garLoopResultBuilder]: At program point L468(lines 453 471) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:22,884 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 279 302) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0)))) [2021-12-21 13:16:22,884 INFO L854 garLoopResultBuilder]: At program point L142(lines 137 145) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse2 (< |old(~waterLevel~0)| 2)) (.cse3 (and (<= 2 ~waterLevel~0) .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse5)) (.cse4 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse4 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_getWaterLevel_#res#1|)) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse4 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1)))))) [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 279 302) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L854 garLoopResultBuilder]: At program point L394(lines 389 397) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 172 201) the Hoare annotation is: true [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L861 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point L183(line 183) no Hoare annotation was computed. [2021-12-21 13:16:22,884 INFO L861 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2021-12-21 13:16:22,884 INFO L861 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2021-12-21 13:16:22,884 INFO L858 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L861 garLoopResultBuilder]: At program point L197(lines 172 201) the Hoare annotation is: true [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L258-2(lines 258 265) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L568(lines 563 571) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:16:22,885 INFO L861 garLoopResultBuilder]: At program point L242(lines 235 244) the Hoare annotation is: true [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L560(lines 556 562) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:16:22,885 INFO L861 garLoopResultBuilder]: At program point L267(lines 248 270) the Hoare annotation is: true [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L519(lines 519 523) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L519-2(lines 513 524) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not (< ~waterLevel~0 2)) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L503(lines 503 509) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L503-1(lines 503 509) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L861 garLoopResultBuilder]: At program point L532(lines 473 536) the Hoare annotation is: true [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L495(line 495) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L553(lines 549 555) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L231(lines 227 233) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:16:22,885 INFO L854 garLoopResultBuilder]: At program point L529(lines 482 530) the Hoare annotation is: false [2021-12-21 13:16:22,885 INFO L858 garLoopResultBuilder]: For program point L484(lines 483 528) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L513(lines 513 524) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L505(line 505) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not (< ~waterLevel~0 2)) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L526(lines 483 528) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L493(lines 493 499) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L493-1(lines 493 499) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L485(lines 485 489) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L258(lines 258 265) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 311 335) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L155(lines 146 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))))) [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse3 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse3))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2))))) [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L449(lines 434 452) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) .cse2))) [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L319(lines 319 327) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 311 335) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L315(lines 315 332) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L443-2(lines 443 447) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L858 garLoopResultBuilder]: For program point L150(lines 150 156) no Hoare annotation was computed. [2021-12-21 13:16:22,886 INFO L854 garLoopResultBuilder]: At program point L367(lines 362 369) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2021-12-21 13:16:22,887 INFO L854 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2021-12-21 13:16:22,887 INFO L858 garLoopResultBuilder]: For program point L330-1(lines 311 335) no Hoare annotation was computed. [2021-12-21 13:16:22,887 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 81 92) no Hoare annotation was computed. [2021-12-21 13:16:22,887 INFO L858 garLoopResultBuilder]: For program point L85-1(lines 81 92) no Hoare annotation was computed. [2021-12-21 13:16:22,887 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 81 92) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:16:22,889 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:22,890 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:16:22,903 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:16:22 BoogieIcfgContainer [2021-12-21 13:16:22,904 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:16:22,904 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:16:22,904 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:16:22,904 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:16:22,905 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:15" (3/4) ... [2021-12-21 13:16:22,907 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:16:22,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:16:22,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:16:22,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:16:22,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:16:22,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:22,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:16:22,915 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-21 13:16:22,916 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:16:22,916 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:16:22,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:16:22,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:16:22,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:16:22,918 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:16:22,931 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2021-12-21 13:16:22,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || (((((((1 <= tmp && \result == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) [2021-12-21 13:16:22,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) < 2) || (((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result)) && (((!(1 == systemActive) || \old(waterLevel) < 2) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || (((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) [2021-12-21 13:16:22,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || ((((2 <= waterLevel && 1 == systemActive) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) < 2) && \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((((((2 <= waterLevel && 1 == systemActive) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(1 == systemActive)) || \old(waterLevel) < 2) || ((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) [2021-12-21 13:16:22,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || \old(waterLevel) < 2) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || \old(waterLevel) < 2) [2021-12-21 13:16:22,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || \old(waterLevel) < 2) [2021-12-21 13:16:22,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) [2021-12-21 13:16:22,955 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:16:22,955 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:16:22,956 INFO L158 Benchmark]: Toolchain (without parser) took 8556.46ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 66.6MB in the beginning and 72.1MB in the end (delta: -5.6MB). Peak memory consumption was 39.7MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,956 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 43.1MB in the beginning and 43.1MB in the end (delta: 42.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:16:22,956 INFO L158 Benchmark]: CACSL2BoogieTranslator took 403.02ms. Allocated memory is still 98.6MB. Free memory was 66.4MB in the beginning and 67.9MB in the end (delta: -1.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,957 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.17ms. Allocated memory is still 98.6MB. Free memory was 67.4MB in the beginning and 65.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,957 INFO L158 Benchmark]: Boogie Preprocessor took 41.52ms. Allocated memory is still 98.6MB. Free memory was 65.3MB in the beginning and 63.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,957 INFO L158 Benchmark]: RCFGBuilder took 302.29ms. Allocated memory is still 98.6MB. Free memory was 63.7MB in the beginning and 47.7MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,957 INFO L158 Benchmark]: TraceAbstraction took 7705.47ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 46.9MB in the beginning and 78.4MB in the end (delta: -31.5MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,957 INFO L158 Benchmark]: Witness Printer took 51.30ms. Allocated memory is still 144.7MB. Free memory was 78.4MB in the beginning and 72.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:16:22,958 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 43.1MB in the beginning and 43.1MB in the end (delta: 42.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 403.02ms. Allocated memory is still 98.6MB. Free memory was 66.4MB in the beginning and 67.9MB in the end (delta: -1.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.17ms. Allocated memory is still 98.6MB. Free memory was 67.4MB in the beginning and 65.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.52ms. Allocated memory is still 98.6MB. Free memory was 65.3MB in the beginning and 63.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 302.29ms. Allocated memory is still 98.6MB. Free memory was 63.7MB in the beginning and 47.7MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 7705.47ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 46.9MB in the beginning and 78.4MB in the end (delta: -31.5MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. * Witness Printer took 51.30ms. Allocated memory is still 144.7MB. Free memory was 78.4MB in the beginning and 72.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 82 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1866 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1839 mSDsluCounter, 5277 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3942 mSDsCounter, 464 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3098 IncrementalHoareTripleChecker+Invalid, 3562 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 464 mSolverCounterUnsat, 1335 mSDtfsCounter, 3098 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 688 GetRequests, 532 SyntacticMatches, 7 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1009 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=525occurred in iteration=11, InterpolantAutomatonStates: 138, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 208 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 977 PreInvPairs, 1057 NumberOfFragments, 915 HoareAnnotationTreeSize, 977 FomulaSimplifications, 614 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 38 FomulaSimplificationsInter, 4889 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 857 NumberOfCodeBlocks, 857 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1012 ConstructedInterpolants, 0 QuantifiedInterpolants, 1978 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1401 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 17 InterpolantComputations, 10 PerfectInterpolantSequences, 344/382 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 337]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || (((((((1 <= tmp && \result == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) - InvariantResult [Line: 482]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 473]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) < 2) || (((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result)) && (((!(1 == systemActive) || \old(waterLevel) < 2) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || (((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 69]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || \old(waterLevel) < 2) - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || \old(waterLevel) < 2) - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 573]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || ((((2 <= waterLevel && 1 == systemActive) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) < 2) && \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((((((2 <= waterLevel && 1 == systemActive) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(1 == systemActive)) || \old(waterLevel) < 2) || ((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) - InvariantResult [Line: 563]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || \old(waterLevel) < 2) - InvariantResult [Line: 146]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:16:23,003 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE