./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:16:20,856 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:16:20,858 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:16:20,906 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:16:20,907 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:16:20,909 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:16:20,910 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:16:20,914 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:16:20,933 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:16:20,936 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:16:20,937 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:16:20,938 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:16:20,938 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:16:20,940 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:16:20,941 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:16:20,943 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:16:20,944 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:16:20,945 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:16:20,947 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:16:20,951 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:16:20,952 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:16:20,953 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:16:20,954 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:16:20,956 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:16:20,961 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:16:20,962 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:16:20,962 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:16:20,963 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:16:20,964 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:16:20,964 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:16:20,966 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:16:20,966 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:16:20,968 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:16:20,968 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:16:20,969 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:16:20,970 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:16:20,970 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:16:20,970 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:16:20,970 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:16:20,971 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:16:20,971 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:16:20,972 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:16:21,001 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:16:21,001 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:16:21,001 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:16:21,002 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:16:21,002 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:16:21,002 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:16:21,003 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:16:21,003 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:16:21,003 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:16:21,003 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:16:21,004 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:16:21,004 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:16:21,004 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:16:21,004 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:16:21,005 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:16:21,006 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:16:21,006 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:16:21,006 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:16:21,006 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:16:21,006 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:21,006 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:16:21,007 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:16:21,007 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:16:21,007 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:16:21,007 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:16:21,008 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:16:21,008 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:16:21,008 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:16:21,009 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:16:21,009 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f [2021-12-21 13:16:21,215 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:16:21,235 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:16:21,237 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:16:21,238 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:16:21,240 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:16:21,242 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2021-12-21 13:16:21,287 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/16cda8717/447f6560dd0e4293924547cb0c05e9ea/FLAG0a9c7c341 [2021-12-21 13:16:21,720 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:16:21,720 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2021-12-21 13:16:21,729 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/16cda8717/447f6560dd0e4293924547cb0c05e9ea/FLAG0a9c7c341 [2021-12-21 13:16:21,738 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/16cda8717/447f6560dd0e4293924547cb0c05e9ea [2021-12-21 13:16:21,740 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:16:21,742 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:16:21,744 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:21,744 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:16:21,747 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:16:21,748 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:21" (1/1) ... [2021-12-21 13:16:21,749 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@13159831 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:21, skipping insertion in model container [2021-12-21 13:16:21,749 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:21" (1/1) ... [2021-12-21 13:16:21,753 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:16:21,780 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:16:21,910 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2021-12-21 13:16:22,026 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:22,046 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:16:22,058 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2021-12-21 13:16:22,097 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:22,109 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:16:22,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22 WrapperNode [2021-12-21 13:16:22,110 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:22,111 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:22,111 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:16:22,111 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:16:22,116 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,126 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,169 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 292 [2021-12-21 13:16:22,169 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:22,170 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:16:22,170 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:16:22,170 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:16:22,176 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,176 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,178 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,178 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,182 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,185 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,187 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,189 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:16:22,189 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:16:22,189 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:16:22,190 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:16:22,191 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (1/1) ... [2021-12-21 13:16:22,196 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:22,219 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:22,248 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:16:22,255 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:16:22,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:16:22,276 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:16:22,277 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:16:22,277 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:16:22,277 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:16:22,277 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:16:22,277 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:16:22,277 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:22,277 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:22,277 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:16:22,278 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:16:22,278 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:22,278 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:22,278 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:16:22,278 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:16:22,278 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:16:22,278 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:16:22,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:16:22,279 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:16:22,279 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:16:22,279 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:16:22,279 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:16:22,346 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:16:22,348 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:16:22,590 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:16:22,595 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:16:22,595 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:16:22,597 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:22 BoogieIcfgContainer [2021-12-21 13:16:22,597 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:16:22,598 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:16:22,598 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:16:22,612 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:16:22,612 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:16:21" (1/3) ... [2021-12-21 13:16:22,612 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@afacbf6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:22, skipping insertion in model container [2021-12-21 13:16:22,613 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:22" (2/3) ... [2021-12-21 13:16:22,613 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@afacbf6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:22, skipping insertion in model container [2021-12-21 13:16:22,613 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:22" (3/3) ... [2021-12-21 13:16:22,614 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2021-12-21 13:16:22,618 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:16:22,618 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:16:22,658 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:16:22,664 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:16:22,665 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:16:22,688 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-21 13:16:22,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-21 13:16:22,693 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:22,694 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:22,694 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:22,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:22,698 INFO L85 PathProgramCache]: Analyzing trace with hash 1971423540, now seen corresponding path program 1 times [2021-12-21 13:16:22,706 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:22,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [295960473] [2021-12-21 13:16:22,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:22,707 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:22,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:22,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:22,919 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:22,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [295960473] [2021-12-21 13:16:22,920 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [295960473] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:22,920 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:22,920 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:22,921 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837119414] [2021-12-21 13:16:22,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:22,925 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:16:22,926 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:22,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:16:22,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:22,956 INFO L87 Difference]: Start difference. First operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:23,002 INFO L93 Difference]: Finished difference Result 200 states and 271 transitions. [2021-12-21 13:16:23,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:16:23,004 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-21 13:16:23,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:23,015 INFO L225 Difference]: With dead ends: 200 [2021-12-21 13:16:23,015 INFO L226 Difference]: Without dead ends: 95 [2021-12-21 13:16:23,021 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:23,024 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:23,025 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:23,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2021-12-21 13:16:23,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2021-12-21 13:16:23,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-21 13:16:23,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2021-12-21 13:16:23,079 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 19 [2021-12-21 13:16:23,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:23,080 INFO L470 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2021-12-21 13:16:23,080 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,080 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2021-12-21 13:16:23,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-21 13:16:23,082 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:23,083 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:23,083 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:16:23,084 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:23,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:23,085 INFO L85 PathProgramCache]: Analyzing trace with hash -856589602, now seen corresponding path program 1 times [2021-12-21 13:16:23,085 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:23,086 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596083513] [2021-12-21 13:16:23,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:23,086 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:23,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:23,186 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:23,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596083513] [2021-12-21 13:16:23,186 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1596083513] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:23,186 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:23,186 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:23,186 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439470846] [2021-12-21 13:16:23,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:23,187 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:23,188 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:23,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:23,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:23,188 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:23,210 INFO L93 Difference]: Finished difference Result 155 states and 201 transitions. [2021-12-21 13:16:23,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:23,214 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-21 13:16:23,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:23,216 INFO L225 Difference]: With dead ends: 155 [2021-12-21 13:16:23,216 INFO L226 Difference]: Without dead ends: 86 [2021-12-21 13:16:23,217 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:23,218 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 13 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:23,219 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 203 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:23,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-12-21 13:16:23,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-12-21 13:16:23,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.328125) internal successors, (85), 73 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:16:23,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2021-12-21 13:16:23,226 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 20 [2021-12-21 13:16:23,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:23,226 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2021-12-21 13:16:23,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,226 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2021-12-21 13:16:23,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:16:23,229 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:23,229 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:23,229 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:16:23,230 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:23,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:23,230 INFO L85 PathProgramCache]: Analyzing trace with hash 2135542647, now seen corresponding path program 1 times [2021-12-21 13:16:23,230 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:23,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2065670072] [2021-12-21 13:16:23,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:23,231 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:23,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:23,316 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:23,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2065670072] [2021-12-21 13:16:23,316 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2065670072] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:23,318 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:23,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:23,319 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1898181288] [2021-12-21 13:16:23,319 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:23,320 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:23,320 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:23,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:23,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:23,321 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:23,390 INFO L93 Difference]: Finished difference Result 165 states and 216 transitions. [2021-12-21 13:16:23,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:23,390 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2021-12-21 13:16:23,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:23,391 INFO L225 Difference]: With dead ends: 165 [2021-12-21 13:16:23,391 INFO L226 Difference]: Without dead ends: 86 [2021-12-21 13:16:23,392 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:23,393 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 136 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:23,393 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 280 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:23,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-12-21 13:16:23,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-12-21 13:16:23,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 73 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:16:23,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2021-12-21 13:16:23,402 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 25 [2021-12-21 13:16:23,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:23,403 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2021-12-21 13:16:23,403 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:23,403 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2021-12-21 13:16:23,407 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:16:23,408 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:23,408 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:23,408 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:16:23,408 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:23,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:23,409 INFO L85 PathProgramCache]: Analyzing trace with hash -181443690, now seen corresponding path program 1 times [2021-12-21 13:16:23,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:23,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388214251] [2021-12-21 13:16:23,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:23,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:23,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:23,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:23,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:23,454 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:23,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388214251] [2021-12-21 13:16:23,454 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388214251] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:23,454 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:23,455 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 13:16:23,455 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997412057] [2021-12-21 13:16:23,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:23,455 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 13:16:23,456 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:23,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 13:16:23,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:16:23,456 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:23,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:23,569 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2021-12-21 13:16:23,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:23,570 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-21 13:16:23,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:23,571 INFO L225 Difference]: With dead ends: 241 [2021-12-21 13:16:23,571 INFO L226 Difference]: Without dead ends: 162 [2021-12-21 13:16:23,572 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:23,573 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 153 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:23,573 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 203 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:23,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-21 13:16:23,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2021-12-21 13:16:23,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.26890756302521) internal successors, (151), 128 states have internal predecessors, (151), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2021-12-21 13:16:23,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 194 transitions. [2021-12-21 13:16:23,586 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 194 transitions. Word has length 38 [2021-12-21 13:16:23,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:23,586 INFO L470 AbstractCegarLoop]: Abstraction has 156 states and 194 transitions. [2021-12-21 13:16:23,586 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:23,587 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 194 transitions. [2021-12-21 13:16:23,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-21 13:16:23,587 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:23,588 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:23,588 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:16:23,588 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:23,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:23,588 INFO L85 PathProgramCache]: Analyzing trace with hash -91120732, now seen corresponding path program 1 times [2021-12-21 13:16:23,589 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:23,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165858001] [2021-12-21 13:16:23,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:23,589 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:23,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:23,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:23,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:23,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:23,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:23,700 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:23,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165858001] [2021-12-21 13:16:23,700 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165858001] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:23,701 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:23,701 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-21 13:16:23,701 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [893111462] [2021-12-21 13:16:23,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:23,701 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-21 13:16:23,702 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:23,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-21 13:16:23,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:16:23,702 INFO L87 Difference]: Start difference. First operand 156 states and 194 transitions. Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:24,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:24,121 INFO L93 Difference]: Finished difference Result 544 states and 736 transitions. [2021-12-21 13:16:24,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-12-21 13:16:24,122 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-21 13:16:24,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:24,126 INFO L225 Difference]: With dead ends: 544 [2021-12-21 13:16:24,126 INFO L226 Difference]: Without dead ends: 395 [2021-12-21 13:16:24,127 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2021-12-21 13:16:24,128 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 339 mSDsluCounter, 577 mSDsCounter, 0 mSdLazyCounter, 466 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 690 SdHoareTripleChecker+Invalid, 566 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 466 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:24,129 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [344 Valid, 690 Invalid, 566 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 466 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:16:24,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2021-12-21 13:16:24,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2021-12-21 13:16:24,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 286 states have (on average 1.2377622377622377) internal successors, (354), 306 states have internal predecessors, (354), 40 states have call successors, (40), 38 states have call predecessors, (40), 50 states have return successors, (90), 46 states have call predecessors, (90), 40 states have call successors, (90) [2021-12-21 13:16:24,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 484 transitions. [2021-12-21 13:16:24,175 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 484 transitions. Word has length 46 [2021-12-21 13:16:24,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:24,175 INFO L470 AbstractCegarLoop]: Abstraction has 377 states and 484 transitions. [2021-12-21 13:16:24,176 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:24,176 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 484 transitions. [2021-12-21 13:16:24,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2021-12-21 13:16:24,178 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:24,178 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:24,178 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:16:24,179 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:24,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:24,186 INFO L85 PathProgramCache]: Analyzing trace with hash 908063002, now seen corresponding path program 1 times [2021-12-21 13:16:24,187 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:24,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039510860] [2021-12-21 13:16:24,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:24,187 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:24,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:24,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:24,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:24,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:24,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:24,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-21 13:16:24,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-21 13:16:24,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-21 13:16:24,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,357 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:24,357 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:24,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039510860] [2021-12-21 13:16:24,357 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039510860] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:24,358 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:24,358 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 13:16:24,358 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259755383] [2021-12-21 13:16:24,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:24,358 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:16:24,358 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:24,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:16:24,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:24,359 INFO L87 Difference]: Start difference. First operand 377 states and 484 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-21 13:16:24,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:24,581 INFO L93 Difference]: Finished difference Result 840 states and 1145 transitions. [2021-12-21 13:16:24,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:16:24,583 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2021-12-21 13:16:24,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:24,585 INFO L225 Difference]: With dead ends: 840 [2021-12-21 13:16:24,585 INFO L226 Difference]: Without dead ends: 470 [2021-12-21 13:16:24,587 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:16:24,587 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 109 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:24,588 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [113 Valid, 432 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:16:24,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2021-12-21 13:16:24,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 431. [2021-12-21 13:16:24,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 355 states have internal predecessors, (404), 44 states have call successors, (44), 38 states have call predecessors, (44), 56 states have return successors, (104), 51 states have call predecessors, (104), 44 states have call successors, (104) [2021-12-21 13:16:24,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 552 transitions. [2021-12-21 13:16:24,626 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 552 transitions. Word has length 93 [2021-12-21 13:16:24,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:24,627 INFO L470 AbstractCegarLoop]: Abstraction has 431 states and 552 transitions. [2021-12-21 13:16:24,627 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-21 13:16:24,627 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 552 transitions. [2021-12-21 13:16:24,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2021-12-21 13:16:24,629 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:24,629 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:24,630 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:16:24,630 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:24,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:24,630 INFO L85 PathProgramCache]: Analyzing trace with hash -1534943524, now seen corresponding path program 1 times [2021-12-21 13:16:24,630 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:24,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273444111] [2021-12-21 13:16:24,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:24,630 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:24,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:16:24,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:24,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:24,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:24,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-21 13:16:24,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-21 13:16:24,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:24,726 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-21 13:16:24,726 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:24,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273444111] [2021-12-21 13:16:24,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273444111] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:24,726 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:24,726 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 13:16:24,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431585094] [2021-12-21 13:16:24,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:24,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:16:24,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:24,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:16:24,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:24,727 INFO L87 Difference]: Start difference. First operand 431 states and 552 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:16:24,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:24,936 INFO L93 Difference]: Finished difference Result 808 states and 1073 transitions. [2021-12-21 13:16:24,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:16:24,937 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) Word has length 85 [2021-12-21 13:16:24,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:24,939 INFO L225 Difference]: With dead ends: 808 [2021-12-21 13:16:24,939 INFO L226 Difference]: Without dead ends: 384 [2021-12-21 13:16:24,941 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:16:24,942 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 134 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 384 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:24,942 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 419 Invalid, 384 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:16:24,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2021-12-21 13:16:24,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 368. [2021-12-21 13:16:24,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 280 states have (on average 1.2142857142857142) internal successors, (340), 301 states have internal predecessors, (340), 40 states have call successors, (40), 33 states have call predecessors, (40), 47 states have return successors, (86), 44 states have call predecessors, (86), 40 states have call successors, (86) [2021-12-21 13:16:24,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 466 transitions. [2021-12-21 13:16:24,964 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 466 transitions. Word has length 85 [2021-12-21 13:16:24,964 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:24,964 INFO L470 AbstractCegarLoop]: Abstraction has 368 states and 466 transitions. [2021-12-21 13:16:24,964 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:16:24,964 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 466 transitions. [2021-12-21 13:16:24,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-21 13:16:24,967 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:24,967 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:24,967 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:16:24,967 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:24,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:24,967 INFO L85 PathProgramCache]: Analyzing trace with hash -1438943688, now seen corresponding path program 1 times [2021-12-21 13:16:24,967 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:24,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [414167405] [2021-12-21 13:16:24,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:24,968 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:24,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:25,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:25,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:25,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:25,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:25,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-21 13:16:25,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-21 13:16:25,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,039 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-21 13:16:25,039 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:25,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [414167405] [2021-12-21 13:16:25,039 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [414167405] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:25,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1570616363] [2021-12-21 13:16:25,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:25,040 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:25,040 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:25,041 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:25,042 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:16:25,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:25,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:16:25,130 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:25,414 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:25,414 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:25,652 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-12-21 13:16:25,652 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1570616363] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:25,652 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:25,652 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2021-12-21 13:16:25,653 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560504434] [2021-12-21 13:16:25,653 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:25,653 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-21 13:16:25,653 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:25,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-21 13:16:25,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:16:25,654 INFO L87 Difference]: Start difference. First operand 368 states and 466 transitions. Second operand has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-21 13:16:26,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:26,618 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2021-12-21 13:16:26,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2021-12-21 13:16:26,619 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 89 [2021-12-21 13:16:26,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:26,622 INFO L225 Difference]: With dead ends: 817 [2021-12-21 13:16:26,622 INFO L226 Difference]: Without dead ends: 504 [2021-12-21 13:16:26,623 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 201 SyntacticMatches, 4 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 839 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=481, Invalid=2275, Unknown=0, NotChecked=0, Total=2756 [2021-12-21 13:16:26,624 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 805 mSDsluCounter, 648 mSDsCounter, 0 mSdLazyCounter, 1026 mSolverCounterSat, 336 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 812 SdHoareTripleChecker+Valid, 794 SdHoareTripleChecker+Invalid, 1362 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 336 IncrementalHoareTripleChecker+Valid, 1026 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:26,624 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [812 Valid, 794 Invalid, 1362 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [336 Valid, 1026 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-21 13:16:26,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2021-12-21 13:16:26,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 434. [2021-12-21 13:16:26,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 434 states, 328 states have (on average 1.2103658536585367) internal successors, (397), 352 states have internal predecessors, (397), 51 states have call successors, (51), 44 states have call predecessors, (51), 54 states have return successors, (111), 50 states have call predecessors, (111), 51 states have call successors, (111) [2021-12-21 13:16:26,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 434 states to 434 states and 559 transitions. [2021-12-21 13:16:26,645 INFO L78 Accepts]: Start accepts. Automaton has 434 states and 559 transitions. Word has length 89 [2021-12-21 13:16:26,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:26,645 INFO L470 AbstractCegarLoop]: Abstraction has 434 states and 559 transitions. [2021-12-21 13:16:26,645 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-21 13:16:26,646 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 559 transitions. [2021-12-21 13:16:26,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-21 13:16:26,648 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:26,648 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:26,671 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:26,859 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:26,859 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:26,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:26,860 INFO L85 PathProgramCache]: Analyzing trace with hash 1270234994, now seen corresponding path program 1 times [2021-12-21 13:16:26,860 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:26,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [831500645] [2021-12-21 13:16:26,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:26,861 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:26,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:26,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:26,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:26,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:26,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:26,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:26,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:26,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:26,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:26,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:26,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:16:27,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2021-12-21 13:16:27,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:27,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:16:27,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:27,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-21 13:16:27,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-12-21 13:16:27,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:16:27,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:27,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,109 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-21 13:16:27,109 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:27,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [831500645] [2021-12-21 13:16:27,109 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [831500645] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:27,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1796689324] [2021-12-21 13:16:27,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:27,110 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:27,110 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:27,118 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:27,139 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:16:27,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:27,239 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-21 13:16:27,243 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:27,545 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 88 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-21 13:16:27,546 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:27,923 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-21 13:16:27,923 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1796689324] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:27,923 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:27,923 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 20 [2021-12-21 13:16:27,923 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [180038270] [2021-12-21 13:16:27,923 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:27,924 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-21 13:16:27,924 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:27,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-21 13:16:27,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:16:27,925 INFO L87 Difference]: Start difference. First operand 434 states and 559 transitions. Second operand has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-21 13:16:29,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:29,060 INFO L93 Difference]: Finished difference Result 1255 states and 1720 transitions. [2021-12-21 13:16:29,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-21 13:16:29,060 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 150 [2021-12-21 13:16:29,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:29,065 INFO L225 Difference]: With dead ends: 1255 [2021-12-21 13:16:29,065 INFO L226 Difference]: Without dead ends: 875 [2021-12-21 13:16:29,067 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 373 GetRequests, 325 SyntacticMatches, 6 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 405 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=486, Invalid=1406, Unknown=0, NotChecked=0, Total=1892 [2021-12-21 13:16:29,067 INFO L933 BasicCegarLoop]: 225 mSDtfsCounter, 1145 mSDsluCounter, 735 mSDsCounter, 0 mSdLazyCounter, 1182 mSolverCounterSat, 580 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1150 SdHoareTripleChecker+Valid, 960 SdHoareTripleChecker+Invalid, 1762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 580 IncrementalHoareTripleChecker+Valid, 1182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:29,068 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1150 Valid, 960 Invalid, 1762 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [580 Valid, 1182 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:16:29,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 875 states. [2021-12-21 13:16:29,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 875 to 766. [2021-12-21 13:16:29,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 766 states, 578 states have (on average 1.207612456747405) internal successors, (698), 611 states have internal predecessors, (698), 88 states have call successors, (88), 81 states have call predecessors, (88), 99 states have return successors, (187), 92 states have call predecessors, (187), 88 states have call successors, (187) [2021-12-21 13:16:29,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 766 states to 766 states and 973 transitions. [2021-12-21 13:16:29,105 INFO L78 Accepts]: Start accepts. Automaton has 766 states and 973 transitions. Word has length 150 [2021-12-21 13:16:29,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:29,106 INFO L470 AbstractCegarLoop]: Abstraction has 766 states and 973 transitions. [2021-12-21 13:16:29,106 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-21 13:16:29,106 INFO L276 IsEmpty]: Start isEmpty. Operand 766 states and 973 transitions. [2021-12-21 13:16:29,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-21 13:16:29,108 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:29,108 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:29,129 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:29,322 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-12-21 13:16:29,322 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:29,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:29,323 INFO L85 PathProgramCache]: Analyzing trace with hash -2070792144, now seen corresponding path program 1 times [2021-12-21 13:16:29,323 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:29,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802546358] [2021-12-21 13:16:29,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:29,323 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:29,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:16:29,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:29,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:16:29,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:29,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:29,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:16:29,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2021-12-21 13:16:29,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:29,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:16:29,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:29,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-21 13:16:29,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-12-21 13:16:29,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:16:29,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:29,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,409 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-21 13:16:29,410 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:29,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802546358] [2021-12-21 13:16:29,410 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [802546358] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:29,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [402149630] [2021-12-21 13:16:29,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:29,410 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:29,410 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:29,411 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:29,412 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:16:29,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:29,495 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-21 13:16:29,498 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:29,660 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2021-12-21 13:16:29,661 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:16:29,661 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [402149630] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:29,661 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:16:29,661 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2021-12-21 13:16:29,661 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678919655] [2021-12-21 13:16:29,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:29,662 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:29,662 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:29,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:29,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:29,663 INFO L87 Difference]: Start difference. First operand 766 states and 973 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-21 13:16:29,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:29,699 INFO L93 Difference]: Finished difference Result 998 states and 1255 transitions. [2021-12-21 13:16:29,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:29,700 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2021-12-21 13:16:29,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:29,701 INFO L225 Difference]: With dead ends: 998 [2021-12-21 13:16:29,701 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:16:29,704 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:29,705 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 9 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:29,705 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 415 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:29,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:16:29,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:16:29,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:16:29,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:16:29,706 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2021-12-21 13:16:29,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:29,706 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:16:29,706 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-21 13:16:29,707 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:16:29,707 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:16:29,709 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:16:29,729 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:29,927 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:29,928 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:16:31,953 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 278 285) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,954 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 278 285) no Hoare annotation was computed. [2021-12-21 13:16:31,954 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 278 285) no Hoare annotation was computed. [2021-12-21 13:16:31,954 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 168 174) no Hoare annotation was computed. [2021-12-21 13:16:31,954 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 168 174) the Hoare annotation is: true [2021-12-21 13:16:31,954 INFO L858 garLoopResultBuilder]: For program point L946-1(lines 942 953) no Hoare annotation was computed. [2021-12-21 13:16:31,955 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 942 953) the Hoare annotation is: true [2021-12-21 13:16:31,955 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 942 953) no Hoare annotation was computed. [2021-12-21 13:16:31,955 INFO L861 garLoopResultBuilder]: At program point L480(lines 455 484) the Hoare annotation is: true [2021-12-21 13:16:31,955 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 455 484) no Hoare annotation was computed. [2021-12-21 13:16:31,955 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 455 484) the Hoare annotation is: true [2021-12-21 13:16:31,956 INFO L858 garLoopResultBuilder]: For program point L476(line 476) no Hoare annotation was computed. [2021-12-21 13:16:31,956 INFO L858 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2021-12-21 13:16:31,956 INFO L861 garLoopResultBuilder]: At program point L469-1(lines 469 473) the Hoare annotation is: true [2021-12-21 13:16:31,956 INFO L858 garLoopResultBuilder]: For program point L466(line 466) no Hoare annotation was computed. [2021-12-21 13:16:31,956 INFO L861 garLoopResultBuilder]: At program point L465-2(lines 465 479) the Hoare annotation is: true [2021-12-21 13:16:31,957 INFO L861 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: true [2021-12-21 13:16:31,957 INFO L858 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2021-12-21 13:16:31,957 INFO L858 garLoopResultBuilder]: For program point L155-1(lines 155 161) no Hoare annotation was computed. [2021-12-21 13:16:31,957 INFO L854 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:31,957 INFO L854 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:31,958 INFO L854 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:31,958 INFO L858 garLoopResultBuilder]: For program point L234-1(line 234) no Hoare annotation was computed. [2021-12-21 13:16:31,958 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 144 167) no Hoare annotation was computed. [2021-12-21 13:16:31,959 INFO L854 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2021-12-21 13:16:31,959 INFO L854 garLoopResultBuilder]: At program point L247-1(lines 228 252) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (let ((.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and .cse3 .cse4) .cse1 (and (<= 2 ~waterLevel~0) .cse4) .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 (= ~waterLevel~0 1)) .cse2))) [2021-12-21 13:16:31,960 INFO L858 garLoopResultBuilder]: For program point L148-1(lines 147 166) no Hoare annotation was computed. [2021-12-21 13:16:31,960 INFO L854 garLoopResultBuilder]: At program point L991(lines 986 994) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse2) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse1 (and (<= 2 ~waterLevel~0) .cse5 .cse4) (and .cse3 .cse5 .cse4) .cse2)))) [2021-12-21 13:16:31,961 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-21 13:16:31,961 INFO L854 garLoopResultBuilder]: At program point L302(lines 297 305) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2021-12-21 13:16:31,961 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 244) no Hoare annotation was computed. [2021-12-21 13:16:31,961 INFO L858 garLoopResultBuilder]: For program point L232(lines 232 249) no Hoare annotation was computed. [2021-12-21 13:16:31,961 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2021-12-21 13:16:31,961 INFO L854 garLoopResultBuilder]: At program point L922-2(lines 918 929) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2021-12-21 13:16:31,962 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2021-12-21 13:16:31,962 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2021-12-21 13:16:31,962 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 144 167) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2021-12-21 13:16:31,962 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 411) no Hoare annotation was computed. [2021-12-21 13:16:31,962 INFO L854 garLoopResultBuilder]: At program point L398-1(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 (<= |old(~waterLevel~0)| 1)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) .cse1) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and (<= 2 ~waterLevel~0) .cse3 .cse5 .cse4) (< |old(~waterLevel~0)| 2) (and .cse2 .cse3 .cse5 .cse4) .cse1)))) [2021-12-21 13:16:31,962 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 144 167) no Hoare annotation was computed. [2021-12-21 13:16:31,963 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-21 13:16:31,963 INFO L854 garLoopResultBuilder]: At program point L122(lines 73 123) the Hoare annotation is: false [2021-12-21 13:16:31,963 INFO L861 garLoopResultBuilder]: At program point L523(lines 516 525) the Hoare annotation is: true [2021-12-21 13:16:31,963 INFO L854 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:16:31,963 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:16:31,963 INFO L858 garLoopResultBuilder]: For program point L94(lines 94 100) no Hoare annotation was computed. [2021-12-21 13:16:31,964 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:16:31,964 INFO L858 garLoopResultBuilder]: For program point L94-1(lines 94 100) no Hoare annotation was computed. [2021-12-21 13:16:31,964 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:16:31,965 INFO L854 garLoopResultBuilder]: At program point L441(lines 437 443) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:16:31,965 INFO L858 garLoopResultBuilder]: For program point L536(lines 536 543) no Hoare annotation was computed. [2021-12-21 13:16:31,965 INFO L854 garLoopResultBuilder]: At program point L119(lines 74 121) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2021-12-21 13:16:31,965 INFO L854 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2021-12-21 13:16:31,966 INFO L858 garLoopResultBuilder]: For program point L536-2(lines 536 543) no Hoare annotation was computed. [2021-12-21 13:16:31,966 INFO L861 garLoopResultBuilder]: At program point L545(lines 526 548) the Hoare annotation is: true [2021-12-21 13:16:31,966 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:16:31,966 INFO L854 garLoopResultBuilder]: At program point L434(lines 430 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:16:31,966 INFO L858 garLoopResultBuilder]: For program point L112(lines 112 116) no Hoare annotation was computed. [2021-12-21 13:16:31,966 INFO L854 garLoopResultBuilder]: At program point L112-2(lines 104 117) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2021-12-21 13:16:31,966 INFO L858 garLoopResultBuilder]: For program point L75(lines 74 121) no Hoare annotation was computed. [2021-12-21 13:16:31,966 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 117) no Hoare annotation was computed. [2021-12-21 13:16:31,966 INFO L854 garLoopResultBuilder]: At program point L513(lines 509 515) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) (not (= 0 ~systemActive~0))) [2021-12-21 13:16:31,967 INFO L854 garLoopResultBuilder]: At program point L385(lines 380 387) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2021-12-21 13:16:31,967 INFO L854 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2021-12-21 13:16:31,967 INFO L861 garLoopResultBuilder]: At program point L125(lines 64 129) the Hoare annotation is: true [2021-12-21 13:16:31,967 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2021-12-21 13:16:31,967 INFO L858 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2021-12-21 13:16:31,968 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2021-12-21 13:16:31,968 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 176 200) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2021-12-21 13:16:31,968 INFO L858 garLoopResultBuilder]: For program point L351(lines 351 355) no Hoare annotation was computed. [2021-12-21 13:16:31,968 INFO L854 garLoopResultBuilder]: At program point L190(line 190) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse1) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (= 0 ~systemActive~0))) [2021-12-21 13:16:31,969 INFO L858 garLoopResultBuilder]: For program point L351-2(lines 351 355) no Hoare annotation was computed. [2021-12-21 13:16:31,969 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 192) no Hoare annotation was computed. [2021-12-21 13:16:31,969 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2021-12-21 13:16:31,969 INFO L854 garLoopResultBuilder]: At program point L1004(lines 995 1008) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2021-12-21 13:16:31,969 INFO L854 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,969 INFO L858 garLoopResultBuilder]: For program point L195-1(lines 176 200) no Hoare annotation was computed. [2021-12-21 13:16:31,969 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 176 200) no Hoare annotation was computed. [2021-12-21 13:16:31,970 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2021-12-21 13:16:31,970 INFO L854 garLoopResultBuilder]: At program point L266(line 266) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2021-12-21 13:16:31,970 INFO L854 garLoopResultBuilder]: At program point L268-2(lines 261 277) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,970 INFO L858 garLoopResultBuilder]: For program point L266-1(line 266) no Hoare annotation was computed. [2021-12-21 13:16:31,970 INFO L858 garLoopResultBuilder]: For program point L999(lines 999 1005) no Hoare annotation was computed. [2021-12-21 13:16:31,970 INFO L854 garLoopResultBuilder]: At program point L357(lines 342 360) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2021-12-21 13:16:31,970 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 260) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,970 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 930 941) no Hoare annotation was computed. [2021-12-21 13:16:31,970 INFO L858 garLoopResultBuilder]: For program point L934-1(lines 930 941) no Hoare annotation was computed. [2021-12-21 13:16:31,971 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 930 941) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:16:31,971 INFO L854 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,971 INFO L858 garLoopResultBuilder]: For program point L221-1(lines 202 226) no Hoare annotation was computed. [2021-12-21 13:16:31,971 INFO L854 garLoopResultBuilder]: At program point L376(lines 361 379) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0)) .cse0 .cse1))) [2021-12-21 13:16:31,971 INFO L854 garLoopResultBuilder]: At program point L1014(lines 1009 1017) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:16:31,971 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2021-12-21 13:16:31,972 INFO L858 garLoopResultBuilder]: For program point L370-2(lines 370 374) no Hoare annotation was computed. [2021-12-21 13:16:31,972 INFO L854 garLoopResultBuilder]: At program point L216(line 216) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,972 INFO L854 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:16:31,972 INFO L858 garLoopResultBuilder]: For program point L210(lines 210 218) no Hoare annotation was computed. [2021-12-21 13:16:31,972 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 202 226) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2021-12-21 13:16:31,972 INFO L858 garLoopResultBuilder]: For program point L206(lines 206 223) no Hoare annotation was computed. [2021-12-21 13:16:31,972 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 202 226) no Hoare annotation was computed. [2021-12-21 13:16:31,972 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 286 296) the Hoare annotation is: true [2021-12-21 13:16:31,972 INFO L861 garLoopResultBuilder]: At program point L959(lines 954 962) the Hoare annotation is: true [2021-12-21 13:16:31,972 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 286 296) no Hoare annotation was computed. [2021-12-21 13:16:31,973 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 286 296) no Hoare annotation was computed. [2021-12-21 13:16:31,975 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:31,976 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:16:32,006 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:16:32 BoogieIcfgContainer [2021-12-21 13:16:32,006 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:16:32,007 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:16:32,007 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:16:32,007 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:16:32,007 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:22" (3/4) ... [2021-12-21 13:16:32,010 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:16:32,014 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:16:32,014 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:16:32,014 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:32,015 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:16:32,034 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-21 13:16:32,034 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:16:32,035 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:16:32,035 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:16:32,035 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:16:32,036 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:16:32,036 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:16:32,050 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:16:32,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) [2021-12-21 13:16:32,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-21 13:16:32,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2021-12-21 13:16:32,052 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2021-12-21 13:16:32,052 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-21 13:16:32,052 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2021-12-21 13:16:32,053 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2021-12-21 13:16:32,054 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2021-12-21 13:16:32,054 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2021-12-21 13:16:32,054 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) [2021-12-21 13:16:32,079 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:16:32,079 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:16:32,079 INFO L158 Benchmark]: Toolchain (without parser) took 10337.70ms. Allocated memory was 96.5MB in the beginning and 211.8MB in the end (delta: 115.3MB). Free memory was 66.9MB in the beginning and 180.0MB in the end (delta: -113.1MB). Peak memory consumption was 118.6MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,079 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 96.5MB. Free memory was 56.1MB in the beginning and 56.1MB in the end (delta: 70.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: CACSL2BoogieTranslator took 365.92ms. Allocated memory is still 96.5MB. Free memory was 66.9MB in the beginning and 64.7MB in the end (delta: 2.2MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.51ms. Allocated memory is still 96.5MB. Free memory was 64.7MB in the beginning and 62.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: Boogie Preprocessor took 19.19ms. Allocated memory is still 96.5MB. Free memory was 62.3MB in the beginning and 60.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: RCFGBuilder took 407.65ms. Allocated memory is still 96.5MB. Free memory was 60.6MB in the beginning and 42.6MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: TraceAbstraction took 9408.18ms. Allocated memory was 96.5MB in the beginning and 211.8MB in the end (delta: 115.3MB). Free memory was 42.2MB in the beginning and 65.5MB in the end (delta: -23.4MB). Peak memory consumption was 94.6MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,080 INFO L158 Benchmark]: Witness Printer took 72.29ms. Allocated memory is still 211.8MB. Free memory was 65.5MB in the beginning and 180.0MB in the end (delta: -114.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:16:32,081 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 96.5MB. Free memory was 56.1MB in the beginning and 56.1MB in the end (delta: 70.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 365.92ms. Allocated memory is still 96.5MB. Free memory was 66.9MB in the beginning and 64.7MB in the end (delta: 2.2MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.51ms. Allocated memory is still 96.5MB. Free memory was 64.7MB in the beginning and 62.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 19.19ms. Allocated memory is still 96.5MB. Free memory was 62.3MB in the beginning and 60.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 407.65ms. Allocated memory is still 96.5MB. Free memory was 60.6MB in the beginning and 42.6MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 9408.18ms. Allocated memory was 96.5MB in the beginning and 211.8MB in the end (delta: 115.3MB). Free memory was 42.2MB in the beginning and 65.5MB in the end (delta: -23.4MB). Peak memory consumption was 94.6MB. Max. memory is 16.1GB. * Witness Printer took 72.29ms. Allocated memory is still 211.8MB. Free memory was 65.5MB in the beginning and 180.0MB in the end (delta: -114.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.3s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2876 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2843 mSDsluCounter, 4528 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3294 mSDsCounter, 1148 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3417 IncrementalHoareTripleChecker+Invalid, 4565 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1148 mSolverCounterUnsat, 1234 mSDtfsCounter, 3417 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 923 GetRequests, 763 SyntacticMatches, 10 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1347 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=766occurred in iteration=9, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 258 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1447 PreInvPairs, 1561 NumberOfFragments, 1066 HoareAnnotationTreeSize, 1447 FomulaSimplifications, 1427 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 49 FomulaSimplificationsInter, 7307 FormulaSimplificationTreeSizeReductionInter, 1.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 1104 NumberOfCodeBlocks, 1104 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1328 ConstructedInterpolants, 0 QuantifiedInterpolants, 2372 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1666 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 554/634 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 342]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:16:32,126 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE