./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:01:46,490 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:01:46,491 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:01:46,535 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:01:46,536 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:01:46,537 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:01:46,541 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:01:46,545 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:01:46,547 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:01:46,556 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:01:46,557 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:01:46,560 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:01:46,560 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:01:46,562 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:01:46,563 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:01:46,566 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:01:46,567 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:01:46,569 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:01:46,570 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:01:46,576 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:01:46,578 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:01:46,579 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:01:46,581 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:01:46,582 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:01:46,583 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:01:46,590 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:01:46,591 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:01:46,591 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:01:46,592 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:01:46,593 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:01:46,594 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:01:46,594 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:01:46,596 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:01:46,596 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:01:46,598 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:01:46,599 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:01:46,599 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:01:46,600 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:01:46,600 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:01:46,600 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:01:46,601 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:01:46,603 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:01:46,608 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:01:46,641 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:01:46,642 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:01:46,642 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:01:46,642 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:01:46,643 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:01:46,643 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:01:46,644 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:01:46,644 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:01:46,645 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:01:46,645 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:01:46,646 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:01:46,646 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:01:46,646 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:01:46,646 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:01:46,646 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:01:46,647 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:01:46,647 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:01:46,647 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:01:46,647 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:01:46,648 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:01:46,648 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:01:46,648 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:01:46,648 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:01:46,648 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:01:46,649 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:01:46,649 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:01:46,649 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:01:46,649 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:01:46,650 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:01:46,650 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:01:46,650 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:01:46,650 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:01:46,650 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:01:46,651 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa [2022-07-21 05:01:46,979 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:01:47,000 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:01:47,003 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:01:47,004 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:01:47,004 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:01:47,006 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2022-07-21 05:01:47,070 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d62a1f9/9b79d13ad58d49c79c896f4db22cc2a7/FLAG8d740b9a6 [2022-07-21 05:01:47,613 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:01:47,614 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2022-07-21 05:01:47,631 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d62a1f9/9b79d13ad58d49c79c896f4db22cc2a7/FLAG8d740b9a6 [2022-07-21 05:01:47,950 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d62a1f9/9b79d13ad58d49c79c896f4db22cc2a7 [2022-07-21 05:01:47,952 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:01:47,954 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:01:47,957 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:01:47,957 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:01:47,960 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:01:47,961 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:01:47" (1/1) ... [2022-07-21 05:01:47,962 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39fa7457 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:47, skipping insertion in model container [2022-07-21 05:01:47,962 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:01:47" (1/1) ... [2022-07-21 05:01:47,969 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:01:48,019 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:01:48,209 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2022-07-21 05:01:48,320 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:01:48,333 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:01:48,382 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2022-07-21 05:01:48,438 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:01:48,457 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:01:48,458 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48 WrapperNode [2022-07-21 05:01:48,458 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:01:48,459 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:01:48,460 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:01:48,460 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:01:48,466 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,493 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,537 INFO L137 Inliner]: procedures = 57, calls = 160, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 286 [2022-07-21 05:01:48,538 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:01:48,539 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:01:48,539 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:01:48,540 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:01:48,547 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,548 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,560 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,563 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,571 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,585 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,589 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,595 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:01:48,596 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:01:48,596 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:01:48,597 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:01:48,597 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (1/1) ... [2022-07-21 05:01:48,604 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:01:48,615 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:48,633 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:01:48,662 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:01:48,680 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:01:48,681 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:01:48,681 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:01:48,681 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:01:48,681 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:01:48,681 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:01:48,681 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:01:48,682 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:01:48,682 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:01:48,682 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:01:48,683 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:01:48,683 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:01:48,683 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:01:48,683 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:01:48,683 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:01:48,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:01:48,684 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:01:48,684 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:01:48,684 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:01:48,684 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:01:48,787 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:01:48,789 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:01:49,146 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:01:49,154 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:01:49,155 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:01:49,157 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:49 BoogieIcfgContainer [2022-07-21 05:01:49,157 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:01:49,159 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:01:49,159 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:01:49,162 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:01:49,162 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:01:47" (1/3) ... [2022-07-21 05:01:49,163 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19efd49e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:01:49, skipping insertion in model container [2022-07-21 05:01:49,164 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:48" (2/3) ... [2022-07-21 05:01:49,164 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19efd49e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:01:49, skipping insertion in model container [2022-07-21 05:01:49,164 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:49" (3/3) ... [2022-07-21 05:01:49,165 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product55.cil.c [2022-07-21 05:01:49,178 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:01:49,179 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:01:49,228 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:01:49,237 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@25529e15, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6e893bb [2022-07-21 05:01:49,237 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:01:49,251 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 74 states have (on average 1.3918918918918919) internal successors, (103), 85 states have internal predecessors, (103), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-21 05:01:49,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-21 05:01:49,260 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:49,261 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:49,262 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:49,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:49,268 INFO L85 PathProgramCache]: Analyzing trace with hash -405346600, now seen corresponding path program 1 times [2022-07-21 05:01:49,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:49,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [391539972] [2022-07-21 05:01:49,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:49,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:49,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:49,494 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:49,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:49,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [391539972] [2022-07-21 05:01:49,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [391539972] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:49,499 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:49,499 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:01:49,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433421605] [2022-07-21 05:01:49,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:49,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:01:49,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:49,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:01:49,546 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:01:49,549 INFO L87 Difference]: Start difference. First operand has 99 states, 74 states have (on average 1.3918918918918919) internal successors, (103), 85 states have internal predecessors, (103), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:49,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:49,608 INFO L93 Difference]: Finished difference Result 190 states and 261 transitions. [2022-07-21 05:01:49,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:01:49,610 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-07-21 05:01:49,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:49,622 INFO L225 Difference]: With dead ends: 190 [2022-07-21 05:01:49,622 INFO L226 Difference]: Without dead ends: 90 [2022-07-21 05:01:49,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:01:49,631 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:49,632 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:49,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-21 05:01:49,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-21 05:01:49,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-21 05:01:49,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 118 transitions. [2022-07-21 05:01:49,694 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 118 transitions. Word has length 19 [2022-07-21 05:01:49,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:49,695 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 118 transitions. [2022-07-21 05:01:49,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:49,696 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 118 transitions. [2022-07-21 05:01:49,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-07-21 05:01:49,699 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:49,699 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:49,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:01:49,700 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:49,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:49,701 INFO L85 PathProgramCache]: Analyzing trace with hash 1370466006, now seen corresponding path program 1 times [2022-07-21 05:01:49,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:49,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537834222] [2022-07-21 05:01:49,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:49,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:49,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:49,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:49,819 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:49,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537834222] [2022-07-21 05:01:49,820 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537834222] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:49,820 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:49,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:01:49,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528927169] [2022-07-21 05:01:49,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:49,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:01:49,824 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:49,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:01:49,825 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:49,825 INFO L87 Difference]: Start difference. First operand 90 states and 118 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:49,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:49,859 INFO L93 Difference]: Finished difference Result 142 states and 186 transitions. [2022-07-21 05:01:49,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:01:49,860 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-07-21 05:01:49,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:49,862 INFO L225 Difference]: With dead ends: 142 [2022-07-21 05:01:49,863 INFO L226 Difference]: Without dead ends: 81 [2022-07-21 05:01:49,864 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:49,866 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 16 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:49,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 189 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:49,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-21 05:01:49,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-21 05:01:49,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 61 states have (on average 1.3442622950819672) internal successors, (82), 71 states have internal predecessors, (82), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 7 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-21 05:01:49,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 106 transitions. [2022-07-21 05:01:49,877 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 106 transitions. Word has length 20 [2022-07-21 05:01:49,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:49,877 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 106 transitions. [2022-07-21 05:01:49,878 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:49,878 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 106 transitions. [2022-07-21 05:01:49,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-21 05:01:49,879 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:49,879 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:49,879 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:01:49,879 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:49,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:49,880 INFO L85 PathProgramCache]: Analyzing trace with hash 412043634, now seen corresponding path program 1 times [2022-07-21 05:01:49,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:49,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [18306166] [2022-07-21 05:01:49,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:49,881 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:49,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:49,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:49,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:49,998 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [18306166] [2022-07-21 05:01:49,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [18306166] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:49,998 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:49,999 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:01:50,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146870484] [2022-07-21 05:01:50,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:50,000 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:01:50,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:50,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:01:50,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:01:50,002 INFO L87 Difference]: Start difference. First operand 81 states and 106 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:50,202 INFO L93 Difference]: Finished difference Result 266 states and 355 transitions. [2022-07-21 05:01:50,203 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:01:50,203 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-07-21 05:01:50,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:50,205 INFO L225 Difference]: With dead ends: 266 [2022-07-21 05:01:50,216 INFO L226 Difference]: Without dead ends: 192 [2022-07-21 05:01:50,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:01:50,218 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 219 mSDsluCounter, 391 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 528 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:50,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [219 Valid, 528 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:50,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-07-21 05:01:50,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 186. [2022-07-21 05:01:50,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 139 states have (on average 1.3741007194244603) internal successors, (191), 161 states have internal predecessors, (191), 28 states have call successors, (28), 18 states have call predecessors, (28), 18 states have return successors, (29), 16 states have call predecessors, (29), 28 states have call successors, (29) [2022-07-21 05:01:50,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 248 transitions. [2022-07-21 05:01:50,263 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 248 transitions. Word has length 24 [2022-07-21 05:01:50,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:50,264 INFO L495 AbstractCegarLoop]: Abstraction has 186 states and 248 transitions. [2022-07-21 05:01:50,264 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,264 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 248 transitions. [2022-07-21 05:01:50,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-21 05:01:50,271 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:50,271 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:50,271 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:01:50,272 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:50,274 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:50,274 INFO L85 PathProgramCache]: Analyzing trace with hash 2062247464, now seen corresponding path program 1 times [2022-07-21 05:01:50,274 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:50,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728222757] [2022-07-21 05:01:50,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:50,275 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:50,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:50,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:50,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:50,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728222757] [2022-07-21 05:01:50,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728222757] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:50,368 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:50,368 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-21 05:01:50,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423413596] [2022-07-21 05:01:50,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:50,369 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:01:50,370 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:50,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:01:50,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:01:50,371 INFO L87 Difference]: Start difference. First operand 186 states and 248 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:50,440 INFO L93 Difference]: Finished difference Result 527 states and 733 transitions. [2022-07-21 05:01:50,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:01:50,441 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-07-21 05:01:50,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:50,451 INFO L225 Difference]: With dead ends: 527 [2022-07-21 05:01:50,451 INFO L226 Difference]: Without dead ends: 348 [2022-07-21 05:01:50,453 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:01:50,463 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 77 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 426 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:50,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 426 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:50,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-07-21 05:01:50,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 348. [2022-07-21 05:01:50,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 258 states have (on average 1.3488372093023255) internal successors, (348), 298 states have internal predecessors, (348), 56 states have call successors, (56), 36 states have call predecessors, (56), 33 states have return successors, (62), 29 states have call predecessors, (62), 56 states have call successors, (62) [2022-07-21 05:01:50,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 466 transitions. [2022-07-21 05:01:50,498 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 466 transitions. Word has length 28 [2022-07-21 05:01:50,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:50,498 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 466 transitions. [2022-07-21 05:01:50,498 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,499 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 466 transitions. [2022-07-21 05:01:50,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-21 05:01:50,500 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:50,500 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:50,501 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:01:50,501 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:50,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:50,501 INFO L85 PathProgramCache]: Analyzing trace with hash -1056507795, now seen corresponding path program 1 times [2022-07-21 05:01:50,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:50,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1201251996] [2022-07-21 05:01:50,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:50,502 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:50,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:50,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:50,563 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:50,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1201251996] [2022-07-21 05:01:50,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1201251996] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:50,564 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:50,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:01:50,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617244675] [2022-07-21 05:01:50,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:50,565 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:01:50,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:50,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:01:50,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:50,566 INFO L87 Difference]: Start difference. First operand 348 states and 466 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:50,612 INFO L93 Difference]: Finished difference Result 794 states and 1093 transitions. [2022-07-21 05:01:50,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:01:50,614 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-07-21 05:01:50,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:50,620 INFO L225 Difference]: With dead ends: 794 [2022-07-21 05:01:50,621 INFO L226 Difference]: Without dead ends: 453 [2022-07-21 05:01:50,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:50,627 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 58 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:50,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 177 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:50,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 453 states. [2022-07-21 05:01:50,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 453 to 442. [2022-07-21 05:01:50,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 442 states, 336 states have (on average 1.2916666666666667) internal successors, (434), 361 states have internal predecessors, (434), 55 states have call successors, (55), 51 states have call predecessors, (55), 50 states have return successors, (83), 49 states have call predecessors, (83), 55 states have call successors, (83) [2022-07-21 05:01:50,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 442 states and 572 transitions. [2022-07-21 05:01:50,671 INFO L78 Accepts]: Start accepts. Automaton has 442 states and 572 transitions. Word has length 30 [2022-07-21 05:01:50,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:50,671 INFO L495 AbstractCegarLoop]: Abstraction has 442 states and 572 transitions. [2022-07-21 05:01:50,672 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:50,672 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 572 transitions. [2022-07-21 05:01:50,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-21 05:01:50,673 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:50,673 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:50,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:01:50,673 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:50,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:50,674 INFO L85 PathProgramCache]: Analyzing trace with hash -1410993586, now seen corresponding path program 1 times [2022-07-21 05:01:50,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:50,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2094169637] [2022-07-21 05:01:50,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:50,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:50,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:50,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:50,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:50,732 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:50,732 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:50,732 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2094169637] [2022-07-21 05:01:50,732 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2094169637] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:50,733 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:50,733 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:01:50,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1309190668] [2022-07-21 05:01:50,733 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:50,734 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:01:50,734 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:50,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:01:50,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:01:50,735 INFO L87 Difference]: Start difference. First operand 442 states and 572 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:01:51,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:51,000 INFO L93 Difference]: Finished difference Result 537 states and 697 transitions. [2022-07-21 05:01:51,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-21 05:01:51,001 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-21 05:01:51,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:51,004 INFO L225 Difference]: With dead ends: 537 [2022-07-21 05:01:51,004 INFO L226 Difference]: Without dead ends: 535 [2022-07-21 05:01:51,004 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:51,005 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 140 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:51,005 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 342 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:51,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-07-21 05:01:51,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 506. [2022-07-21 05:01:51,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 506 states, 385 states have (on average 1.2727272727272727) internal successors, (490), 421 states have internal predecessors, (490), 61 states have call successors, (61), 51 states have call predecessors, (61), 59 states have return successors, (102), 53 states have call predecessors, (102), 61 states have call successors, (102) [2022-07-21 05:01:51,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 506 states to 506 states and 653 transitions. [2022-07-21 05:01:51,041 INFO L78 Accepts]: Start accepts. Automaton has 506 states and 653 transitions. Word has length 32 [2022-07-21 05:01:51,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:51,042 INFO L495 AbstractCegarLoop]: Abstraction has 506 states and 653 transitions. [2022-07-21 05:01:51,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:01:51,043 INFO L276 IsEmpty]: Start isEmpty. Operand 506 states and 653 transitions. [2022-07-21 05:01:51,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-21 05:01:51,046 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:51,047 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:51,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:01:51,047 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:51,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:51,048 INFO L85 PathProgramCache]: Analyzing trace with hash -1995340570, now seen corresponding path program 1 times [2022-07-21 05:01:51,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:51,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955183002] [2022-07-21 05:01:51,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:51,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:51,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:51,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:01:51,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:51,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:51,160 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:51,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955183002] [2022-07-21 05:01:51,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955183002] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:51,161 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:51,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:01:51,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644452081] [2022-07-21 05:01:51,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:51,162 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:01:51,162 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:51,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:01:51,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:01:51,163 INFO L87 Difference]: Start difference. First operand 506 states and 653 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:51,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:51,497 INFO L93 Difference]: Finished difference Result 1119 states and 1470 transitions. [2022-07-21 05:01:51,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:01:51,498 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-07-21 05:01:51,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:51,501 INFO L225 Difference]: With dead ends: 1119 [2022-07-21 05:01:51,502 INFO L226 Difference]: Without dead ends: 620 [2022-07-21 05:01:51,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:51,505 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 145 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:51,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 344 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:51,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2022-07-21 05:01:51,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 566. [2022-07-21 05:01:51,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 566 states, 435 states have (on average 1.2551724137931035) internal successors, (546), 471 states have internal predecessors, (546), 61 states have call successors, (61), 51 states have call predecessors, (61), 69 states have return successors, (116), 61 states have call predecessors, (116), 61 states have call successors, (116) [2022-07-21 05:01:51,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 566 states to 566 states and 723 transitions. [2022-07-21 05:01:51,543 INFO L78 Accepts]: Start accepts. Automaton has 566 states and 723 transitions. Word has length 47 [2022-07-21 05:01:51,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:51,543 INFO L495 AbstractCegarLoop]: Abstraction has 566 states and 723 transitions. [2022-07-21 05:01:51,543 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:51,543 INFO L276 IsEmpty]: Start isEmpty. Operand 566 states and 723 transitions. [2022-07-21 05:01:51,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-21 05:01:51,544 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:51,545 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:51,545 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:01:51,545 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:51,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:51,546 INFO L85 PathProgramCache]: Analyzing trace with hash 1278558372, now seen corresponding path program 1 times [2022-07-21 05:01:51,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:51,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98179773] [2022-07-21 05:01:51,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:51,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:51,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:51,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:01:51,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:51,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:51,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:51,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:51,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98179773] [2022-07-21 05:01:51,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98179773] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:51,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:51,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 05:01:51,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1763267726] [2022-07-21 05:01:51,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:51,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:01:51,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:51,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:01:51,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:01:51,623 INFO L87 Difference]: Start difference. First operand 566 states and 723 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:51,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:51,944 INFO L93 Difference]: Finished difference Result 1118 states and 1471 transitions. [2022-07-21 05:01:51,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-21 05:01:51,945 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-07-21 05:01:51,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:51,948 INFO L225 Difference]: With dead ends: 1118 [2022-07-21 05:01:51,948 INFO L226 Difference]: Without dead ends: 559 [2022-07-21 05:01:51,950 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-07-21 05:01:51,951 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 201 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:51,951 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 345 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:51,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 559 states. [2022-07-21 05:01:51,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 559 to 457. [2022-07-21 05:01:51,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 457 states, 350 states have (on average 1.2514285714285713) internal successors, (438), 379 states have internal predecessors, (438), 52 states have call successors, (52), 44 states have call predecessors, (52), 54 states have return successors, (88), 48 states have call predecessors, (88), 52 states have call successors, (88) [2022-07-21 05:01:51,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 457 states to 457 states and 578 transitions. [2022-07-21 05:01:51,975 INFO L78 Accepts]: Start accepts. Automaton has 457 states and 578 transitions. Word has length 47 [2022-07-21 05:01:51,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:51,976 INFO L495 AbstractCegarLoop]: Abstraction has 457 states and 578 transitions. [2022-07-21 05:01:51,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:51,976 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 578 transitions. [2022-07-21 05:01:51,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-21 05:01:51,977 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:51,977 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:51,977 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 05:01:51,978 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:51,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:51,978 INFO L85 PathProgramCache]: Analyzing trace with hash -715586334, now seen corresponding path program 1 times [2022-07-21 05:01:51,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:51,978 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120271265] [2022-07-21 05:01:51,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:51,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:51,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:52,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:01:52,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:52,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:52,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:52,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120271265] [2022-07-21 05:01:52,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120271265] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:52,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:52,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:01:52,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1974178454] [2022-07-21 05:01:52,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:52,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:01:52,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:52,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:01:52,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:01:52,075 INFO L87 Difference]: Start difference. First operand 457 states and 578 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:52,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:52,485 INFO L93 Difference]: Finished difference Result 1035 states and 1392 transitions. [2022-07-21 05:01:52,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-21 05:01:52,486 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-07-21 05:01:52,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:52,490 INFO L225 Difference]: With dead ends: 1035 [2022-07-21 05:01:52,490 INFO L226 Difference]: Without dead ends: 702 [2022-07-21 05:01:52,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 8 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-21 05:01:52,492 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 204 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 394 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 394 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:52,492 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [206 Valid, 472 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 394 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:01:52,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702 states. [2022-07-21 05:01:52,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702 to 677. [2022-07-21 05:01:52,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 677 states, 521 states have (on average 1.2284069097888675) internal successors, (640), 558 states have internal predecessors, (640), 76 states have call successors, (76), 66 states have call predecessors, (76), 79 states have return successors, (157), 78 states have call predecessors, (157), 76 states have call successors, (157) [2022-07-21 05:01:52,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 677 states to 677 states and 873 transitions. [2022-07-21 05:01:52,531 INFO L78 Accepts]: Start accepts. Automaton has 677 states and 873 transitions. Word has length 47 [2022-07-21 05:01:52,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:52,532 INFO L495 AbstractCegarLoop]: Abstraction has 677 states and 873 transitions. [2022-07-21 05:01:52,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:01:52,532 INFO L276 IsEmpty]: Start isEmpty. Operand 677 states and 873 transitions. [2022-07-21 05:01:52,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-21 05:01:52,534 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:52,535 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:52,535 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-21 05:01:52,535 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:52,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:52,536 INFO L85 PathProgramCache]: Analyzing trace with hash -1870420981, now seen corresponding path program 1 times [2022-07-21 05:01:52,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:52,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2099030521] [2022-07-21 05:01:52,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:52,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:52,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:52,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:01:52,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:52,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:52,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-21 05:01:52,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:52,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:52,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,636 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-07-21 05:01:52,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:52,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2099030521] [2022-07-21 05:01:52,637 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2099030521] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:01:52,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1151579972] [2022-07-21 05:01:52,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:52,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:52,638 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:52,643 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:01:52,668 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:01:52,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:52,755 INFO L263 TraceCheckSpWp]: Trace formula consists of 454 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 05:01:52,761 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:01:52,938 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 16 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:52,939 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:01:53,139 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-07-21 05:01:53,140 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1151579972] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:01:53,140 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:01:53,140 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-07-21 05:01:53,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125201686] [2022-07-21 05:01:53,140 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:01:53,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-21 05:01:53,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:53,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-21 05:01:53,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:01:53,142 INFO L87 Difference]: Start difference. First operand 677 states and 873 transitions. Second operand has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (17), 6 states have call predecessors, (17), 3 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-21 05:01:53,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:53,830 INFO L93 Difference]: Finished difference Result 1624 states and 2213 transitions. [2022-07-21 05:01:53,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-21 05:01:53,831 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (17), 6 states have call predecessors, (17), 3 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) Word has length 89 [2022-07-21 05:01:53,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:53,837 INFO L225 Difference]: With dead ends: 1624 [2022-07-21 05:01:53,838 INFO L226 Difference]: Without dead ends: 1071 [2022-07-21 05:01:53,840 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 194 SyntacticMatches, 5 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 201 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-07-21 05:01:53,841 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 275 mSDsluCounter, 462 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 281 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 758 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:53,841 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [281 Valid, 606 Invalid, 758 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-21 05:01:53,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1071 states. [2022-07-21 05:01:53,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1071 to 936. [2022-07-21 05:01:53,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 936 states, 712 states have (on average 1.2359550561797752) internal successors, (880), 767 states have internal predecessors, (880), 111 states have call successors, (111), 95 states have call predecessors, (111), 112 states have return successors, (242), 105 states have call predecessors, (242), 111 states have call successors, (242) [2022-07-21 05:01:53,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 936 states to 936 states and 1233 transitions. [2022-07-21 05:01:53,894 INFO L78 Accepts]: Start accepts. Automaton has 936 states and 1233 transitions. Word has length 89 [2022-07-21 05:01:53,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:53,894 INFO L495 AbstractCegarLoop]: Abstraction has 936 states and 1233 transitions. [2022-07-21 05:01:53,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (17), 6 states have call predecessors, (17), 3 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-21 05:01:53,895 INFO L276 IsEmpty]: Start isEmpty. Operand 936 states and 1233 transitions. [2022-07-21 05:01:53,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-07-21 05:01:53,898 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:53,898 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:53,923 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-21 05:01:54,115 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 05:01:54,116 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:54,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:54,116 INFO L85 PathProgramCache]: Analyzing trace with hash 309477364, now seen corresponding path program 2 times [2022-07-21 05:01:54,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:54,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37274057] [2022-07-21 05:01:54,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:54,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:54,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:54,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:01:54,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:54,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:54,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 05:01:54,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:54,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:54,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:54,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-07-21 05:01:54,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:54,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:54,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,348 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 49 proven. 23 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-21 05:01:54,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:54,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37274057] [2022-07-21 05:01:54,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37274057] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:01:54,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [467480044] [2022-07-21 05:01:54,349 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-21 05:01:54,349 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:54,349 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:54,351 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:01:54,362 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:01:54,480 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-21 05:01:54,480 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-21 05:01:54,483 INFO L263 TraceCheckSpWp]: Trace formula consists of 562 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-21 05:01:54,496 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:01:54,596 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 76 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-21 05:01:54,596 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:01:54,596 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [467480044] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:54,596 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:01:54,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-07-21 05:01:54,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [924524222] [2022-07-21 05:01:54,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:54,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:01:54,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:54,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:01:54,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:54,598 INFO L87 Difference]: Start difference. First operand 936 states and 1233 transitions. Second operand has 6 states, 6 states have (on average 16.5) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-21 05:01:54,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:54,930 INFO L93 Difference]: Finished difference Result 2509 states and 3457 transitions. [2022-07-21 05:01:54,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-21 05:01:54,931 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 16.5) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 131 [2022-07-21 05:01:54,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:54,939 INFO L225 Difference]: With dead ends: 2509 [2022-07-21 05:01:54,940 INFO L226 Difference]: Without dead ends: 1695 [2022-07-21 05:01:54,945 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 152 SyntacticMatches, 4 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-07-21 05:01:54,945 INFO L413 NwaCegarLoop]: 188 mSDtfsCounter, 234 mSDsluCounter, 434 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 622 SdHoareTripleChecker+Invalid, 204 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:54,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [234 Valid, 622 Invalid, 204 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:01:54,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1695 states. [2022-07-21 05:01:55,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1695 to 1659. [2022-07-21 05:01:55,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1659 states, 1262 states have (on average 1.2345483359746434) internal successors, (1558), 1344 states have internal predecessors, (1558), 192 states have call successors, (192), 170 states have call predecessors, (192), 204 states have return successors, (394), 194 states have call predecessors, (394), 192 states have call successors, (394) [2022-07-21 05:01:55,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1659 states to 1659 states and 2144 transitions. [2022-07-21 05:01:55,065 INFO L78 Accepts]: Start accepts. Automaton has 1659 states and 2144 transitions. Word has length 131 [2022-07-21 05:01:55,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,066 INFO L495 AbstractCegarLoop]: Abstraction has 1659 states and 2144 transitions. [2022-07-21 05:01:55,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 16.5) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-21 05:01:55,066 INFO L276 IsEmpty]: Start isEmpty. Operand 1659 states and 2144 transitions. [2022-07-21 05:01:55,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-07-21 05:01:55,070 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:55,070 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:55,100 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 05:01:55,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-21 05:01:55,296 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:55,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:55,296 INFO L85 PathProgramCache]: Analyzing trace with hash -107919242, now seen corresponding path program 1 times [2022-07-21 05:01:55,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:55,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66047701] [2022-07-21 05:01:55,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:55,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:55,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:01:55,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:55,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:55,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 05:01:55,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:55,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:55,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:55,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-07-21 05:01:55,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:55,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:55,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,406 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 43 proven. 6 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-07-21 05:01:55,407 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:55,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [66047701] [2022-07-21 05:01:55,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [66047701] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:01:55,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1684483996] [2022-07-21 05:01:55,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,407 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:55,408 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:55,412 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:01:55,414 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 05:01:55,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 563 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-21 05:01:55,524 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:01:55,553 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-07-21 05:01:55,554 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:01:55,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1684483996] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:55,554 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:01:55,554 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 12 [2022-07-21 05:01:55,555 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1075943217] [2022-07-21 05:01:55,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:55,555 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:01:55,555 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:55,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:01:55,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:55,556 INFO L87 Difference]: Start difference. First operand 1659 states and 2144 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 05:01:55,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:55,631 INFO L93 Difference]: Finished difference Result 2287 states and 2930 transitions. [2022-07-21 05:01:55,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:01:55,632 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 131 [2022-07-21 05:01:55,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:55,633 INFO L225 Difference]: With dead ends: 2287 [2022-07-21 05:01:55,633 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:01:55,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=144, Unknown=0, NotChecked=0, Total=182 [2022-07-21 05:01:55,638 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 9 mSDsluCounter, 295 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 399 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:55,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 399 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:55,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:01:55,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:01:55,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:01:55,640 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 131 [2022-07-21 05:01:55,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,640 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:01:55,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 05:01:55,641 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:01:55,641 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:01:55,644 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:01:55,675 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 05:01:55,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:55,859 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:01:59,037 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 252 259) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,037 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 252 259) no Hoare annotation was computed. [2022-07-21 05:01:59,037 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 252 259) no Hoare annotation was computed. [2022-07-21 05:01:59,037 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-07-21 05:01:59,037 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-07-21 05:01:59,037 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 933 944) the Hoare annotation is: true [2022-07-21 05:01:59,037 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 933 944) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 933 944) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 446 475) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 446 475) the Hoare annotation is: true [2022-07-21 05:01:59,038 INFO L902 garLoopResultBuilder]: At program point L471(lines 446 475) the Hoare annotation is: true [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point L467(line 467) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 464) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L902 garLoopResultBuilder]: At program point L460-1(lines 460 464) the Hoare annotation is: true [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point L457(line 457) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L902 garLoopResultBuilder]: At program point L456-2(lines 456 470) the Hoare annotation is: true [2022-07-21 05:01:59,038 INFO L902 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: true [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point L452-1(line 452) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L899 garLoopResultBuilder]: For program point L440(line 440) no Hoare annotation was computed. [2022-07-21 05:01:59,038 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse3)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse3 .cse4) (or .cse2 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse4)))) [2022-07-21 05:01:59,039 INFO L895 garLoopResultBuilder]: At program point L238-1(lines 219 243) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) (and .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse2))) (or .cse3 .cse4 (and .cse0 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-21 05:01:59,039 INFO L895 garLoopResultBuilder]: At program point L267(lines 260 270) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 135 158) no Hoare annotation was computed. [2022-07-21 05:01:59,039 INFO L895 garLoopResultBuilder]: At program point L441(lines 436 443) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,039 INFO L895 garLoopResultBuilder]: At program point L982(lines 977 985) the Hoare annotation is: (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and .cse7 .cse6 .cse8 (not .cse2))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 (and .cse5 .cse6) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or (and .cse7 .cse8) (and .cse5 (<= 1 ~waterLevel~0) .cse4) .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-07-21 05:01:59,039 INFO L895 garLoopResultBuilder]: At program point L276(lines 271 279) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 235) no Hoare annotation was computed. [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point L384(lines 384 390) no Hoare annotation was computed. [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 240) no Hoare annotation was computed. [2022-07-21 05:01:59,039 INFO L899 garLoopResultBuilder]: For program point L380(lines 380 393) no Hoare annotation was computed. [2022-07-21 05:01:59,040 INFO L895 garLoopResultBuilder]: At program point L380-1(lines 372 396) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse5 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse1 (= 0 ~systemActive~0))) (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|)) (.cse9 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (and .cse4 .cse5 .cse10 .cse6 (not .cse1)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6) (and .cse7 .cse8 (<= 1 ~waterLevel~0) .cse9) .cse1 .cse3) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) (and .cse7 .cse8 .cse9 .cse10) .cse2)))) [2022-07-21 05:01:59,040 INFO L895 garLoopResultBuilder]: At program point L950(lines 945 953) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,040 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 917) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point L913-2(lines 909 920) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 534) no Hoare annotation was computed. [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point L366(lines 354 368) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-07-21 05:01:59,041 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-21 05:01:59,042 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L527-2(lines 527 534) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 364) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L358-1(lines 358 364) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L895 garLoopResultBuilder]: At program point L416(lines 412 418) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L902 garLoopResultBuilder]: At program point L536(lines 517 539) the Hoare annotation is: true [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-07-21 05:01:59,042 INFO L895 garLoopResultBuilder]: At program point L504(lines 500 506) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-21 05:01:59,043 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-07-21 05:01:59,043 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-07-21 05:01:59,043 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-21 05:01:59,043 INFO L899 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L431(lines 426 434) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L423(lines 419 425) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:01:59,043 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-21 05:01:59,043 INFO L902 garLoopResultBuilder]: At program point L514(lines 507 516) the Hoare annotation is: true [2022-07-21 05:01:59,043 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,044 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L895 garLoopResultBuilder]: At program point L331(lines 316 334) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or .cse0 (not (<= 1 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L325(lines 325 329) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L325-2(lines 325 329) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L990(lines 990 996) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L895 garLoopResultBuilder]: At program point L249(lines 244 251) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,044 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0))) .cse1))) [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2022-07-21 05:01:59,044 INFO L895 garLoopResultBuilder]: At program point L995(lines 986 999) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-07-21 05:01:59,044 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 921 932) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L925-1(lines 921 932) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 921 932) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 193 217) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 .cse1 (and (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~5#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~2#1|) (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0))))) [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point L350(lines 335 353) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~5#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 193 217) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 348) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L344-2(lines 344 348) no Hoare annotation was computed. [2022-07-21 05:01:59,045 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-07-21 05:01:59,045 INFO L899 garLoopResultBuilder]: For program point L212-1(lines 193 217) no Hoare annotation was computed. [2022-07-21 05:01:59,046 INFO L895 garLoopResultBuilder]: At program point L1005(lines 1000 1008) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-21 05:01:59,054 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:59,056 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:01:59,091 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:01:59 BoogieIcfgContainer [2022-07-21 05:01:59,100 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:01:59,101 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:01:59,101 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:01:59,101 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:01:59,102 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:49" (3/4) ... [2022-07-21 05:01:59,104 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:01:59,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:01:59,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:01:59,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:01:59,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:01:59,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:01:59,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:01:59,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:01:59,111 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:01:59,122 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-07-21 05:01:59,123 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:01:59,123 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:01:59,124 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:01:59,124 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:01:59,125 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:01:59,125 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:01:59,148 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-21 05:01:59,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-21 05:01:59,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) || ((((tmp == 1 && pumpRunning == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((tmp == 1 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-21 05:01:59,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,152 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-07-21 05:01:59,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) || ((((tmp == 1 && pumpRunning == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) [2022-07-21 05:01:59,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || ((((2 <= waterLevel && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || ((((2 <= waterLevel && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) [2022-07-21 05:01:59,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-21 05:01:59,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-07-21 05:01:59,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-21 05:01:59,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-21 05:01:59,158 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\result == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-07-21 05:01:59,158 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-21 05:01:59,190 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:01:59,191 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:01:59,191 INFO L158 Benchmark]: Toolchain (without parser) took 11237.13ms. Allocated memory was 56.6MB in the beginning and 161.5MB in the end (delta: 104.9MB). Free memory was 33.0MB in the beginning and 47.0MB in the end (delta: -14.0MB). Peak memory consumption was 90.6MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,191 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 56.6MB. Free memory is still 37.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:01:59,192 INFO L158 Benchmark]: CACSL2BoogieTranslator took 501.86ms. Allocated memory was 56.6MB in the beginning and 73.4MB in the end (delta: 16.8MB). Free memory was 32.9MB in the beginning and 49.1MB in the end (delta: -16.3MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,192 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.71ms. Allocated memory is still 73.4MB. Free memory was 48.9MB in the beginning and 46.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,192 INFO L158 Benchmark]: Boogie Preprocessor took 56.48ms. Allocated memory is still 73.4MB. Free memory was 46.3MB in the beginning and 44.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,193 INFO L158 Benchmark]: RCFGBuilder took 561.09ms. Allocated memory is still 73.4MB. Free memory was 44.7MB in the beginning and 43.6MB in the end (delta: 1.1MB). Peak memory consumption was 11.3MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,193 INFO L158 Benchmark]: TraceAbstraction took 9941.52ms. Allocated memory was 73.4MB in the beginning and 161.5MB in the end (delta: 88.1MB). Free memory was 43.0MB in the beginning and 53.2MB in the end (delta: -10.2MB). Peak memory consumption was 85.7MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,193 INFO L158 Benchmark]: Witness Printer took 90.04ms. Allocated memory is still 161.5MB. Free memory was 53.2MB in the beginning and 47.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 05:01:59,194 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 56.6MB. Free memory is still 37.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 501.86ms. Allocated memory was 56.6MB in the beginning and 73.4MB in the end (delta: 16.8MB). Free memory was 32.9MB in the beginning and 49.1MB in the end (delta: -16.3MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 78.71ms. Allocated memory is still 73.4MB. Free memory was 48.9MB in the beginning and 46.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.48ms. Allocated memory is still 73.4MB. Free memory was 46.3MB in the beginning and 44.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 561.09ms. Allocated memory is still 73.4MB. Free memory was 44.7MB in the beginning and 43.6MB in the end (delta: 1.1MB). Peak memory consumption was 11.3MB. Max. memory is 16.1GB. * TraceAbstraction took 9941.52ms. Allocated memory was 73.4MB in the beginning and 161.5MB in the end (delta: 88.1MB). Free memory was 43.0MB in the beginning and 53.2MB in the end (delta: -10.2MB). Peak memory consumption was 85.7MB. Max. memory is 16.1GB. * Witness Printer took 90.04ms. Allocated memory is still 161.5MB. Free memory was 53.2MB in the beginning and 47.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1597 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1578 mSDsluCounter, 4577 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3112 mSDsCounter, 437 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2205 IncrementalHoareTripleChecker+Invalid, 2642 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 437 mSolverCounterUnsat, 1465 mSDtfsCounter, 2205 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 666 GetRequests, 540 SyntacticMatches, 11 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 325 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1659occurred in iteration=11, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 398 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2851 PreInvPairs, 3108 NumberOfFragments, 1159 HoareAnnotationTreeSize, 2851 FomulaSimplifications, 3678 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 47 FomulaSimplificationsInter, 14061 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 996 NumberOfCodeBlocks, 996 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1069 ConstructedInterpolants, 0 QuantifiedInterpolants, 1923 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1579 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 378/432 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) || ((((tmp == 1 && pumpRunning == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((tmp == 1 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 446]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || ((((2 <= waterLevel && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || ((((2 <= waterLevel && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: ((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) || ((((tmp == 1 && pumpRunning == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 500]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\result == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: ((((((tmp == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 219]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-21 05:01:59,246 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE