./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:01:52,096 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:01:52,098 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:01:52,130 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:01:52,130 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:01:52,131 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:01:52,134 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:01:52,137 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:01:52,139 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:01:52,142 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:01:52,143 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:01:52,145 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:01:52,145 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:01:52,147 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:01:52,147 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:01:52,152 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:01:52,153 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:01:52,154 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:01:52,155 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:01:52,160 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:01:52,161 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:01:52,162 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:01:52,163 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:01:52,163 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:01:52,164 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:01:52,170 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:01:52,170 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:01:52,170 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:01:52,171 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:01:52,171 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:01:52,172 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:01:52,172 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:01:52,173 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:01:52,174 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:01:52,175 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:01:52,175 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:01:52,175 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:01:52,176 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:01:52,176 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:01:52,176 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:01:52,177 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:01:52,179 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:01:52,183 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:01:52,208 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:01:52,208 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:01:52,209 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:01:52,209 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:01:52,209 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:01:52,210 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:01:52,210 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:01:52,210 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:01:52,210 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:01:52,211 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:01:52,211 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:01:52,211 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:01:52,211 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:01:52,219 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:01:52,219 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:01:52,219 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:01:52,220 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:01:52,220 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:01:52,220 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:01:52,220 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:01:52,220 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:01:52,220 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:01:52,221 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:01:52,221 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:01:52,221 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:01:52,221 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:01:52,221 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:01:52,221 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:01:52,222 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:01:52,222 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:01:52,222 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:01:52,222 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:01:52,222 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:01:52,223 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f [2022-07-21 05:01:52,569 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:01:52,604 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:01:52,609 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:01:52,623 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:01:52,625 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:01:52,626 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-07-21 05:01:52,714 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/48f39e913/33f0987c4fad40c5a4ed735b2ecd7ad8/FLAG7b7d581b3 [2022-07-21 05:01:53,235 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:01:53,240 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-07-21 05:01:53,251 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/48f39e913/33f0987c4fad40c5a4ed735b2ecd7ad8/FLAG7b7d581b3 [2022-07-21 05:01:53,612 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/48f39e913/33f0987c4fad40c5a4ed735b2ecd7ad8 [2022-07-21 05:01:53,614 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:01:53,615 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:01:53,616 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:01:53,616 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:01:53,618 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:01:53,619 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:01:53" (1/1) ... [2022-07-21 05:01:53,620 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25525120 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:53, skipping insertion in model container [2022-07-21 05:01:53,620 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:01:53" (1/1) ... [2022-07-21 05:01:53,624 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:01:53,647 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:01:53,730 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-07-21 05:01:53,941 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:01:53,964 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:01:53,977 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-07-21 05:01:54,069 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:01:54,100 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:01:54,100 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54 WrapperNode [2022-07-21 05:01:54,100 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:01:54,101 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:01:54,101 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:01:54,101 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:01:54,109 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,147 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,183 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 292 [2022-07-21 05:01:54,183 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:01:54,184 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:01:54,184 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:01:54,185 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:01:54,191 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,191 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,201 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,202 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,211 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,219 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,222 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,226 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:01:54,228 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:01:54,229 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:01:54,229 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:01:54,229 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (1/1) ... [2022-07-21 05:01:54,234 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:01:54,242 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:54,253 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:01:54,277 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:01:54,292 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:01:54,292 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:01:54,292 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:01:54,292 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:01:54,293 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:01:54,293 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:01:54,293 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:01:54,293 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:01:54,293 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:01:54,293 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:01:54,293 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:01:54,293 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:01:54,294 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:01:54,294 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-21 05:01:54,294 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-21 05:01:54,294 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:01:54,294 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:01:54,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:01:54,294 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:01:54,294 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:01:54,294 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:01:54,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:01:54,357 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:01:54,359 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:01:54,608 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:01:54,613 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:01:54,614 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:01:54,615 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:54 BoogieIcfgContainer [2022-07-21 05:01:54,616 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:01:54,617 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:01:54,617 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:01:54,619 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:01:54,619 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:01:53" (1/3) ... [2022-07-21 05:01:54,620 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e12e89e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:01:54, skipping insertion in model container [2022-07-21 05:01:54,620 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:01:54" (2/3) ... [2022-07-21 05:01:54,620 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e12e89e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:01:54, skipping insertion in model container [2022-07-21 05:01:54,620 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:54" (3/3) ... [2022-07-21 05:01:54,621 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2022-07-21 05:01:54,632 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:01:54,632 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:01:54,674 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:01:54,686 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2e904537, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3545054c [2022-07-21 05:01:54,687 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:01:54,696 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-21 05:01:54,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-21 05:01:54,704 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:54,705 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:54,705 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:54,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:54,710 INFO L85 PathProgramCache]: Analyzing trace with hash 1971423540, now seen corresponding path program 1 times [2022-07-21 05:01:54,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:54,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751353367] [2022-07-21 05:01:54,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:54,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:54,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:54,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:54,901 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:54,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751353367] [2022-07-21 05:01:54,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751353367] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:54,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:54,902 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:01:54,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [741278760] [2022-07-21 05:01:54,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:54,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:01:54,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:54,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:01:54,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:01:54,931 INFO L87 Difference]: Start difference. First operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:54,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:54,975 INFO L93 Difference]: Finished difference Result 200 states and 271 transitions. [2022-07-21 05:01:54,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:01:54,977 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-07-21 05:01:54,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:54,987 INFO L225 Difference]: With dead ends: 200 [2022-07-21 05:01:54,988 INFO L226 Difference]: Without dead ends: 95 [2022-07-21 05:01:54,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:01:54,995 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:54,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:55,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-07-21 05:01:55,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2022-07-21 05:01:55,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-21 05:01:55,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2022-07-21 05:01:55,044 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 19 [2022-07-21 05:01:55,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,044 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2022-07-21 05:01:55,045 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,045 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2022-07-21 05:01:55,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-07-21 05:01:55,047 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:55,048 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:55,048 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:01:55,048 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:55,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:55,053 INFO L85 PathProgramCache]: Analyzing trace with hash -856589602, now seen corresponding path program 1 times [2022-07-21 05:01:55,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:55,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774772751] [2022-07-21 05:01:55,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:55,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:55,136 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:55,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774772751] [2022-07-21 05:01:55,137 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774772751] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:55,137 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:55,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:01:55,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750597754] [2022-07-21 05:01:55,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:55,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:01:55,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:55,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:01:55,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:55,141 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:55,164 INFO L93 Difference]: Finished difference Result 155 states and 201 transitions. [2022-07-21 05:01:55,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:01:55,166 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-07-21 05:01:55,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:55,169 INFO L225 Difference]: With dead ends: 155 [2022-07-21 05:01:55,169 INFO L226 Difference]: Without dead ends: 86 [2022-07-21 05:01:55,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:01:55,173 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 13 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:55,173 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 203 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:55,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-07-21 05:01:55,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-07-21 05:01:55,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.328125) internal successors, (85), 73 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-21 05:01:55,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-07-21 05:01:55,179 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 20 [2022-07-21 05:01:55,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,180 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-07-21 05:01:55,180 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,180 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-07-21 05:01:55,180 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-21 05:01:55,181 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:55,181 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:55,181 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:01:55,181 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:55,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:55,183 INFO L85 PathProgramCache]: Analyzing trace with hash 2135542647, now seen corresponding path program 1 times [2022-07-21 05:01:55,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:55,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120459402] [2022-07-21 05:01:55,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:55,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,239 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:55,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:55,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120459402] [2022-07-21 05:01:55,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120459402] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:55,240 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:55,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:01:55,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [801056179] [2022-07-21 05:01:55,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:55,241 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:01:55,241 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:55,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:01:55,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:01:55,241 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:55,315 INFO L93 Difference]: Finished difference Result 165 states and 216 transitions. [2022-07-21 05:01:55,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:01:55,315 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-07-21 05:01:55,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:55,316 INFO L225 Difference]: With dead ends: 165 [2022-07-21 05:01:55,316 INFO L226 Difference]: Without dead ends: 86 [2022-07-21 05:01:55,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:01:55,318 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 136 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:55,318 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 280 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:01:55,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-07-21 05:01:55,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-07-21 05:01:55,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 73 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-21 05:01:55,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2022-07-21 05:01:55,325 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 25 [2022-07-21 05:01:55,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,325 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2022-07-21 05:01:55,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:01:55,326 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2022-07-21 05:01:55,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-21 05:01:55,327 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:55,327 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:55,327 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:01:55,327 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:55,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:55,328 INFO L85 PathProgramCache]: Analyzing trace with hash -181443690, now seen corresponding path program 1 times [2022-07-21 05:01:55,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:55,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135393502] [2022-07-21 05:01:55,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:55,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:01:55,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-21 05:01:55,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:55,402 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:55,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135393502] [2022-07-21 05:01:55,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135393502] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:55,403 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:55,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-21 05:01:55,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [157183095] [2022-07-21 05:01:55,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:55,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-21 05:01:55,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:55,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-21 05:01:55,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-21 05:01:55,406 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:01:55,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:55,520 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2022-07-21 05:01:55,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:01:55,520 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-21 05:01:55,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:55,522 INFO L225 Difference]: With dead ends: 241 [2022-07-21 05:01:55,522 INFO L226 Difference]: Without dead ends: 162 [2022-07-21 05:01:55,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:01:55,523 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 153 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:55,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 203 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:01:55,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-07-21 05:01:55,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2022-07-21 05:01:55,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.26890756302521) internal successors, (151), 128 states have internal predecessors, (151), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-07-21 05:01:55,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 194 transitions. [2022-07-21 05:01:55,561 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 194 transitions. Word has length 38 [2022-07-21 05:01:55,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:55,561 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 194 transitions. [2022-07-21 05:01:55,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:01:55,562 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 194 transitions. [2022-07-21 05:01:55,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-21 05:01:55,563 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:55,563 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:55,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:01:55,563 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:55,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:55,564 INFO L85 PathProgramCache]: Analyzing trace with hash -91120732, now seen corresponding path program 1 times [2022-07-21 05:01:55,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:55,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469406452] [2022-07-21 05:01:55,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:55,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:55,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:01:55,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:55,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:55,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:55,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:55,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:55,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469406452] [2022-07-21 05:01:55,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469406452] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:55,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:55,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-21 05:01:55,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436704097] [2022-07-21 05:01:55,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:55,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-21 05:01:55,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:55,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-21 05:01:55,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:01:55,706 INFO L87 Difference]: Start difference. First operand 156 states and 194 transitions. Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:01:56,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:56,123 INFO L93 Difference]: Finished difference Result 544 states and 736 transitions. [2022-07-21 05:01:56,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-07-21 05:01:56,124 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-21 05:01:56,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:56,127 INFO L225 Difference]: With dead ends: 544 [2022-07-21 05:01:56,127 INFO L226 Difference]: Without dead ends: 395 [2022-07-21 05:01:56,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2022-07-21 05:01:56,130 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 339 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 487 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 670 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:56,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 670 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 487 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:01:56,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2022-07-21 05:01:56,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2022-07-21 05:01:56,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 286 states have (on average 1.2377622377622377) internal successors, (354), 306 states have internal predecessors, (354), 40 states have call successors, (40), 38 states have call predecessors, (40), 50 states have return successors, (90), 46 states have call predecessors, (90), 40 states have call successors, (90) [2022-07-21 05:01:56,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 484 transitions. [2022-07-21 05:01:56,158 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 484 transitions. Word has length 46 [2022-07-21 05:01:56,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:56,158 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 484 transitions. [2022-07-21 05:01:56,159 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:01:56,159 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 484 transitions. [2022-07-21 05:01:56,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-07-21 05:01:56,162 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:56,163 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:56,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:01:56,163 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:56,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:56,163 INFO L85 PathProgramCache]: Analyzing trace with hash 908063002, now seen corresponding path program 1 times [2022-07-21 05:01:56,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:56,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227679566] [2022-07-21 05:01:56,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:56,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:56,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:56,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:01:56,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:56,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:56,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:56,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-21 05:01:56,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-21 05:01:56,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-21 05:01:56,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,260 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-21 05:01:56,260 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:56,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227679566] [2022-07-21 05:01:56,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227679566] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:56,261 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:56,261 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 05:01:56,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890792472] [2022-07-21 05:01:56,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:56,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:01:56,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:56,262 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:01:56,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:01:56,263 INFO L87 Difference]: Start difference. First operand 377 states and 484 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-21 05:01:56,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:56,484 INFO L93 Difference]: Finished difference Result 840 states and 1145 transitions. [2022-07-21 05:01:56,484 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:01:56,484 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-07-21 05:01:56,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:56,492 INFO L225 Difference]: With dead ends: 840 [2022-07-21 05:01:56,492 INFO L226 Difference]: Without dead ends: 470 [2022-07-21 05:01:56,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:56,502 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 109 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 373 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:56,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 401 Invalid, 373 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:56,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2022-07-21 05:01:56,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 431. [2022-07-21 05:01:56,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 355 states have internal predecessors, (404), 44 states have call successors, (44), 38 states have call predecessors, (44), 56 states have return successors, (104), 51 states have call predecessors, (104), 44 states have call successors, (104) [2022-07-21 05:01:56,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 552 transitions. [2022-07-21 05:01:56,542 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 552 transitions. Word has length 93 [2022-07-21 05:01:56,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:56,543 INFO L495 AbstractCegarLoop]: Abstraction has 431 states and 552 transitions. [2022-07-21 05:01:56,543 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-21 05:01:56,543 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 552 transitions. [2022-07-21 05:01:56,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-07-21 05:01:56,544 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:56,545 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:56,545 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:01:56,545 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:56,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:56,546 INFO L85 PathProgramCache]: Analyzing trace with hash -1534943524, now seen corresponding path program 1 times [2022-07-21 05:01:56,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:56,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429706057] [2022-07-21 05:01:56,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:56,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:56,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-21 05:01:56,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:56,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:56,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:56,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-21 05:01:56,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-07-21 05:01:56,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:56,621 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-21 05:01:56,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:56,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429706057] [2022-07-21 05:01:56,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429706057] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:01:56,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:01:56,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 05:01:56,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349217917] [2022-07-21 05:01:56,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:01:56,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:01:56,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:56,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:01:56,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:01:56,623 INFO L87 Difference]: Start difference. First operand 431 states and 552 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 05:01:56,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:56,891 INFO L93 Difference]: Finished difference Result 808 states and 1073 transitions. [2022-07-21 05:01:56,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:01:56,891 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) Word has length 85 [2022-07-21 05:01:56,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:56,893 INFO L225 Difference]: With dead ends: 808 [2022-07-21 05:01:56,894 INFO L226 Difference]: Without dead ends: 384 [2022-07-21 05:01:56,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:56,897 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 134 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:56,897 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 385 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:01:56,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-07-21 05:01:56,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 368. [2022-07-21 05:01:56,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 280 states have (on average 1.2142857142857142) internal successors, (340), 301 states have internal predecessors, (340), 40 states have call successors, (40), 33 states have call predecessors, (40), 47 states have return successors, (86), 44 states have call predecessors, (86), 40 states have call successors, (86) [2022-07-21 05:01:56,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 466 transitions. [2022-07-21 05:01:56,931 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 466 transitions. Word has length 85 [2022-07-21 05:01:56,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:56,932 INFO L495 AbstractCegarLoop]: Abstraction has 368 states and 466 transitions. [2022-07-21 05:01:56,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 05:01:56,932 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 466 transitions. [2022-07-21 05:01:56,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-21 05:01:56,934 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:56,935 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:56,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:01:56,935 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:56,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:56,935 INFO L85 PathProgramCache]: Analyzing trace with hash -1438943688, now seen corresponding path program 1 times [2022-07-21 05:01:56,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:56,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1667497309] [2022-07-21 05:01:56,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:56,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:56,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:57,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:01:57,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:57,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:57,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:57,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-21 05:01:57,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-21 05:01:57,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,054 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-21 05:01:57,054 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:57,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1667497309] [2022-07-21 05:01:57,054 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1667497309] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:01:57,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [681855205] [2022-07-21 05:01:57,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:57,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:57,055 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:57,067 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:01:57,068 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:01:57,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:57,174 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 05:01:57,179 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:01:57,364 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:01:57,365 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:01:57,484 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-07-21 05:01:57,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [681855205] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:01:57,485 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:01:57,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2022-07-21 05:01:57,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [411459471] [2022-07-21 05:01:57,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:01:57,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-21 05:01:57,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:57,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-21 05:01:57,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:01:57,487 INFO L87 Difference]: Start difference. First operand 368 states and 466 transitions. Second operand has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-21 05:01:58,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:01:58,843 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2022-07-21 05:01:58,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-07-21 05:01:58,844 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 89 [2022-07-21 05:01:58,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:01:58,846 INFO L225 Difference]: With dead ends: 817 [2022-07-21 05:01:58,846 INFO L226 Difference]: Without dead ends: 504 [2022-07-21 05:01:58,847 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 201 SyntacticMatches, 4 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 839 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=481, Invalid=2275, Unknown=0, NotChecked=0, Total=2756 [2022-07-21 05:01:58,848 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 805 mSDsluCounter, 592 mSDsCounter, 0 mSdLazyCounter, 1089 mSolverCounterSat, 336 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 812 SdHoareTripleChecker+Valid, 738 SdHoareTripleChecker+Invalid, 1425 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 336 IncrementalHoareTripleChecker+Valid, 1089 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-21 05:01:58,848 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [812 Valid, 738 Invalid, 1425 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [336 Valid, 1089 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-21 05:01:58,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2022-07-21 05:01:58,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 434. [2022-07-21 05:01:58,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 434 states, 328 states have (on average 1.2103658536585367) internal successors, (397), 352 states have internal predecessors, (397), 51 states have call successors, (51), 44 states have call predecessors, (51), 54 states have return successors, (111), 50 states have call predecessors, (111), 51 states have call successors, (111) [2022-07-21 05:01:58,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 434 states to 434 states and 559 transitions. [2022-07-21 05:01:58,864 INFO L78 Accepts]: Start accepts. Automaton has 434 states and 559 transitions. Word has length 89 [2022-07-21 05:01:58,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:01:58,865 INFO L495 AbstractCegarLoop]: Abstraction has 434 states and 559 transitions. [2022-07-21 05:01:58,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-21 05:01:58,865 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 559 transitions. [2022-07-21 05:01:58,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-21 05:01:58,866 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:01:58,866 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:01:58,886 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-21 05:01:59,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:59,086 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:01:59,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:01:59,087 INFO L85 PathProgramCache]: Analyzing trace with hash 1270234994, now seen corresponding path program 1 times [2022-07-21 05:01:59,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:01:59,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1598225589] [2022-07-21 05:01:59,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:59,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:01:59,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:01:59,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:01:59,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:01:59,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:59,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:01:59,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:01:59,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-21 05:01:59,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:01:59,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:59,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:59,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-21 05:01:59,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-21 05:01:59,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:01:59,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:01:59,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,381 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-21 05:01:59,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:01:59,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1598225589] [2022-07-21 05:01:59,381 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1598225589] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:01:59,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1874601497] [2022-07-21 05:01:59,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:01:59,381 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:01:59,382 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:01:59,396 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:01:59,397 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:01:59,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:01:59,513 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-21 05:01:59,527 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:01:59,667 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 88 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-07-21 05:01:59,667 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:01:59,920 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-21 05:01:59,920 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1874601497] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:01:59,920 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:01:59,920 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 20 [2022-07-21 05:01:59,920 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792301926] [2022-07-21 05:01:59,920 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:01:59,921 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-07-21 05:01:59,921 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:01:59,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-07-21 05:01:59,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2022-07-21 05:01:59,922 INFO L87 Difference]: Start difference. First operand 434 states and 559 transitions. Second operand has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-21 05:02:01,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:01,152 INFO L93 Difference]: Finished difference Result 1255 states and 1720 transitions. [2022-07-21 05:02:01,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-07-21 05:02:01,152 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 150 [2022-07-21 05:02:01,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:01,156 INFO L225 Difference]: With dead ends: 1255 [2022-07-21 05:02:01,156 INFO L226 Difference]: Without dead ends: 875 [2022-07-21 05:02:01,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 373 GetRequests, 325 SyntacticMatches, 6 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 405 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=486, Invalid=1406, Unknown=0, NotChecked=0, Total=1892 [2022-07-21 05:02:01,158 INFO L413 NwaCegarLoop]: 225 mSDtfsCounter, 1145 mSDsluCounter, 734 mSDsCounter, 0 mSdLazyCounter, 1189 mSolverCounterSat, 579 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1150 SdHoareTripleChecker+Valid, 959 SdHoareTripleChecker+Invalid, 1768 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 579 IncrementalHoareTripleChecker+Valid, 1189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:01,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1150 Valid, 959 Invalid, 1768 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [579 Valid, 1189 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-21 05:02:01,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 875 states. [2022-07-21 05:02:01,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 875 to 766. [2022-07-21 05:02:01,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 766 states, 578 states have (on average 1.207612456747405) internal successors, (698), 611 states have internal predecessors, (698), 88 states have call successors, (88), 81 states have call predecessors, (88), 99 states have return successors, (187), 92 states have call predecessors, (187), 88 states have call successors, (187) [2022-07-21 05:02:01,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 766 states to 766 states and 973 transitions. [2022-07-21 05:02:01,187 INFO L78 Accepts]: Start accepts. Automaton has 766 states and 973 transitions. Word has length 150 [2022-07-21 05:02:01,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:01,188 INFO L495 AbstractCegarLoop]: Abstraction has 766 states and 973 transitions. [2022-07-21 05:02:01,188 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.95) internal successors, (159), 18 states have internal predecessors, (159), 7 states have call successors, (33), 9 states have call predecessors, (33), 7 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-21 05:02:01,188 INFO L276 IsEmpty]: Start isEmpty. Operand 766 states and 973 transitions. [2022-07-21 05:02:01,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-21 05:02:01,190 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:01,190 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:01,215 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:01,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-07-21 05:02:01,413 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:01,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:01,413 INFO L85 PathProgramCache]: Analyzing trace with hash -2070792144, now seen corresponding path program 1 times [2022-07-21 05:02:01,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:01,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1658410381] [2022-07-21 05:02:01,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:01,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:01,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 05:02:01,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:02:01,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:02:01,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:01,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:02:01,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:01,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-21 05:02:01,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:01,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:01,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:01,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-21 05:02:01,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-21 05:02:01,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:01,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:01,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,509 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-21 05:02:01,509 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:01,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1658410381] [2022-07-21 05:02:01,509 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1658410381] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:01,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1259315947] [2022-07-21 05:02:01,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:01,510 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:01,510 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:01,511 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:01,512 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 05:02:01,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:01,608 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-21 05:02:01,610 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:01,619 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-07-21 05:02:01,619 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:02:01,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1259315947] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:01,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:02:01,620 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-07-21 05:02:01,620 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1392867594] [2022-07-21 05:02:01,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:01,621 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:02:01,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:01,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:02:01,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:02:01,621 INFO L87 Difference]: Start difference. First operand 766 states and 973 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-21 05:02:01,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:01,654 INFO L93 Difference]: Finished difference Result 998 states and 1255 transitions. [2022-07-21 05:02:01,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:02:01,655 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-07-21 05:02:01,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:01,656 INFO L225 Difference]: With dead ends: 998 [2022-07-21 05:02:01,656 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:02:01,657 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:02:01,658 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 9 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:01,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 415 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:02:01,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:02:01,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:02:01,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:02:01,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:02:01,659 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-07-21 05:02:01,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:01,660 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:02:01,660 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-21 05:02:01,660 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:02:01,660 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:02:01,662 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:02:01,687 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:01,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:01,882 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:02:03,816 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 278 285) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,816 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 278 285) no Hoare annotation was computed. [2022-07-21 05:02:03,817 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 278 285) no Hoare annotation was computed. [2022-07-21 05:02:03,817 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 168 174) no Hoare annotation was computed. [2022-07-21 05:02:03,817 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 168 174) the Hoare annotation is: true [2022-07-21 05:02:03,817 INFO L899 garLoopResultBuilder]: For program point L946-1(lines 942 953) no Hoare annotation was computed. [2022-07-21 05:02:03,818 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 942 953) the Hoare annotation is: true [2022-07-21 05:02:03,818 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 942 953) no Hoare annotation was computed. [2022-07-21 05:02:03,818 INFO L902 garLoopResultBuilder]: At program point L480(lines 455 484) the Hoare annotation is: true [2022-07-21 05:02:03,818 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 455 484) no Hoare annotation was computed. [2022-07-21 05:02:03,819 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 455 484) the Hoare annotation is: true [2022-07-21 05:02:03,819 INFO L899 garLoopResultBuilder]: For program point L476(line 476) no Hoare annotation was computed. [2022-07-21 05:02:03,819 INFO L899 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2022-07-21 05:02:03,819 INFO L902 garLoopResultBuilder]: At program point L469-1(lines 469 473) the Hoare annotation is: true [2022-07-21 05:02:03,819 INFO L899 garLoopResultBuilder]: For program point L466(line 466) no Hoare annotation was computed. [2022-07-21 05:02:03,820 INFO L902 garLoopResultBuilder]: At program point L465-2(lines 465 479) the Hoare annotation is: true [2022-07-21 05:02:03,820 INFO L902 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: true [2022-07-21 05:02:03,820 INFO L899 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2022-07-21 05:02:03,820 INFO L899 garLoopResultBuilder]: For program point L155-1(lines 155 161) no Hoare annotation was computed. [2022-07-21 05:02:03,821 INFO L895 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-07-21 05:02:03,821 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-07-21 05:02:03,821 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-07-21 05:02:03,821 INFO L899 garLoopResultBuilder]: For program point L234-1(line 234) no Hoare annotation was computed. [2022-07-21 05:02:03,821 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 144 167) no Hoare annotation was computed. [2022-07-21 05:02:03,822 INFO L895 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-07-21 05:02:03,823 INFO L895 garLoopResultBuilder]: At program point L247-1(lines 228 252) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (let ((.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and .cse3 .cse4) .cse1 (and (<= 2 ~waterLevel~0) .cse4) .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 (= ~waterLevel~0 1)) .cse2))) [2022-07-21 05:02:03,823 INFO L899 garLoopResultBuilder]: For program point L148-1(lines 147 166) no Hoare annotation was computed. [2022-07-21 05:02:03,823 INFO L895 garLoopResultBuilder]: At program point L991(lines 986 994) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse2) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse1 (and (<= 2 ~waterLevel~0) .cse5 .cse4) (and .cse3 .cse5 .cse4) .cse2)))) [2022-07-21 05:02:03,824 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-21 05:02:03,824 INFO L895 garLoopResultBuilder]: At program point L302(lines 297 305) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-07-21 05:02:03,825 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 244) no Hoare annotation was computed. [2022-07-21 05:02:03,825 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 249) no Hoare annotation was computed. [2022-07-21 05:02:03,825 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2022-07-21 05:02:03,825 INFO L895 garLoopResultBuilder]: At program point L922-2(lines 918 929) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-07-21 05:02:03,825 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-07-21 05:02:03,825 INFO L899 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2022-07-21 05:02:03,826 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 144 167) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-07-21 05:02:03,826 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 411) no Hoare annotation was computed. [2022-07-21 05:02:03,826 INFO L895 garLoopResultBuilder]: At program point L398-1(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 (<= |old(~waterLevel~0)| 1)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) .cse1) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and (<= 2 ~waterLevel~0) .cse3 .cse5 .cse4) (< |old(~waterLevel~0)| 2) (and .cse2 .cse3 .cse5 .cse4) .cse1)))) [2022-07-21 05:02:03,826 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 144 167) no Hoare annotation was computed. [2022-07-21 05:02:03,827 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-21 05:02:03,827 INFO L895 garLoopResultBuilder]: At program point L122(lines 73 123) the Hoare annotation is: false [2022-07-21 05:02:03,827 INFO L902 garLoopResultBuilder]: At program point L523(lines 516 525) the Hoare annotation is: true [2022-07-21 05:02:03,827 INFO L895 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:02:03,827 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:02:03,827 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 100) no Hoare annotation was computed. [2022-07-21 05:02:03,827 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:02:03,828 INFO L899 garLoopResultBuilder]: For program point L94-1(lines 94 100) no Hoare annotation was computed. [2022-07-21 05:02:03,828 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:02:03,829 INFO L895 garLoopResultBuilder]: At program point L441(lines 437 443) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:02:03,829 INFO L899 garLoopResultBuilder]: For program point L536(lines 536 543) no Hoare annotation was computed. [2022-07-21 05:02:03,829 INFO L895 garLoopResultBuilder]: At program point L119(lines 74 121) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-07-21 05:02:03,829 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-07-21 05:02:03,829 INFO L899 garLoopResultBuilder]: For program point L536-2(lines 536 543) no Hoare annotation was computed. [2022-07-21 05:02:03,829 INFO L902 garLoopResultBuilder]: At program point L545(lines 526 548) the Hoare annotation is: true [2022-07-21 05:02:03,830 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:02:03,830 INFO L895 garLoopResultBuilder]: At program point L434(lines 430 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:02:03,830 INFO L899 garLoopResultBuilder]: For program point L112(lines 112 116) no Hoare annotation was computed. [2022-07-21 05:02:03,830 INFO L895 garLoopResultBuilder]: At program point L112-2(lines 104 117) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-07-21 05:02:03,830 INFO L899 garLoopResultBuilder]: For program point L75(lines 74 121) no Hoare annotation was computed. [2022-07-21 05:02:03,830 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 117) no Hoare annotation was computed. [2022-07-21 05:02:03,830 INFO L895 garLoopResultBuilder]: At program point L513(lines 509 515) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) (not (= 0 ~systemActive~0))) [2022-07-21 05:02:03,831 INFO L895 garLoopResultBuilder]: At program point L385(lines 380 387) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-07-21 05:02:03,831 INFO L895 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-07-21 05:02:03,831 INFO L902 garLoopResultBuilder]: At program point L125(lines 64 129) the Hoare annotation is: true [2022-07-21 05:02:03,831 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-07-21 05:02:03,832 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-07-21 05:02:03,832 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2022-07-21 05:02:03,832 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 176 200) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-07-21 05:02:03,832 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 355) no Hoare annotation was computed. [2022-07-21 05:02:03,832 INFO L895 garLoopResultBuilder]: At program point L190(line 190) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse1) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (= 0 ~systemActive~0))) [2022-07-21 05:02:03,834 INFO L899 garLoopResultBuilder]: For program point L351-2(lines 351 355) no Hoare annotation was computed. [2022-07-21 05:02:03,834 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 192) no Hoare annotation was computed. [2022-07-21 05:02:03,834 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2022-07-21 05:02:03,834 INFO L895 garLoopResultBuilder]: At program point L1004(lines 995 1008) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-07-21 05:02:03,834 INFO L895 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,834 INFO L899 garLoopResultBuilder]: For program point L195-1(lines 176 200) no Hoare annotation was computed. [2022-07-21 05:02:03,835 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 176 200) no Hoare annotation was computed. [2022-07-21 05:02:03,835 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2022-07-21 05:02:03,835 INFO L895 garLoopResultBuilder]: At program point L266(line 266) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-07-21 05:02:03,835 INFO L895 garLoopResultBuilder]: At program point L268-2(lines 261 277) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,835 INFO L899 garLoopResultBuilder]: For program point L266-1(line 266) no Hoare annotation was computed. [2022-07-21 05:02:03,835 INFO L899 garLoopResultBuilder]: For program point L999(lines 999 1005) no Hoare annotation was computed. [2022-07-21 05:02:03,835 INFO L895 garLoopResultBuilder]: At program point L357(lines 342 360) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-07-21 05:02:03,836 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 260) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,836 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 930 941) no Hoare annotation was computed. [2022-07-21 05:02:03,836 INFO L899 garLoopResultBuilder]: For program point L934-1(lines 930 941) no Hoare annotation was computed. [2022-07-21 05:02:03,836 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 930 941) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-21 05:02:03,837 INFO L895 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,837 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 202 226) no Hoare annotation was computed. [2022-07-21 05:02:03,837 INFO L895 garLoopResultBuilder]: At program point L376(lines 361 379) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0)) .cse0 .cse1))) [2022-07-21 05:02:03,837 INFO L895 garLoopResultBuilder]: At program point L1014(lines 1009 1017) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-21 05:02:03,837 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-07-21 05:02:03,837 INFO L899 garLoopResultBuilder]: For program point L370-2(lines 370 374) no Hoare annotation was computed. [2022-07-21 05:02:03,837 INFO L895 garLoopResultBuilder]: At program point L216(line 216) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,838 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-21 05:02:03,838 INFO L899 garLoopResultBuilder]: For program point L210(lines 210 218) no Hoare annotation was computed. [2022-07-21 05:02:03,838 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 202 226) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-21 05:02:03,838 INFO L899 garLoopResultBuilder]: For program point L206(lines 206 223) no Hoare annotation was computed. [2022-07-21 05:02:03,838 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 202 226) no Hoare annotation was computed. [2022-07-21 05:02:03,838 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 286 296) the Hoare annotation is: true [2022-07-21 05:02:03,839 INFO L902 garLoopResultBuilder]: At program point L959(lines 954 962) the Hoare annotation is: true [2022-07-21 05:02:03,839 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 286 296) no Hoare annotation was computed. [2022-07-21 05:02:03,839 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 286 296) no Hoare annotation was computed. [2022-07-21 05:02:03,842 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:03,843 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:02:03,876 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:02:03 BoogieIcfgContainer [2022-07-21 05:02:03,876 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:02:03,876 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:02:03,876 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:02:03,876 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:02:03,877 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:01:54" (3/4) ... [2022-07-21 05:02:03,883 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:02:03,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:02:03,888 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:02:03,888 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:02:03,888 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-21 05:02:03,892 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-07-21 05:02:03,893 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:02:03,893 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:02:03,893 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:02:03,893 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:02:03,894 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:02:03,894 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:02:03,910 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 05:02:03,910 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) [2022-07-21 05:02:03,910 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-21 05:02:03,910 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2022-07-21 05:02:03,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-07-21 05:02:03,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-21 05:02:03,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-07-21 05:02:03,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-07-21 05:02:03,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) [2022-07-21 05:02:03,940 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:02:03,941 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:02:03,941 INFO L158 Benchmark]: Toolchain (without parser) took 10325.80ms. Allocated memory was 54.5MB in the beginning and 148.9MB in the end (delta: 94.4MB). Free memory was 31.5MB in the beginning and 86.9MB in the end (delta: -55.5MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,941 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory was 35.6MB in the beginning and 35.6MB in the end (delta: 44.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:02:03,942 INFO L158 Benchmark]: CACSL2BoogieTranslator took 484.12ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 31.3MB in the beginning and 41.8MB in the end (delta: -10.6MB). Peak memory consumption was 7.2MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,942 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.71ms. Allocated memory is still 67.1MB. Free memory was 41.6MB in the beginning and 39.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,942 INFO L158 Benchmark]: Boogie Preprocessor took 43.03ms. Allocated memory is still 67.1MB. Free memory was 39.0MB in the beginning and 37.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,943 INFO L158 Benchmark]: RCFGBuilder took 387.98ms. Allocated memory is still 67.1MB. Free memory was 37.4MB in the beginning and 36.7MB in the end (delta: 675.1kB). Peak memory consumption was 10.7MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,943 INFO L158 Benchmark]: TraceAbstraction took 9259.01ms. Allocated memory was 67.1MB in the beginning and 148.9MB in the end (delta: 81.8MB). Free memory was 36.2MB in the beginning and 93.2MB in the end (delta: -57.0MB). Peak memory consumption was 78.5MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,943 INFO L158 Benchmark]: Witness Printer took 64.44ms. Allocated memory is still 148.9MB. Free memory was 93.2MB in the beginning and 86.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 05:02:03,944 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory was 35.6MB in the beginning and 35.6MB in the end (delta: 44.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 484.12ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 31.3MB in the beginning and 41.8MB in the end (delta: -10.6MB). Peak memory consumption was 7.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.71ms. Allocated memory is still 67.1MB. Free memory was 41.6MB in the beginning and 39.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.03ms. Allocated memory is still 67.1MB. Free memory was 39.0MB in the beginning and 37.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 387.98ms. Allocated memory is still 67.1MB. Free memory was 37.4MB in the beginning and 36.7MB in the end (delta: 675.1kB). Peak memory consumption was 10.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9259.01ms. Allocated memory was 67.1MB in the beginning and 148.9MB in the end (delta: 81.8MB). Free memory was 36.2MB in the beginning and 93.2MB in the end (delta: -57.0MB). Peak memory consumption was 78.5MB. Max. memory is 16.1GB. * Witness Printer took 64.44ms. Allocated memory is still 148.9MB. Free memory was 93.2MB in the beginning and 86.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2876 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2843 mSDsluCounter, 4386 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3152 mSDsCounter, 1147 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3573 IncrementalHoareTripleChecker+Invalid, 4720 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1147 mSolverCounterUnsat, 1234 mSDtfsCounter, 3573 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 923 GetRequests, 763 SyntacticMatches, 10 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1347 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=766occurred in iteration=9, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 258 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1447 PreInvPairs, 1561 NumberOfFragments, 1066 HoareAnnotationTreeSize, 1447 FomulaSimplifications, 1427 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 49 FomulaSimplificationsInter, 7307 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 1104 NumberOfCodeBlocks, 1104 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1328 ConstructedInterpolants, 0 QuantifiedInterpolants, 2372 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1666 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 554/634 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 342]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-21 05:02:04,000 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE