./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:20:26,087 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:20:26,089 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:20:26,107 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:20:26,108 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:20:26,108 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:20:26,109 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:20:26,110 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:20:26,115 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:20:26,120 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:20:26,121 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:20:26,123 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:20:26,123 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:20:26,125 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:20:26,126 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:20:26,127 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:20:26,129 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:20:26,129 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:20:26,131 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:20:26,136 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:20:26,138 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:20:26,139 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:20:26,140 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:20:26,140 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:20:26,141 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:20:26,144 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:20:26,145 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:20:26,145 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:20:26,146 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:20:26,146 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:20:26,147 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:20:26,147 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:20:26,148 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:20:26,149 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:20:26,149 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:20:26,150 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:20:26,150 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:20:26,150 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:20:26,151 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:20:26,152 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:20:26,152 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:20:26,153 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:20:26,154 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:20:26,173 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:20:26,175 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:20:26,175 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:20:26,176 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:20:26,176 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:20:26,176 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:20:26,177 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:20:26,177 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:20:26,177 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:20:26,178 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:20:26,178 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:20:26,178 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:20:26,178 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:20:26,178 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:20:26,178 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:20:26,179 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:20:26,179 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:20:26,180 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:26,181 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:20:26,181 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:20:26,182 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:20:26,182 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:20:26,182 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:20:26,182 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 [2022-07-12 06:20:26,398 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:20:26,416 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:20:26,417 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:20:26,418 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:20:26,419 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:20:26,420 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-07-12 06:20:26,484 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/94e487a4b/1d69d2da8d874b27b76fafc30f49111a/FLAGce794815c [2022-07-12 06:20:26,875 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:20:26,875 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-07-12 06:20:26,885 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/94e487a4b/1d69d2da8d874b27b76fafc30f49111a/FLAGce794815c [2022-07-12 06:20:26,896 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/94e487a4b/1d69d2da8d874b27b76fafc30f49111a [2022-07-12 06:20:26,898 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:20:26,900 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:20:26,901 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:26,901 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:20:26,903 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:20:26,904 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:26" (1/1) ... [2022-07-12 06:20:26,905 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7c152bb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:26, skipping insertion in model container [2022-07-12 06:20:26,905 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:26" (1/1) ... [2022-07-12 06:20:26,910 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:20:26,952 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:20:27,121 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-07-12 06:20:27,227 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:27,237 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:20:27,258 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-07-12 06:20:27,311 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:27,324 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:20:27,326 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27 WrapperNode [2022-07-12 06:20:27,326 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:27,327 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:27,327 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:20:27,327 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:20:27,332 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,352 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,371 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 297 [2022-07-12 06:20:27,376 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:27,377 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:20:27,377 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:20:27,377 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:20:27,382 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,383 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,385 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,388 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,392 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,395 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,397 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,398 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:20:27,400 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:20:27,400 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:20:27,401 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:20:27,404 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (1/1) ... [2022-07-12 06:20:27,410 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:27,418 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:27,427 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:20:27,431 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:20:27,466 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:20:27,466 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:20:27,466 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:20:27,466 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:20:27,466 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:20:27,466 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:20:27,466 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:20:27,467 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:20:27,467 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:20:27,467 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:20:27,467 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:20:27,467 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:20:27,467 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:20:27,467 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-12 06:20:27,467 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-12 06:20:27,468 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-12 06:20:27,468 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-12 06:20:27,468 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:20:27,468 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:20:27,468 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:20:27,468 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:20:27,468 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:20:27,532 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:20:27,534 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:20:27,811 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:20:27,816 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:20:27,816 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:20:27,817 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:27 BoogieIcfgContainer [2022-07-12 06:20:27,817 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:20:27,818 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:20:27,818 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:20:27,824 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:20:27,825 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:20:26" (1/3) ... [2022-07-12 06:20:27,826 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@471bf73e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:20:27, skipping insertion in model container [2022-07-12 06:20:27,826 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:27" (2/3) ... [2022-07-12 06:20:27,826 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@471bf73e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:20:27, skipping insertion in model container [2022-07-12 06:20:27,826 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:27" (3/3) ... [2022-07-12 06:20:27,827 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product64.cil.c [2022-07-12 06:20:27,840 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:20:27,840 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:20:27,887 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:20:27,893 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@164aedd, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4964e43c [2022-07-12 06:20:27,894 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:20:27,904 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-12 06:20:27,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-12 06:20:27,911 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:27,912 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:27,912 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:27,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:27,917 INFO L85 PathProgramCache]: Analyzing trace with hash -1842892420, now seen corresponding path program 1 times [2022-07-12 06:20:27,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:27,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181527865] [2022-07-12 06:20:27,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:27,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181527865] [2022-07-12 06:20:28,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1181527865] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,110 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,110 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:20:28,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369447698] [2022-07-12 06:20:28,112 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,119 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:20:28,119 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:20:28,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:20:28,142 INFO L87 Difference]: Start difference. First operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:28,167 INFO L93 Difference]: Finished difference Result 208 states and 283 transitions. [2022-07-12 06:20:28,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:20:28,170 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-07-12 06:20:28,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:28,180 INFO L225 Difference]: With dead ends: 208 [2022-07-12 06:20:28,180 INFO L226 Difference]: Without dead ends: 99 [2022-07-12 06:20:28,184 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:20:28,188 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:28,188 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:28,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-07-12 06:20:28,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2022-07-12 06:20:28,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 83 states have internal predecessors, (96), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-12 06:20:28,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 129 transitions. [2022-07-12 06:20:28,230 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 129 transitions. Word has length 19 [2022-07-12 06:20:28,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:28,231 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 129 transitions. [2022-07-12 06:20:28,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,231 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 129 transitions. [2022-07-12 06:20:28,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-07-12 06:20:28,235 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:28,235 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:28,235 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:20:28,236 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:28,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:28,237 INFO L85 PathProgramCache]: Analyzing trace with hash 750568636, now seen corresponding path program 1 times [2022-07-12 06:20:28,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:28,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1975536564] [2022-07-12 06:20:28,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:28,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1975536564] [2022-07-12 06:20:28,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1975536564] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:20:28,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489864894] [2022-07-12 06:20:28,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:20:28,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:20:28,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:28,333 INFO L87 Difference]: Start difference. First operand 99 states and 129 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:28,356 INFO L93 Difference]: Finished difference Result 159 states and 207 transitions. [2022-07-12 06:20:28,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:20:28,357 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-07-12 06:20:28,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:28,359 INFO L225 Difference]: With dead ends: 159 [2022-07-12 06:20:28,360 INFO L226 Difference]: Without dead ends: 90 [2022-07-12 06:20:28,360 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:28,362 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 17 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:28,363 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 210 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:28,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-12 06:20:28,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-12 06:20:28,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-12 06:20:28,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 117 transitions. [2022-07-12 06:20:28,383 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 117 transitions. Word has length 20 [2022-07-12 06:20:28,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:28,384 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 117 transitions. [2022-07-12 06:20:28,384 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,384 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 117 transitions. [2022-07-12 06:20:28,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-12 06:20:28,385 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:28,385 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:28,385 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:20:28,385 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:28,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:28,386 INFO L85 PathProgramCache]: Analyzing trace with hash 1483068035, now seen corresponding path program 1 times [2022-07-12 06:20:28,386 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:28,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925828665] [2022-07-12 06:20:28,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:28,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925828665] [2022-07-12 06:20:28,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925828665] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,458 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:20:28,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [651363312] [2022-07-12 06:20:28,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,458 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:28,458 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:28,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:20:28,459 INFO L87 Difference]: Start difference. First operand 90 states and 117 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:28,516 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-07-12 06:20:28,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-12 06:20:28,517 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-07-12 06:20:28,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:28,518 INFO L225 Difference]: With dead ends: 211 [2022-07-12 06:20:28,518 INFO L226 Difference]: Without dead ends: 128 [2022-07-12 06:20:28,519 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:20:28,520 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 180 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:28,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 371 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:28,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-07-12 06:20:28,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-07-12 06:20:28,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.351063829787234) internal successors, (127), 107 states have internal predecessors, (127), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2022-07-12 06:20:28,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 164 transitions. [2022-07-12 06:20:28,530 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 164 transitions. Word has length 25 [2022-07-12 06:20:28,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:28,531 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 164 transitions. [2022-07-12 06:20:28,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,531 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 164 transitions. [2022-07-12 06:20:28,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-12 06:20:28,532 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:28,532 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:28,532 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:20:28,533 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:28,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:28,533 INFO L85 PathProgramCache]: Analyzing trace with hash 417349686, now seen corresponding path program 1 times [2022-07-12 06:20:28,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:28,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553464536] [2022-07-12 06:20:28,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:28,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553464536] [2022-07-12 06:20:28,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [553464536] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 06:20:28,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670798317] [2022-07-12 06:20:28,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,588 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:28,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:28,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:20:28,589 INFO L87 Difference]: Start difference. First operand 125 states and 164 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:28,669 INFO L93 Difference]: Finished difference Result 349 states and 479 transitions. [2022-07-12 06:20:28,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:20:28,670 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-07-12 06:20:28,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:28,676 INFO L225 Difference]: With dead ends: 349 [2022-07-12 06:20:28,676 INFO L226 Difference]: Without dead ends: 231 [2022-07-12 06:20:28,678 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:28,685 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 88 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:28,686 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 476 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:28,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-07-12 06:20:28,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231. [2022-07-12 06:20:28,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 172 states have (on average 1.3313953488372092) internal successors, (229), 195 states have internal predecessors, (229), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (41), 22 states have call predecessors, (41), 36 states have call successors, (41) [2022-07-12 06:20:28,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 306 transitions. [2022-07-12 06:20:28,712 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 306 transitions. Word has length 28 [2022-07-12 06:20:28,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:28,713 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 306 transitions. [2022-07-12 06:20:28,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,713 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 306 transitions. [2022-07-12 06:20:28,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-12 06:20:28,719 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:28,719 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:28,719 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:20:28,719 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:28,720 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:28,720 INFO L85 PathProgramCache]: Analyzing trace with hash -1384596677, now seen corresponding path program 1 times [2022-07-12 06:20:28,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:28,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [65301725] [2022-07-12 06:20:28,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:28,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,755 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [65301725] [2022-07-12 06:20:28,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [65301725] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,756 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,756 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:20:28,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745230745] [2022-07-12 06:20:28,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:20:28,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:20:28,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:28,757 INFO L87 Difference]: Start difference. First operand 231 states and 306 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:28,791 INFO L93 Difference]: Finished difference Result 511 states and 692 transitions. [2022-07-12 06:20:28,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:20:28,791 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-07-12 06:20:28,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:28,793 INFO L225 Difference]: With dead ends: 511 [2022-07-12 06:20:28,793 INFO L226 Difference]: Without dead ends: 287 [2022-07-12 06:20:28,794 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:28,794 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 68 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:28,797 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 189 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:28,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2022-07-12 06:20:28,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 283. [2022-07-12 06:20:28,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 217 states have (on average 1.271889400921659) internal successors, (276), 234 states have internal predecessors, (276), 34 states have call successors, (34), 32 states have call predecessors, (34), 31 states have return successors, (50), 31 states have call predecessors, (50), 34 states have call successors, (50) [2022-07-12 06:20:28,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 360 transitions. [2022-07-12 06:20:28,813 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 360 transitions. Word has length 30 [2022-07-12 06:20:28,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:28,813 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 360 transitions. [2022-07-12 06:20:28,813 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:28,813 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 360 transitions. [2022-07-12 06:20:28,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-12 06:20:28,814 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:28,815 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:28,815 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:20:28,815 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:28,815 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:28,815 INFO L85 PathProgramCache]: Analyzing trace with hash -263887204, now seen corresponding path program 1 times [2022-07-12 06:20:28,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:28,816 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1503819158] [2022-07-12 06:20:28,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:28,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:28,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:28,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:28,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:28,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:28,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1503819158] [2022-07-12 06:20:28,911 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1503819158] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:28,911 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:28,911 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:20:28,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2008889815] [2022-07-12 06:20:28,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:28,912 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:20:28,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:28,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:20:28,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:20:28,912 INFO L87 Difference]: Start difference. First operand 283 states and 360 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:20:29,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:29,149 INFO L93 Difference]: Finished difference Result 335 states and 428 transitions. [2022-07-12 06:20:29,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-12 06:20:29,150 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-12 06:20:29,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:29,152 INFO L225 Difference]: With dead ends: 335 [2022-07-12 06:20:29,152 INFO L226 Difference]: Without dead ends: 333 [2022-07-12 06:20:29,152 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:20:29,153 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 161 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:29,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 351 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:20:29,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-07-12 06:20:29,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 316. [2022-07-12 06:20:29,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 241 states have (on average 1.2572614107883817) internal successors, (303), 264 states have internal predecessors, (303), 38 states have call successors, (38), 32 states have call predecessors, (38), 36 states have return successors, (61), 34 states have call predecessors, (61), 38 states have call successors, (61) [2022-07-12 06:20:29,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 402 transitions. [2022-07-12 06:20:29,173 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 402 transitions. Word has length 32 [2022-07-12 06:20:29,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:29,173 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 402 transitions. [2022-07-12 06:20:29,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:20:29,173 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 402 transitions. [2022-07-12 06:20:29,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-12 06:20:29,174 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:29,175 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:29,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:20:29,175 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:29,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:29,175 INFO L85 PathProgramCache]: Analyzing trace with hash 285414993, now seen corresponding path program 1 times [2022-07-12 06:20:29,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:29,176 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [721810922] [2022-07-12 06:20:29,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:29,176 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:29,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:29,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-12 06:20:29,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:29,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:29,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:29,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:29,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [721810922] [2022-07-12 06:20:29,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [721810922] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:29,256 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:29,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-12 06:20:29,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186151635] [2022-07-12 06:20:29,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:29,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 06:20:29,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:29,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 06:20:29,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:20:29,257 INFO L87 Difference]: Start difference. First operand 316 states and 402 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:29,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:29,525 INFO L93 Difference]: Finished difference Result 693 states and 906 transitions. [2022-07-12 06:20:29,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-12 06:20:29,526 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2022-07-12 06:20:29,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:29,527 INFO L225 Difference]: With dead ends: 693 [2022-07-12 06:20:29,528 INFO L226 Difference]: Without dead ends: 384 [2022-07-12 06:20:29,529 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:20:29,529 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 208 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 514 SdHoareTripleChecker+Invalid, 504 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:29,529 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 514 Invalid, 504 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 439 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:20:29,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-07-12 06:20:29,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 346. [2022-07-12 06:20:29,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 266 states have (on average 1.236842105263158) internal successors, (329), 289 states have internal predecessors, (329), 38 states have call successors, (38), 32 states have call predecessors, (38), 41 states have return successors, (64), 38 states have call predecessors, (64), 38 states have call successors, (64) [2022-07-12 06:20:29,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 431 transitions. [2022-07-12 06:20:29,543 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 431 transitions. Word has length 59 [2022-07-12 06:20:29,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:29,544 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 431 transitions. [2022-07-12 06:20:29,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:29,544 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 431 transitions. [2022-07-12 06:20:29,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:20:29,545 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:29,545 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:29,545 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:20:29,545 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:29,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:29,546 INFO L85 PathProgramCache]: Analyzing trace with hash 1185571886, now seen corresponding path program 1 times [2022-07-12 06:20:29,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:29,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1234066923] [2022-07-12 06:20:29,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:29,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:29,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:29,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:20:29,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:29,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:29,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:29,660 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:29,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:29,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1234066923] [2022-07-12 06:20:29,661 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1234066923] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:29,661 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:29,661 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-12 06:20:29,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342053333] [2022-07-12 06:20:29,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:29,661 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 06:20:29,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:29,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 06:20:29,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:20:29,662 INFO L87 Difference]: Start difference. First operand 346 states and 431 transitions. Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:30,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:30,035 INFO L93 Difference]: Finished difference Result 672 states and 857 transitions. [2022-07-12 06:20:30,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-12 06:20:30,035 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-12 06:20:30,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:30,037 INFO L225 Difference]: With dead ends: 672 [2022-07-12 06:20:30,037 INFO L226 Difference]: Without dead ends: 333 [2022-07-12 06:20:30,038 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-07-12 06:20:30,038 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 224 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 384 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 384 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:30,038 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 311 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 384 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:20:30,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-07-12 06:20:30,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 279. [2022-07-12 06:20:30,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 214 states have (on average 1.233644859813084) internal successors, (264), 232 states have internal predecessors, (264), 32 states have call successors, (32), 27 states have call predecessors, (32), 32 states have return successors, (49), 30 states have call predecessors, (49), 32 states have call successors, (49) [2022-07-12 06:20:30,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 345 transitions. [2022-07-12 06:20:30,054 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 345 transitions. Word has length 56 [2022-07-12 06:20:30,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:30,055 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 345 transitions. [2022-07-12 06:20:30,055 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:30,055 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 345 transitions. [2022-07-12 06:20:30,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:20:30,056 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:30,056 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:30,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:20:30,056 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:30,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:30,057 INFO L85 PathProgramCache]: Analyzing trace with hash 1247611500, now seen corresponding path program 1 times [2022-07-12 06:20:30,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:30,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437700651] [2022-07-12 06:20:30,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:30,057 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:30,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:30,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:20:30,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:30,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:30,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:30,163 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:30,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437700651] [2022-07-12 06:20:30,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437700651] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:30,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:30,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:20:30,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164753554] [2022-07-12 06:20:30,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:30,164 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:20:30,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:30,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:20:30,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:30,165 INFO L87 Difference]: Start difference. First operand 279 states and 345 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:30,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:30,689 INFO L93 Difference]: Finished difference Result 617 states and 805 transitions. [2022-07-12 06:20:30,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-12 06:20:30,689 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-12 06:20:30,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:30,691 INFO L225 Difference]: With dead ends: 617 [2022-07-12 06:20:30,691 INFO L226 Difference]: Without dead ends: 418 [2022-07-12 06:20:30,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 10 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-12 06:20:30,693 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 252 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 406 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 474 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 406 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:30,693 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 474 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 406 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-12 06:20:30,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2022-07-12 06:20:30,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 407. [2022-07-12 06:20:30,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 407 states, 314 states have (on average 1.21656050955414) internal successors, (382), 337 states have internal predecessors, (382), 46 states have call successors, (46), 40 states have call predecessors, (46), 46 states have return successors, (84), 47 states have call predecessors, (84), 46 states have call successors, (84) [2022-07-12 06:20:30,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 407 states to 407 states and 512 transitions. [2022-07-12 06:20:30,726 INFO L78 Accepts]: Start accepts. Automaton has 407 states and 512 transitions. Word has length 56 [2022-07-12 06:20:30,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:30,726 INFO L495 AbstractCegarLoop]: Abstraction has 407 states and 512 transitions. [2022-07-12 06:20:30,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:30,726 INFO L276 IsEmpty]: Start isEmpty. Operand 407 states and 512 transitions. [2022-07-12 06:20:30,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-07-12 06:20:30,727 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:30,728 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:30,728 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:20:30,728 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:30,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:30,728 INFO L85 PathProgramCache]: Analyzing trace with hash -1661930304, now seen corresponding path program 1 times [2022-07-12 06:20:30,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:30,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908993557] [2022-07-12 06:20:30,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:30,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:30,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:30,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:20:30,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:20:30,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:30,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:30,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-12 06:20:30,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-12 06:20:30,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:20:30,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:30,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:30,880 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-12 06:20:30,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:30,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908993557] [2022-07-12 06:20:30,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908993557] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:20:30,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [861629363] [2022-07-12 06:20:30,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:30,881 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:20:30,881 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:30,895 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:20:30,896 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:20:31,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:31,017 INFO L263 TraceCheckSpWp]: Trace formula consists of 489 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:20:31,022 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:20:31,161 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:31,175 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:20:31,313 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-12 06:20:31,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [861629363] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:20:31,314 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:20:31,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-07-12 06:20:31,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [384361708] [2022-07-12 06:20:31,314 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:20:31,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-12 06:20:31,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:31,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-12 06:20:31,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-12 06:20:31,315 INFO L87 Difference]: Start difference. First operand 407 states and 512 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:20:31,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:31,899 INFO L93 Difference]: Finished difference Result 968 states and 1279 transitions. [2022-07-12 06:20:31,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-12 06:20:31,899 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 103 [2022-07-12 06:20:31,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:31,902 INFO L225 Difference]: With dead ends: 968 [2022-07-12 06:20:31,902 INFO L226 Difference]: Without dead ends: 641 [2022-07-12 06:20:31,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 226 SyntacticMatches, 5 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 201 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-07-12 06:20:31,904 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 292 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 805 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 127 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:31,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [300 Valid, 617 Invalid, 805 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [127 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-12 06:20:31,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 641 states. [2022-07-12 06:20:31,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 641 to 557. [2022-07-12 06:20:31,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 557 states, 425 states have (on average 1.223529411764706) internal successors, (520), 458 states have internal predecessors, (520), 66 states have call successors, (66), 57 states have call predecessors, (66), 65 states have return successors, (128), 63 states have call predecessors, (128), 66 states have call successors, (128) [2022-07-12 06:20:31,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 557 states to 557 states and 714 transitions. [2022-07-12 06:20:31,925 INFO L78 Accepts]: Start accepts. Automaton has 557 states and 714 transitions. Word has length 103 [2022-07-12 06:20:31,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:31,926 INFO L495 AbstractCegarLoop]: Abstraction has 557 states and 714 transitions. [2022-07-12 06:20:31,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:20:31,926 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 714 transitions. [2022-07-12 06:20:31,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-12 06:20:31,928 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:31,928 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:31,950 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-12 06:20:32,149 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-12 06:20:32,149 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:32,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:32,150 INFO L85 PathProgramCache]: Analyzing trace with hash 745596908, now seen corresponding path program 2 times [2022-07-12 06:20:32,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:32,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92132455] [2022-07-12 06:20:32,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:32,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:32,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:32,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:20:32,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:20:32,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:32,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:32,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-12 06:20:32,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-12 06:20:32,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:20:32,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:20:32,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:32,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-12 06:20:32,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-12 06:20:32,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:20:32,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:32,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:32,372 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-12 06:20:32,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:32,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92132455] [2022-07-12 06:20:32,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92132455] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:20:32,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [881349215] [2022-07-12 06:20:32,372 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-12 06:20:32,372 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:20:32,373 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:32,383 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:20:32,410 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 06:20:32,512 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-12 06:20:32,512 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-12 06:20:32,514 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-12 06:20:32,525 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:20:32,587 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-07-12 06:20:32,587 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:20:32,588 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [881349215] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:32,588 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:20:32,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-07-12 06:20:32,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568142554] [2022-07-12 06:20:32,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:32,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:20:32,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:32,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:20:32,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:20:32,589 INFO L87 Difference]: Start difference. First operand 557 states and 714 transitions. Second operand has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:20:32,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:32,844 INFO L93 Difference]: Finished difference Result 1473 states and 1967 transitions. [2022-07-12 06:20:32,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-12 06:20:32,845 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 150 [2022-07-12 06:20:32,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:32,849 INFO L225 Difference]: With dead ends: 1473 [2022-07-12 06:20:32,850 INFO L226 Difference]: Without dead ends: 995 [2022-07-12 06:20:32,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 177 SyntacticMatches, 4 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-07-12 06:20:32,852 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 246 mSDsluCounter, 478 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:32,852 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 684 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:32,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2022-07-12 06:20:32,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 972. [2022-07-12 06:20:32,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 972 states, 744 states have (on average 1.2231182795698925) internal successors, (910), 792 states have internal predecessors, (910), 111 states have call successors, (111), 100 states have call predecessors, (111), 116 states have return successors, (207), 113 states have call predecessors, (207), 111 states have call successors, (207) [2022-07-12 06:20:32,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 972 states to 972 states and 1228 transitions. [2022-07-12 06:20:32,891 INFO L78 Accepts]: Start accepts. Automaton has 972 states and 1228 transitions. Word has length 150 [2022-07-12 06:20:32,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:32,891 INFO L495 AbstractCegarLoop]: Abstraction has 972 states and 1228 transitions. [2022-07-12 06:20:32,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:20:32,892 INFO L276 IsEmpty]: Start isEmpty. Operand 972 states and 1228 transitions. [2022-07-12 06:20:32,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-12 06:20:32,896 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:32,896 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:32,917 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 06:20:33,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-12 06:20:33,111 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:33,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:33,112 INFO L85 PathProgramCache]: Analyzing trace with hash 1699537066, now seen corresponding path program 1 times [2022-07-12 06:20:33,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:33,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117848954] [2022-07-12 06:20:33,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:33,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:33,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-12 06:20:33,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:20:33,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:20:33,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:33,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:33,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-12 06:20:33,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-12 06:20:33,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:20:33,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:20:33,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:33,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-12 06:20:33,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-12 06:20:33,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:20:33,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:33,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,176 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-12 06:20:33,176 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:33,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117848954] [2022-07-12 06:20:33,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117848954] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:20:33,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1514520856] [2022-07-12 06:20:33,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:33,176 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:20:33,176 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:33,177 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:20:33,178 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-12 06:20:33,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:33,259 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-12 06:20:33,274 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:20:33,284 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-07-12 06:20:33,284 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:20:33,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1514520856] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:33,284 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:20:33,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-07-12 06:20:33,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234662917] [2022-07-12 06:20:33,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:33,284 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:33,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:33,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:33,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:20:33,285 INFO L87 Difference]: Start difference. First operand 972 states and 1228 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 06:20:33,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:33,322 INFO L93 Difference]: Finished difference Result 1348 states and 1689 transitions. [2022-07-12 06:20:33,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:20:33,322 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-07-12 06:20:33,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:33,323 INFO L225 Difference]: With dead ends: 1348 [2022-07-12 06:20:33,323 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:20:33,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:20:33,330 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 9 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:33,330 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 443 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:33,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:20:33,331 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:20:33,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:20:33,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:20:33,331 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-07-12 06:20:33,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:33,331 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:20:33,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 06:20:33,331 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:20:33,331 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:20:33,333 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:20:33,367 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-07-12 06:20:33,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:20:33,565 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:20:35,264 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 406 413) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,264 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 406 413) no Hoare annotation was computed. [2022-07-12 06:20:35,264 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 406 413) no Hoare annotation was computed. [2022-07-12 06:20:35,264 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 296 302) no Hoare annotation was computed. [2022-07-12 06:20:35,264 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 296 302) the Hoare annotation is: true [2022-07-12 06:20:35,264 INFO L899 garLoopResultBuilder]: For program point L928-1(lines 924 935) no Hoare annotation was computed. [2022-07-12 06:20:35,264 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 924 935) the Hoare annotation is: true [2022-07-12 06:20:35,264 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 924 935) no Hoare annotation was computed. [2022-07-12 06:20:35,264 INFO L895 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L283-1(lines 283 289) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L370(line 370) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 976) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= 0 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4) (not .cse5) .cse6) (or (and (<= 2 ~waterLevel~0) .cse7) (and .cse2 (<= 1 ~waterLevel~0) .cse3) .cse5 .cse6) (or .cse0 .cse5 (and .cse4 .cse7) .cse6) (or .cse0 .cse1 (= |timeShift_getWaterLevel_#res#1| 1)))) [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 272 295) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2) (or .cse0 .cse2 (not .cse3)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L375-1(lines 356 380) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 (and .cse4 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse4 .cse5) .cse1 (and .cse3 .cse5))))) [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L276-1(lines 275 294) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 186) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L173-1(lines 165 189) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse8 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4 .cse5) (not (<= 1 |old(~waterLevel~0)|)) (not .cse6)) (or .cse0 (and .cse7 .cse5 .cse8) .cse6 .cse9) (or (and .cse2 .cse3 (<= 1 ~waterLevel~0) .cse4) .cse6 (and .cse7 (<= 2 ~waterLevel~0) .cse8) .cse9))) [2022-07-12 06:20:35,265 INFO L899 garLoopResultBuilder]: For program point L904(lines 904 908) no Hoare annotation was computed. [2022-07-12 06:20:35,265 INFO L895 garLoopResultBuilder]: At program point L904-2(lines 900 911) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,266 INFO L895 garLoopResultBuilder]: At program point L430(lines 425 433) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-12 06:20:35,266 INFO L899 garLoopResultBuilder]: For program point L364(lines 364 372) no Hoare annotation was computed. [2022-07-12 06:20:35,266 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 377) no Hoare annotation was computed. [2022-07-12 06:20:35,266 INFO L899 garLoopResultBuilder]: For program point L158(line 158) no Hoare annotation was computed. [2022-07-12 06:20:35,266 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 272 295) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (= 0 ~systemActive~0) .cse3))) [2022-07-12 06:20:35,266 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 272 295) no Hoare annotation was computed. [2022-07-12 06:20:35,266 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2022-07-12 06:20:35,266 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-12 06:20:35,267 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-12 06:20:35,267 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L1031(lines 1026 1034) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L1023(lines 1019 1025) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L528(lines 523 530) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-07-12 06:20:35,267 INFO L895 garLoopResultBuilder]: At program point L520(lines 508 522) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,267 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L512(lines 512 518) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L902 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L512-1(lines 512 518) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L1016(lines 1012 1018) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-12 06:20:35,268 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L514(line 514) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 304 328) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 483) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L895 garLoopResultBuilder]: At program point L318(line 318) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) (not (<= 1 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse1))) [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L479-2(lines 479 483) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L312(lines 312 320) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L981(lines 981 987) no Hoare annotation was computed. [2022-07-12 06:20:35,268 INFO L899 garLoopResultBuilder]: For program point L308(lines 308 325) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L323-1(lines 304 328) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 304 328) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L986(lines 977 990) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L396(lines 396 402) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (not (<= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L396-2(lines 389 405) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L394-1(line 394) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L485(lines 470 488) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2))) [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L386(lines 381 388) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 912 923) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 912 923) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L916-1(lines 912 923) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L349-1(lines 330 354) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L504(lines 489 507) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L498(lines 498 502) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L498-2(lines 498 502) no Hoare annotation was computed. [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L996(lines 991 999) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L344(line 344) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,269 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~4#1|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-12 06:20:35,269 INFO L899 garLoopResultBuilder]: For program point L338(lines 338 346) no Hoare annotation was computed. [2022-07-12 06:20:35,270 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 330 354) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-12 06:20:35,270 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 351) no Hoare annotation was computed. [2022-07-12 06:20:35,270 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 330 354) no Hoare annotation was computed. [2022-07-12 06:20:35,270 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 414 424) the Hoare annotation is: true [2022-07-12 06:20:35,270 INFO L902 garLoopResultBuilder]: At program point L941(lines 936 944) the Hoare annotation is: true [2022-07-12 06:20:35,270 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 414 424) no Hoare annotation was computed. [2022-07-12 06:20:35,270 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 414 424) no Hoare annotation was computed. [2022-07-12 06:20:35,272 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:35,274 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:20:35,292 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:20:35 BoogieIcfgContainer [2022-07-12 06:20:35,292 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:20:35,293 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:20:35,293 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:20:35,293 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:20:35,293 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:27" (3/4) ... [2022-07-12 06:20:35,295 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:20:35,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-12 06:20:35,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:20:35,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:20:35,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-12 06:20:35,305 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-07-12 06:20:35,306 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:20:35,306 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:20:35,306 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:20:35,307 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:20:35,307 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:20:35,308 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:20:35,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:20:35,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:20:35,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-12 06:20:35,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-12 06:20:35,324 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-07-12 06:20:35,324 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-07-12 06:20:35,324 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-07-12 06:20:35,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive [2022-07-12 06:20:35,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) [2022-07-12 06:20:35,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-12 06:20:35,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-12 06:20:35,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-07-12 06:20:35,326 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-07-12 06:20:35,326 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-12 06:20:35,326 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-12 06:20:35,326 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-12 06:20:35,326 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) [2022-07-12 06:20:35,340 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:20:35,340 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:20:35,341 INFO L158 Benchmark]: Toolchain (without parser) took 8441.07ms. Allocated memory was 107.0MB in the beginning and 169.9MB in the end (delta: 62.9MB). Free memory was 72.4MB in the beginning and 95.4MB in the end (delta: -23.0MB). Peak memory consumption was 40.9MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,341 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 48.4MB in the beginning and 48.3MB in the end (delta: 30.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:20:35,341 INFO L158 Benchmark]: CACSL2BoogieTranslator took 425.43ms. Allocated memory is still 107.0MB. Free memory was 72.1MB in the beginning and 73.7MB in the end (delta: -1.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,341 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.41ms. Allocated memory is still 107.0MB. Free memory was 73.7MB in the beginning and 71.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,342 INFO L158 Benchmark]: Boogie Preprocessor took 22.98ms. Allocated memory is still 107.0MB. Free memory was 71.1MB in the beginning and 69.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,342 INFO L158 Benchmark]: RCFGBuilder took 416.94ms. Allocated memory is still 107.0MB. Free memory was 69.4MB in the beginning and 50.0MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,342 INFO L158 Benchmark]: TraceAbstraction took 7474.20ms. Allocated memory was 107.0MB in the beginning and 169.9MB in the end (delta: 62.9MB). Free memory was 49.6MB in the beginning and 101.7MB in the end (delta: -52.1MB). Peak memory consumption was 71.4MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,342 INFO L158 Benchmark]: Witness Printer took 47.65ms. Allocated memory is still 169.9MB. Free memory was 101.7MB in the beginning and 95.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 06:20:35,343 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 48.4MB in the beginning and 48.3MB in the end (delta: 30.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 425.43ms. Allocated memory is still 107.0MB. Free memory was 72.1MB in the beginning and 73.7MB in the end (delta: -1.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.41ms. Allocated memory is still 107.0MB. Free memory was 73.7MB in the beginning and 71.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.98ms. Allocated memory is still 107.0MB. Free memory was 71.1MB in the beginning and 69.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 416.94ms. Allocated memory is still 107.0MB. Free memory was 69.4MB in the beginning and 50.0MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 7474.20ms. Allocated memory was 107.0MB in the beginning and 169.9MB in the end (delta: 62.9MB). Free memory was 49.6MB in the beginning and 101.7MB in the end (delta: -52.1MB). Peak memory consumption was 71.4MB. Max. memory is 16.1GB. * Witness Printer took 47.65ms. Allocated memory is still 169.9MB. Free memory was 101.7MB in the beginning and 95.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.4s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1772 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1745 mSDsluCounter, 4778 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3206 mSDsCounter, 502 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2386 IncrementalHoareTripleChecker+Invalid, 2888 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 502 mSolverCounterUnsat, 1572 mSDtfsCounter, 2386 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 759 GetRequests, 634 SyntacticMatches, 11 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=972occurred in iteration=11, InterpolantAutomatonStates: 111, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 234 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1778 PreInvPairs, 1920 NumberOfFragments, 1138 HoareAnnotationTreeSize, 1778 FomulaSimplifications, 1977 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 51 FomulaSimplificationsInter, 7370 FormulaSimplificationTreeSizeReductionInter, 1.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 1131 NumberOfCodeBlocks, 1131 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1218 ConstructedInterpolants, 0 QuantifiedInterpolants, 2110 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1702 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 449/507 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1012]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1026]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 900]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 1019]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-12 06:20:35,374 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE