./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:25:32,919 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:25:32,944 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:25:32,963 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:25:32,964 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:25:32,965 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:25:32,965 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:25:32,967 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:25:32,968 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:25:32,968 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:25:32,969 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:25:32,972 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:25:32,972 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:25:32,973 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:25:32,973 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:25:32,974 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:25:32,975 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:25:32,975 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:25:32,977 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:25:32,978 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:25:32,979 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:25:32,979 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:25:32,980 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:25:32,981 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:25:32,981 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:25:32,983 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:25:32,984 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:25:32,984 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:25:32,984 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:25:32,985 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:25:32,985 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:25:32,986 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:25:32,986 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:25:32,987 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:25:32,987 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:25:32,988 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:25:32,988 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:25:32,988 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:25:32,989 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:25:32,989 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:25:32,990 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:25:32,990 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:25:32,991 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:25:33,005 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:25:33,005 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:25:33,005 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:25:33,005 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:25:33,006 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:25:33,006 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:25:33,007 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:25:33,007 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:25:33,007 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:25:33,007 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:25:33,007 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:25:33,007 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:25:33,008 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:25:33,009 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:25:33,009 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:25:33,009 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:25:33,009 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:25:33,009 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:25:33,009 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:25:33,010 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 [2022-07-19 17:25:33,152 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:25:33,165 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:25:33,166 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:25:33,167 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:25:33,168 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:25:33,169 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-07-19 17:25:33,205 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18c931ade/1796b25e086340aeb05131d80d1f053a/FLAG84162afd7 [2022-07-19 17:25:33,683 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:25:33,684 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-07-19 17:25:33,691 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18c931ade/1796b25e086340aeb05131d80d1f053a/FLAG84162afd7 [2022-07-19 17:25:34,018 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18c931ade/1796b25e086340aeb05131d80d1f053a [2022-07-19 17:25:34,020 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:25:34,021 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:25:34,022 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:25:34,022 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:25:34,024 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:25:34,025 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,025 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4bf2bd48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34, skipping insertion in model container [2022-07-19 17:25:34,025 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,030 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:25:34,068 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:25:34,226 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-07-19 17:25:34,278 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:25:34,284 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:25:34,295 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-07-19 17:25:34,326 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:25:34,338 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:25:34,338 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34 WrapperNode [2022-07-19 17:25:34,338 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:25:34,339 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:25:34,339 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:25:34,339 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:25:34,344 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,353 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,372 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 297 [2022-07-19 17:25:34,372 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:25:34,373 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:25:34,373 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:25:34,373 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:25:34,378 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,379 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,381 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,381 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,384 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,387 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,388 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,390 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:25:34,390 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:25:34,390 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:25:34,391 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:25:34,391 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (1/1) ... [2022-07-19 17:25:34,404 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:25:34,413 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:34,423 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:25:34,436 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:25:34,450 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:25:34,451 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:25:34,451 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:25:34,451 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:25:34,451 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:25:34,451 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:25:34,451 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:25:34,451 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:25:34,452 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:25:34,452 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:25:34,452 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:25:34,452 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:25:34,452 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:25:34,452 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-19 17:25:34,452 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-19 17:25:34,453 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-19 17:25:34,453 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-19 17:25:34,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:25:34,454 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:25:34,454 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:25:34,454 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:25:34,455 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:25:34,527 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:25:34,529 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:25:34,767 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:25:34,772 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:25:34,773 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:25:34,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:34 BoogieIcfgContainer [2022-07-19 17:25:34,775 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:25:34,776 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:25:34,776 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:25:34,778 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:25:34,779 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:25:34" (1/3) ... [2022-07-19 17:25:34,779 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ff3edff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:25:34, skipping insertion in model container [2022-07-19 17:25:34,780 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:34" (2/3) ... [2022-07-19 17:25:34,780 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ff3edff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:25:34, skipping insertion in model container [2022-07-19 17:25:34,780 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:34" (3/3) ... [2022-07-19 17:25:34,781 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product64.cil.c [2022-07-19 17:25:34,791 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:25:34,792 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:25:34,848 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:25:34,854 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@790f2a5e, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@cda1a7d [2022-07-19 17:25:34,855 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:25:34,863 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-19 17:25:34,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-19 17:25:34,872 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:34,872 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:34,873 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:34,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:34,878 INFO L85 PathProgramCache]: Analyzing trace with hash -1842892420, now seen corresponding path program 1 times [2022-07-19 17:25:34,884 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:34,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51495828] [2022-07-19 17:25:34,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:34,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,096 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,097 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51495828] [2022-07-19 17:25:35,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51495828] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,097 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,097 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:25:35,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139294112] [2022-07-19 17:25:35,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,103 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:25:35,104 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:25:35,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:25:35,124 INFO L87 Difference]: Start difference. First operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,154 INFO L93 Difference]: Finished difference Result 208 states and 283 transitions. [2022-07-19 17:25:35,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:25:35,156 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-07-19 17:25:35,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,166 INFO L225 Difference]: With dead ends: 208 [2022-07-19 17:25:35,166 INFO L226 Difference]: Without dead ends: 99 [2022-07-19 17:25:35,169 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:25:35,174 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:35,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-07-19 17:25:35,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2022-07-19 17:25:35,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 83 states have internal predecessors, (96), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-19 17:25:35,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 129 transitions. [2022-07-19 17:25:35,231 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 129 transitions. Word has length 19 [2022-07-19 17:25:35,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:35,231 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 129 transitions. [2022-07-19 17:25:35,232 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,232 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 129 transitions. [2022-07-19 17:25:35,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-07-19 17:25:35,233 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:35,233 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:35,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:25:35,233 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:35,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:35,234 INFO L85 PathProgramCache]: Analyzing trace with hash 750568636, now seen corresponding path program 1 times [2022-07-19 17:25:35,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:35,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877708963] [2022-07-19 17:25:35,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:35,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,286 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877708963] [2022-07-19 17:25:35,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1877708963] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,288 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:25:35,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1424131164] [2022-07-19 17:25:35,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,289 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:25:35,289 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:25:35,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:35,291 INFO L87 Difference]: Start difference. First operand 99 states and 129 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,311 INFO L93 Difference]: Finished difference Result 159 states and 207 transitions. [2022-07-19 17:25:35,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:25:35,314 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-07-19 17:25:35,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,315 INFO L225 Difference]: With dead ends: 159 [2022-07-19 17:25:35,316 INFO L226 Difference]: Without dead ends: 90 [2022-07-19 17:25:35,316 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:35,317 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 17 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 210 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:35,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-19 17:25:35,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-19 17:25:35,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-19 17:25:35,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 117 transitions. [2022-07-19 17:25:35,324 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 117 transitions. Word has length 20 [2022-07-19 17:25:35,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:35,324 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 117 transitions. [2022-07-19 17:25:35,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,324 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 117 transitions. [2022-07-19 17:25:35,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-19 17:25:35,325 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:35,325 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:35,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:25:35,325 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:35,325 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:35,326 INFO L85 PathProgramCache]: Analyzing trace with hash 1483068035, now seen corresponding path program 1 times [2022-07-19 17:25:35,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:35,326 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2147466266] [2022-07-19 17:25:35,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:35,326 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,377 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2147466266] [2022-07-19 17:25:35,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2147466266] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:25:35,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368911086] [2022-07-19 17:25:35,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:35,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:35,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:25:35,378 INFO L87 Difference]: Start difference. First operand 90 states and 117 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,436 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-07-19 17:25:35,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-19 17:25:35,437 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-07-19 17:25:35,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,438 INFO L225 Difference]: With dead ends: 211 [2022-07-19 17:25:35,438 INFO L226 Difference]: Without dead ends: 128 [2022-07-19 17:25:35,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:25:35,440 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 180 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 371 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:35,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-07-19 17:25:35,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-07-19 17:25:35,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.351063829787234) internal successors, (127), 107 states have internal predecessors, (127), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2022-07-19 17:25:35,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 164 transitions. [2022-07-19 17:25:35,450 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 164 transitions. Word has length 25 [2022-07-19 17:25:35,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:35,450 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 164 transitions. [2022-07-19 17:25:35,450 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,450 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 164 transitions. [2022-07-19 17:25:35,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-19 17:25:35,451 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:35,451 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:35,451 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:25:35,451 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:35,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:35,452 INFO L85 PathProgramCache]: Analyzing trace with hash 417349686, now seen corresponding path program 1 times [2022-07-19 17:25:35,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:35,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740441609] [2022-07-19 17:25:35,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:35,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,496 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740441609] [2022-07-19 17:25:35,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740441609] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,497 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-19 17:25:35,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663391964] [2022-07-19 17:25:35,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:35,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:35,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:25:35,499 INFO L87 Difference]: Start difference. First operand 125 states and 164 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,540 INFO L93 Difference]: Finished difference Result 349 states and 479 transitions. [2022-07-19 17:25:35,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:25:35,541 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-07-19 17:25:35,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,543 INFO L225 Difference]: With dead ends: 349 [2022-07-19 17:25:35,543 INFO L226 Difference]: Without dead ends: 231 [2022-07-19 17:25:35,544 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:35,545 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 88 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,545 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 476 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:35,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-07-19 17:25:35,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231. [2022-07-19 17:25:35,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 172 states have (on average 1.3313953488372092) internal successors, (229), 195 states have internal predecessors, (229), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (41), 22 states have call predecessors, (41), 36 states have call successors, (41) [2022-07-19 17:25:35,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 306 transitions. [2022-07-19 17:25:35,582 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 306 transitions. Word has length 28 [2022-07-19 17:25:35,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:35,583 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 306 transitions. [2022-07-19 17:25:35,583 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,583 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 306 transitions. [2022-07-19 17:25:35,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-19 17:25:35,585 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:35,585 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:35,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:25:35,585 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:35,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:35,585 INFO L85 PathProgramCache]: Analyzing trace with hash -1384596677, now seen corresponding path program 1 times [2022-07-19 17:25:35,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:35,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448188615] [2022-07-19 17:25:35,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:35,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448188615] [2022-07-19 17:25:35,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448188615] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,617 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:25:35,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823883044] [2022-07-19 17:25:35,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:25:35,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:25:35,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:35,619 INFO L87 Difference]: Start difference. First operand 231 states and 306 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,646 INFO L93 Difference]: Finished difference Result 511 states and 692 transitions. [2022-07-19 17:25:35,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:25:35,646 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-07-19 17:25:35,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,648 INFO L225 Difference]: With dead ends: 511 [2022-07-19 17:25:35,648 INFO L226 Difference]: Without dead ends: 287 [2022-07-19 17:25:35,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:35,650 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 68 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,650 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 190 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:35,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2022-07-19 17:25:35,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 283. [2022-07-19 17:25:35,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 217 states have (on average 1.271889400921659) internal successors, (276), 234 states have internal predecessors, (276), 34 states have call successors, (34), 32 states have call predecessors, (34), 31 states have return successors, (50), 31 states have call predecessors, (50), 34 states have call successors, (50) [2022-07-19 17:25:35,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 360 transitions. [2022-07-19 17:25:35,665 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 360 transitions. Word has length 30 [2022-07-19 17:25:35,665 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:35,665 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 360 transitions. [2022-07-19 17:25:35,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:35,666 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 360 transitions. [2022-07-19 17:25:35,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-19 17:25:35,667 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:35,667 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:35,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:25:35,667 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:35,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:35,667 INFO L85 PathProgramCache]: Analyzing trace with hash -263887204, now seen corresponding path program 1 times [2022-07-19 17:25:35,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:35,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662062470] [2022-07-19 17:25:35,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:35,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:35,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:35,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:35,733 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:35,734 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:35,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662062470] [2022-07-19 17:25:35,734 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662062470] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:35,734 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:35,734 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:25:35,734 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968589288] [2022-07-19 17:25:35,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:35,735 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:25:35,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:35,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:25:35,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:25:35,737 INFO L87 Difference]: Start difference. First operand 283 states and 360 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:25:35,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:35,988 INFO L93 Difference]: Finished difference Result 335 states and 428 transitions. [2022-07-19 17:25:35,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-19 17:25:35,989 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-19 17:25:35,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:35,990 INFO L225 Difference]: With dead ends: 335 [2022-07-19 17:25:35,991 INFO L226 Difference]: Without dead ends: 333 [2022-07-19 17:25:35,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:25:35,992 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 161 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:35,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 352 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:25:35,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-07-19 17:25:36,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 316. [2022-07-19 17:25:36,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 241 states have (on average 1.2572614107883817) internal successors, (303), 264 states have internal predecessors, (303), 38 states have call successors, (38), 32 states have call predecessors, (38), 36 states have return successors, (61), 34 states have call predecessors, (61), 38 states have call successors, (61) [2022-07-19 17:25:36,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 402 transitions. [2022-07-19 17:25:36,008 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 402 transitions. Word has length 32 [2022-07-19 17:25:36,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:36,008 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 402 transitions. [2022-07-19 17:25:36,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:25:36,009 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 402 transitions. [2022-07-19 17:25:36,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-19 17:25:36,011 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:36,011 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:36,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:25:36,011 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:36,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:36,011 INFO L85 PathProgramCache]: Analyzing trace with hash 285414993, now seen corresponding path program 1 times [2022-07-19 17:25:36,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:36,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1274989006] [2022-07-19 17:25:36,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:36,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:36,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:36,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-19 17:25:36,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:36,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:36,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:36,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:36,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1274989006] [2022-07-19 17:25:36,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1274989006] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:36,092 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:36,092 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-19 17:25:36,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207006112] [2022-07-19 17:25:36,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:36,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:25:36,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:36,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:25:36,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:25:36,093 INFO L87 Difference]: Start difference. First operand 316 states and 402 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:36,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:36,420 INFO L93 Difference]: Finished difference Result 693 states and 906 transitions. [2022-07-19 17:25:36,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:25:36,421 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2022-07-19 17:25:36,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:36,423 INFO L225 Difference]: With dead ends: 693 [2022-07-19 17:25:36,423 INFO L226 Difference]: Without dead ends: 384 [2022-07-19 17:25:36,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:25:36,424 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 208 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 515 SdHoareTripleChecker+Invalid, 505 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:36,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 515 Invalid, 505 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 439 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:25:36,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-07-19 17:25:36,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 346. [2022-07-19 17:25:36,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 266 states have (on average 1.236842105263158) internal successors, (329), 289 states have internal predecessors, (329), 38 states have call successors, (38), 32 states have call predecessors, (38), 41 states have return successors, (64), 38 states have call predecessors, (64), 38 states have call successors, (64) [2022-07-19 17:25:36,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 431 transitions. [2022-07-19 17:25:36,439 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 431 transitions. Word has length 59 [2022-07-19 17:25:36,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:36,439 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 431 transitions. [2022-07-19 17:25:36,439 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:36,439 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 431 transitions. [2022-07-19 17:25:36,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:25:36,441 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:36,441 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:36,441 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:25:36,441 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:36,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:36,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1185571886, now seen corresponding path program 1 times [2022-07-19 17:25:36,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:36,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430876908] [2022-07-19 17:25:36,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:36,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:36,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:36,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:25:36,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:36,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:36,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,538 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:36,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:36,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430876908] [2022-07-19 17:25:36,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430876908] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:36,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:36,539 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-19 17:25:36,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357791336] [2022-07-19 17:25:36,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:36,540 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:25:36,540 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:36,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:25:36,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:25:36,541 INFO L87 Difference]: Start difference. First operand 346 states and 431 transitions. Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:36,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:36,836 INFO L93 Difference]: Finished difference Result 672 states and 857 transitions. [2022-07-19 17:25:36,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-19 17:25:36,836 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-19 17:25:36,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:36,838 INFO L225 Difference]: With dead ends: 672 [2022-07-19 17:25:36,838 INFO L226 Difference]: Without dead ends: 333 [2022-07-19 17:25:36,839 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-07-19 17:25:36,839 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 224 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 384 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 384 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:36,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 311 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 384 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:25:36,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-07-19 17:25:36,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 279. [2022-07-19 17:25:36,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 214 states have (on average 1.233644859813084) internal successors, (264), 232 states have internal predecessors, (264), 32 states have call successors, (32), 27 states have call predecessors, (32), 32 states have return successors, (49), 30 states have call predecessors, (49), 32 states have call successors, (49) [2022-07-19 17:25:36,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 345 transitions. [2022-07-19 17:25:36,851 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 345 transitions. Word has length 56 [2022-07-19 17:25:36,852 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:36,852 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 345 transitions. [2022-07-19 17:25:36,852 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:36,852 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 345 transitions. [2022-07-19 17:25:36,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:25:36,853 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:36,853 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:36,853 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:25:36,853 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:36,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:36,854 INFO L85 PathProgramCache]: Analyzing trace with hash 1247611500, now seen corresponding path program 1 times [2022-07-19 17:25:36,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:36,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [200615831] [2022-07-19 17:25:36,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:36,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:36,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:36,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:25:36,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:36,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:36,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:36,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:36,953 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:36,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [200615831] [2022-07-19 17:25:36,953 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [200615831] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:36,953 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:36,953 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:25:36,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1757002473] [2022-07-19 17:25:36,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:36,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:25:36,954 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:36,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:25:36,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:36,954 INFO L87 Difference]: Start difference. First operand 279 states and 345 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:37,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:37,461 INFO L93 Difference]: Finished difference Result 617 states and 805 transitions. [2022-07-19 17:25:37,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-19 17:25:37,461 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-19 17:25:37,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:37,463 INFO L225 Difference]: With dead ends: 617 [2022-07-19 17:25:37,464 INFO L226 Difference]: Without dead ends: 418 [2022-07-19 17:25:37,464 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 10 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-19 17:25:37,465 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 252 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 413 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 474 SdHoareTripleChecker+Invalid, 499 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 413 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:37,465 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 474 Invalid, 499 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 413 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:25:37,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2022-07-19 17:25:37,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 407. [2022-07-19 17:25:37,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 407 states, 314 states have (on average 1.21656050955414) internal successors, (382), 337 states have internal predecessors, (382), 46 states have call successors, (46), 40 states have call predecessors, (46), 46 states have return successors, (84), 47 states have call predecessors, (84), 46 states have call successors, (84) [2022-07-19 17:25:37,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 407 states to 407 states and 512 transitions. [2022-07-19 17:25:37,482 INFO L78 Accepts]: Start accepts. Automaton has 407 states and 512 transitions. Word has length 56 [2022-07-19 17:25:37,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:37,482 INFO L495 AbstractCegarLoop]: Abstraction has 407 states and 512 transitions. [2022-07-19 17:25:37,483 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:25:37,483 INFO L276 IsEmpty]: Start isEmpty. Operand 407 states and 512 transitions. [2022-07-19 17:25:37,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-07-19 17:25:37,484 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:37,484 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:37,484 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:25:37,484 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:37,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:37,485 INFO L85 PathProgramCache]: Analyzing trace with hash -1661930304, now seen corresponding path program 1 times [2022-07-19 17:25:37,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:37,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828119363] [2022-07-19 17:25:37,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:37,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:37,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:37,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:25:37,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:25:37,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:37,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:37,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-19 17:25:37,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-19 17:25:37,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:25:37,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:37,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,632 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-19 17:25:37,632 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:37,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828119363] [2022-07-19 17:25:37,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [828119363] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:25:37,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1810433532] [2022-07-19 17:25:37,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:37,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:25:37,632 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:37,647 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:25:37,648 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:25:37,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:37,732 INFO L263 TraceCheckSpWp]: Trace formula consists of 489 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-19 17:25:37,741 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:25:37,892 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:37,893 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:25:38,021 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-19 17:25:38,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1810433532] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:25:38,021 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:25:38,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-07-19 17:25:38,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1726282024] [2022-07-19 17:25:38,022 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:25:38,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-19 17:25:38,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:38,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-19 17:25:38,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-19 17:25:38,023 INFO L87 Difference]: Start difference. First operand 407 states and 512 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-19 17:25:38,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:38,621 INFO L93 Difference]: Finished difference Result 968 states and 1279 transitions. [2022-07-19 17:25:38,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-19 17:25:38,622 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 103 [2022-07-19 17:25:38,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:38,625 INFO L225 Difference]: With dead ends: 968 [2022-07-19 17:25:38,625 INFO L226 Difference]: Without dead ends: 641 [2022-07-19 17:25:38,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 226 SyntacticMatches, 5 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 201 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-07-19 17:25:38,628 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 292 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 805 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 127 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:38,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [300 Valid, 617 Invalid, 805 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [127 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-19 17:25:38,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 641 states. [2022-07-19 17:25:38,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 641 to 557. [2022-07-19 17:25:38,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 557 states, 425 states have (on average 1.223529411764706) internal successors, (520), 458 states have internal predecessors, (520), 66 states have call successors, (66), 57 states have call predecessors, (66), 65 states have return successors, (128), 63 states have call predecessors, (128), 66 states have call successors, (128) [2022-07-19 17:25:38,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 557 states to 557 states and 714 transitions. [2022-07-19 17:25:38,651 INFO L78 Accepts]: Start accepts. Automaton has 557 states and 714 transitions. Word has length 103 [2022-07-19 17:25:38,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:38,651 INFO L495 AbstractCegarLoop]: Abstraction has 557 states and 714 transitions. [2022-07-19 17:25:38,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-19 17:25:38,651 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 714 transitions. [2022-07-19 17:25:38,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-19 17:25:38,653 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:38,653 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:38,677 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:25:38,872 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:25:38,872 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:38,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:38,872 INFO L85 PathProgramCache]: Analyzing trace with hash 745596908, now seen corresponding path program 2 times [2022-07-19 17:25:38,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:38,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1918016550] [2022-07-19 17:25:38,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:38,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:38,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:38,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:25:38,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:25:38,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:38,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:38,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:38,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:25:38,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-19 17:25:39,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:25:39,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:25:39,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:39,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-19 17:25:39,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-19 17:25:39,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:25:39,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:39,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,125 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-19 17:25:39,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:39,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1918016550] [2022-07-19 17:25:39,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1918016550] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:25:39,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [805064768] [2022-07-19 17:25:39,125 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-19 17:25:39,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:25:39,126 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:39,128 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:25:39,130 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:25:39,215 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-19 17:25:39,216 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-19 17:25:39,218 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-19 17:25:39,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:25:39,290 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-07-19 17:25:39,290 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:25:39,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [805064768] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:39,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:25:39,291 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-07-19 17:25:39,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275715050] [2022-07-19 17:25:39,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:39,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:25:39,291 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:39,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:25:39,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:25:39,292 INFO L87 Difference]: Start difference. First operand 557 states and 714 transitions. Second operand has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-19 17:25:39,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:39,538 INFO L93 Difference]: Finished difference Result 1473 states and 1967 transitions. [2022-07-19 17:25:39,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-19 17:25:39,539 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 150 [2022-07-19 17:25:39,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:39,543 INFO L225 Difference]: With dead ends: 1473 [2022-07-19 17:25:39,543 INFO L226 Difference]: Without dead ends: 995 [2022-07-19 17:25:39,545 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 177 SyntacticMatches, 4 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-07-19 17:25:39,545 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 246 mSDsluCounter, 478 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:39,546 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 684 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:25:39,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2022-07-19 17:25:39,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 972. [2022-07-19 17:25:39,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 972 states, 744 states have (on average 1.2231182795698925) internal successors, (910), 792 states have internal predecessors, (910), 111 states have call successors, (111), 100 states have call predecessors, (111), 116 states have return successors, (207), 113 states have call predecessors, (207), 111 states have call successors, (207) [2022-07-19 17:25:39,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 972 states to 972 states and 1228 transitions. [2022-07-19 17:25:39,583 INFO L78 Accepts]: Start accepts. Automaton has 972 states and 1228 transitions. Word has length 150 [2022-07-19 17:25:39,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:39,583 INFO L495 AbstractCegarLoop]: Abstraction has 972 states and 1228 transitions. [2022-07-19 17:25:39,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-19 17:25:39,584 INFO L276 IsEmpty]: Start isEmpty. Operand 972 states and 1228 transitions. [2022-07-19 17:25:39,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-19 17:25:39,586 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:39,586 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:39,627 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:25:39,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-19 17:25:39,805 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:39,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:39,806 INFO L85 PathProgramCache]: Analyzing trace with hash 1699537066, now seen corresponding path program 1 times [2022-07-19 17:25:39,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:39,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796188627] [2022-07-19 17:25:39,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:39,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:39,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:25:39,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:25:39,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:25:39,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:39,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:39,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:25:39,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-19 17:25:39,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:25:39,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:25:39,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:39,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-19 17:25:39,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-19 17:25:39,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:25:39,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:39,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:39,942 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-19 17:25:39,942 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:39,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796188627] [2022-07-19 17:25:39,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796188627] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:25:39,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2111864801] [2022-07-19 17:25:39,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:39,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:25:39,943 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:39,964 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:25:39,965 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-19 17:25:40,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:40,049 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-19 17:25:40,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:25:40,063 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-07-19 17:25:40,063 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:25:40,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2111864801] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:40,063 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:25:40,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-07-19 17:25:40,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [194607348] [2022-07-19 17:25:40,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:40,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:40,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:40,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:40,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:25:40,065 INFO L87 Difference]: Start difference. First operand 972 states and 1228 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-19 17:25:40,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:40,099 INFO L93 Difference]: Finished difference Result 1348 states and 1689 transitions. [2022-07-19 17:25:40,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:25:40,100 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-07-19 17:25:40,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:40,100 INFO L225 Difference]: With dead ends: 1348 [2022-07-19 17:25:40,100 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:25:40,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:25:40,103 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 9 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:40,103 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 443 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:40,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:25:40,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:25:40,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:25:40,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:25:40,104 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-07-19 17:25:40,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:40,104 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:25:40,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-19 17:25:40,104 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:25:40,104 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:25:40,106 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:25:40,161 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-19 17:25:40,323 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:25:40,325 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:25:42,165 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 406 413) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 406 413) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 406 413) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 296 302) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 296 302) the Hoare annotation is: true [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point L928-1(lines 924 935) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 924 935) the Hoare annotation is: true [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 924 935) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point L283-1(lines 283 289) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L370(line 370) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 976) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= 0 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4) (not .cse5) .cse6) (or (and (<= 2 ~waterLevel~0) .cse7) (and .cse2 (<= 1 ~waterLevel~0) .cse3) .cse5 .cse6) (or .cse0 .cse5 (and .cse4 .cse7) .cse6) (or .cse0 .cse1 (= |timeShift_getWaterLevel_#res#1| 1)))) [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 272 295) no Hoare annotation was computed. [2022-07-19 17:25:42,166 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2) (or .cse0 .cse2 (not .cse3)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-19 17:25:42,167 INFO L895 garLoopResultBuilder]: At program point L375-1(lines 356 380) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 (and .cse4 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse4 .cse5) .cse1 (and .cse3 .cse5))))) [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L276-1(lines 275 294) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 186) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L895 garLoopResultBuilder]: At program point L173-1(lines 165 189) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse8 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4 .cse5) (not (<= 1 |old(~waterLevel~0)|)) (not .cse6)) (or .cse0 (and .cse7 .cse5 .cse8) .cse6 .cse9) (or (and .cse2 .cse3 (<= 1 ~waterLevel~0) .cse4) .cse6 (and .cse7 (<= 2 ~waterLevel~0) .cse8) .cse9))) [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L904(lines 904 908) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L895 garLoopResultBuilder]: At program point L904-2(lines 900 911) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,167 INFO L895 garLoopResultBuilder]: At program point L430(lines 425 433) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L364(lines 364 372) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 377) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L158(line 158) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 272 295) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (= 0 ~systemActive~0) .cse3))) [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 272 295) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-19 17:25:42,167 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-19 17:25:42,167 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-19 17:25:42,167 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L1031(lines 1026 1034) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L1023(lines 1019 1025) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L528(lines 523 530) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L895 garLoopResultBuilder]: At program point L520(lines 508 522) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L512(lines 512 518) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L902 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L512-1(lines 512 518) no Hoare annotation was computed. [2022-07-19 17:25:42,168 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L1016(lines 1012 1018) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-19 17:25:42,169 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L514(line 514) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 304 328) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 483) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L318(line 318) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) (not (<= 1 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse1))) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L479-2(lines 479 483) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L312(lines 312 320) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L981(lines 981 987) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L308(lines 308 325) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L323-1(lines 304 328) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 304 328) no Hoare annotation was computed. [2022-07-19 17:25:42,169 INFO L895 garLoopResultBuilder]: At program point L986(lines 977 990) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-07-19 17:25:42,169 INFO L899 garLoopResultBuilder]: For program point L396(lines 396 402) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (not (<= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L396-2(lines 389 405) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L394-1(line 394) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L485(lines 470 488) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2))) [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L386(lines 381 388) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 912 923) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 912 923) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L916-1(lines 912 923) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L349-1(lines 330 354) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L504(lines 489 507) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L498(lines 498 502) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L498-2(lines 498 502) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L996(lines 991 999) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L344(line 344) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~4#1|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L338(lines 338 346) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 330 354) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 351) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 330 354) no Hoare annotation was computed. [2022-07-19 17:25:42,170 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 414 424) the Hoare annotation is: true [2022-07-19 17:25:42,170 INFO L902 garLoopResultBuilder]: At program point L941(lines 936 944) the Hoare annotation is: true [2022-07-19 17:25:42,171 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 414 424) no Hoare annotation was computed. [2022-07-19 17:25:42,171 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 414 424) no Hoare annotation was computed. [2022-07-19 17:25:42,173 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:42,174 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:25:42,192 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:25:42 BoogieIcfgContainer [2022-07-19 17:25:42,192 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:25:42,193 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:25:42,193 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:25:42,193 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:25:42,193 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:34" (3/4) ... [2022-07-19 17:25:42,196 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:25:42,200 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-19 17:25:42,200 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:25:42,200 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:25:42,200 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:25:42,201 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:25:42,201 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:25:42,201 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:25:42,201 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:25:42,201 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-19 17:25:42,206 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-07-19 17:25:42,207 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:25:42,211 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:25:42,211 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:25:42,211 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:25:42,212 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:25:42,212 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:25:42,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-19 17:25:42,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-19 17:25:42,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-19 17:25:42,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-19 17:25:42,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-07-19 17:25:42,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-07-19 17:25:42,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-07-19 17:25:42,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive [2022-07-19 17:25:42,230 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-19 17:25:42,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-19 17:25:42,232 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-19 17:25:42,232 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) [2022-07-19 17:25:42,262 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:25:42,262 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:25:42,263 INFO L158 Benchmark]: Toolchain (without parser) took 8241.90ms. Allocated memory was 100.7MB in the beginning and 272.6MB in the end (delta: 172.0MB). Free memory was 71.1MB in the beginning and 171.6MB in the end (delta: -100.4MB). Peak memory consumption was 72.1MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,263 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 100.7MB. Free memory was 57.8MB in the beginning and 57.7MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:25:42,263 INFO L158 Benchmark]: CACSL2BoogieTranslator took 316.73ms. Allocated memory was 100.7MB in the beginning and 153.1MB in the end (delta: 52.4MB). Free memory was 70.9MB in the beginning and 119.8MB in the end (delta: -48.9MB). Peak memory consumption was 12.1MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,263 INFO L158 Benchmark]: Boogie Procedure Inliner took 33.09ms. Allocated memory is still 153.1MB. Free memory was 119.8MB in the beginning and 117.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,264 INFO L158 Benchmark]: Boogie Preprocessor took 17.09ms. Allocated memory is still 153.1MB. Free memory was 117.3MB in the beginning and 115.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,264 INFO L158 Benchmark]: RCFGBuilder took 384.40ms. Allocated memory is still 153.1MB. Free memory was 115.6MB in the beginning and 97.9MB in the end (delta: 17.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,264 INFO L158 Benchmark]: TraceAbstraction took 7416.44ms. Allocated memory was 153.1MB in the beginning and 272.6MB in the end (delta: 119.5MB). Free memory was 97.3MB in the beginning and 177.9MB in the end (delta: -80.5MB). Peak memory consumption was 104.4MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,265 INFO L158 Benchmark]: Witness Printer took 69.71ms. Allocated memory is still 272.6MB. Free memory was 177.9MB in the beginning and 171.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:25:42,266 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 100.7MB. Free memory was 57.8MB in the beginning and 57.7MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 316.73ms. Allocated memory was 100.7MB in the beginning and 153.1MB in the end (delta: 52.4MB). Free memory was 70.9MB in the beginning and 119.8MB in the end (delta: -48.9MB). Peak memory consumption was 12.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 33.09ms. Allocated memory is still 153.1MB. Free memory was 119.8MB in the beginning and 117.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 17.09ms. Allocated memory is still 153.1MB. Free memory was 117.3MB in the beginning and 115.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 384.40ms. Allocated memory is still 153.1MB. Free memory was 115.6MB in the beginning and 97.9MB in the end (delta: 17.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 7416.44ms. Allocated memory was 153.1MB in the beginning and 272.6MB in the end (delta: 119.5MB). Free memory was 97.3MB in the beginning and 177.9MB in the end (delta: -80.5MB). Peak memory consumption was 104.4MB. Max. memory is 16.1GB. * Witness Printer took 69.71ms. Allocated memory is still 272.6MB. Free memory was 177.9MB in the beginning and 171.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 2.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1772 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1745 mSDsluCounter, 4781 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3206 mSDsCounter, 501 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2396 IncrementalHoareTripleChecker+Invalid, 2897 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 501 mSolverCounterUnsat, 1575 mSDtfsCounter, 2396 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 759 GetRequests, 634 SyntacticMatches, 11 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=972occurred in iteration=11, InterpolantAutomatonStates: 111, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 234 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1778 PreInvPairs, 1920 NumberOfFragments, 1138 HoareAnnotationTreeSize, 1778 FomulaSimplifications, 1977 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 51 FomulaSimplificationsInter, 7370 FormulaSimplificationTreeSizeReductionInter, 1.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 1131 NumberOfCodeBlocks, 1131 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1218 ConstructedInterpolants, 0 QuantifiedInterpolants, 2110 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1702 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 449/507 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1012]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1026]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 900]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 1019]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-19 17:25:42,319 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE