./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 750fa47004e8b71818a419cd0705c167dc764081be79a2bed3ff642b9979f0ab --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:59:18,073 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:59:18,074 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:59:18,094 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:59:18,094 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:59:18,095 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:59:18,096 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:59:18,097 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:59:18,098 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:59:18,099 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:59:18,100 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:59:18,100 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:59:18,101 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:59:18,101 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:59:18,102 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:59:18,103 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:59:18,104 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:59:18,104 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:59:18,106 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:59:18,107 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:59:18,108 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:59:18,109 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:59:18,110 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:59:18,111 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:59:18,111 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:59:18,113 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:59:18,113 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:59:18,114 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:59:18,114 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:59:18,115 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:59:18,115 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:59:18,116 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:59:18,116 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:59:18,117 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:59:18,117 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:59:18,118 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:59:18,118 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:59:18,119 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:59:18,119 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:59:18,119 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:59:18,120 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:59:18,121 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:59:18,122 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:59:18,135 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:59:18,136 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:59:18,136 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:59:18,136 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:59:18,137 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:59:18,137 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:59:18,137 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:59:18,137 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:59:18,138 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:59:18,138 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:59:18,139 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:59:18,139 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:18,140 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:59:18,140 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:59:18,141 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:59:18,141 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:59:18,141 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:59:18,141 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:59:18,141 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 750fa47004e8b71818a419cd0705c167dc764081be79a2bed3ff642b9979f0ab [2022-07-13 17:59:18,326 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:59:18,339 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:59:18,341 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:59:18,342 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:59:18,342 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:59:18,343 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c [2022-07-13 17:59:18,397 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0148d2d3d/f95a5f568c65443a8e0f90b97d78be36/FLAGc3f601ef0 [2022-07-13 17:59:18,779 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:59:18,779 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c [2022-07-13 17:59:18,787 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0148d2d3d/f95a5f568c65443a8e0f90b97d78be36/FLAGc3f601ef0 [2022-07-13 17:59:18,798 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0148d2d3d/f95a5f568c65443a8e0f90b97d78be36 [2022-07-13 17:59:18,800 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:59:18,801 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:59:18,802 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:18,802 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:59:18,804 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:59:18,805 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:18" (1/1) ... [2022-07-13 17:59:18,805 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@74f2050d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:18, skipping insertion in model container [2022-07-13 17:59:18,806 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:18" (1/1) ... [2022-07-13 17:59:18,810 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:59:18,840 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:59:19,067 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c[16171,16184] [2022-07-13 17:59:19,077 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:19,084 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:59:19,134 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product34.cil.c[16171,16184] [2022-07-13 17:59:19,138 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:19,149 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:59:19,150 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19 WrapperNode [2022-07-13 17:59:19,150 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:19,151 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:19,151 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:59:19,151 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:59:19,156 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,172 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,201 INFO L137 Inliner]: procedures = 53, calls = 151, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 232 [2022-07-13 17:59:19,201 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:19,202 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:59:19,202 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:59:19,202 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:59:19,208 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,208 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,219 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,220 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,228 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,231 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,232 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,233 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:59:19,234 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:59:19,234 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:59:19,234 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:59:19,235 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (1/1) ... [2022-07-13 17:59:19,239 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:19,246 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:19,261 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:59:19,269 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:59:19,291 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:59:19,291 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:59:19,291 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:59:19,291 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:59:19,291 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:59:19,291 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:59:19,291 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:59:19,292 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:59:19,292 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:59:19,292 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:59:19,292 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:59:19,292 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:59:19,292 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:59:19,292 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:59:19,293 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:59:19,293 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:59:19,360 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:59:19,361 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:59:19,562 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:59:19,566 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:59:19,566 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:59:19,568 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:19 BoogieIcfgContainer [2022-07-13 17:59:19,568 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:59:19,569 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:59:19,569 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:59:19,571 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:59:19,572 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:59:18" (1/3) ... [2022-07-13 17:59:19,572 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6f17acd1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:19, skipping insertion in model container [2022-07-13 17:59:19,572 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:19" (2/3) ... [2022-07-13 17:59:19,572 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6f17acd1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:19, skipping insertion in model container [2022-07-13 17:59:19,573 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:19" (3/3) ... [2022-07-13 17:59:19,573 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product34.cil.c [2022-07-13 17:59:19,582 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:59:19,582 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:59:19,610 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:59:19,614 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@756fca04, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7e08ec4c [2022-07-13 17:59:19,614 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:59:19,616 INFO L276 IsEmpty]: Start isEmpty. Operand has 77 states, 60 states have (on average 1.4) internal successors, (84), 66 states have internal predecessors, (84), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-13 17:59:19,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-13 17:59:19,621 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:19,622 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:19,622 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:19,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:19,625 INFO L85 PathProgramCache]: Analyzing trace with hash 77119383, now seen corresponding path program 1 times [2022-07-13 17:59:19,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:19,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [369245294] [2022-07-13 17:59:19,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:19,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:19,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:19,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:59:19,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:19,780 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:19,781 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:19,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [369245294] [2022-07-13 17:59:19,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [369245294] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:19,782 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:19,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:59:19,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266994803] [2022-07-13 17:59:19,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:19,786 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:59:19,786 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:19,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:59:19,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:19,804 INFO L87 Difference]: Start difference. First operand has 77 states, 60 states have (on average 1.4) internal successors, (84), 66 states have internal predecessors, (84), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:19,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:19,823 INFO L93 Difference]: Finished difference Result 146 states and 199 transitions. [2022-07-13 17:59:19,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:59:19,825 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-13 17:59:19,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:19,831 INFO L225 Difference]: With dead ends: 146 [2022-07-13 17:59:19,831 INFO L226 Difference]: Without dead ends: 68 [2022-07-13 17:59:19,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:19,836 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:19,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:19,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-07-13 17:59:19,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2022-07-13 17:59:19,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 53 states have (on average 1.320754716981132) internal successors, (70), 58 states have internal predecessors, (70), 9 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) [2022-07-13 17:59:19,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 87 transitions. [2022-07-13 17:59:19,878 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 87 transitions. Word has length 25 [2022-07-13 17:59:19,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:19,878 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 87 transitions. [2022-07-13 17:59:19,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:19,880 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 87 transitions. [2022-07-13 17:59:19,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-13 17:59:19,883 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:19,883 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:19,884 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:59:19,884 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:19,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:19,885 INFO L85 PathProgramCache]: Analyzing trace with hash -736072085, now seen corresponding path program 1 times [2022-07-13 17:59:19,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:19,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [427340119] [2022-07-13 17:59:19,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:19,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:19,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:19,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:59:19,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:19,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:19,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:19,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [427340119] [2022-07-13 17:59:19,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [427340119] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:19,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:19,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:59:19,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900201803] [2022-07-13 17:59:19,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:19,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:59:19,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:19,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:59:19,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:19,980 INFO L87 Difference]: Start difference. First operand 68 states and 87 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:19,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:19,990 INFO L93 Difference]: Finished difference Result 101 states and 129 transitions. [2022-07-13 17:59:19,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:59:19,991 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-13 17:59:19,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:19,992 INFO L225 Difference]: With dead ends: 101 [2022-07-13 17:59:19,993 INFO L226 Difference]: Without dead ends: 59 [2022-07-13 17:59:19,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:19,996 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 13 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:19,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 131 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:19,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-07-13 17:59:20,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-07-13 17:59:20,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 47 states have (on average 1.3404255319148937) internal successors, (63), 52 states have internal predecessors, (63), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2022-07-13 17:59:20,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 75 transitions. [2022-07-13 17:59:20,004 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 75 transitions. Word has length 26 [2022-07-13 17:59:20,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,005 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 75 transitions. [2022-07-13 17:59:20,005 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,005 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 75 transitions. [2022-07-13 17:59:20,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-13 17:59:20,007 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,007 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,007 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:59:20,007 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,008 INFO L85 PathProgramCache]: Analyzing trace with hash 1036891216, now seen corresponding path program 1 times [2022-07-13 17:59:20,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923202221] [2022-07-13 17:59:20,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:20,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923202221] [2022-07-13 17:59:20,085 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923202221] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,085 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,085 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:20,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85127349] [2022-07-13 17:59:20,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:20,086 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:20,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:20,087 INFO L87 Difference]: Start difference. First operand 59 states and 75 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,141 INFO L93 Difference]: Finished difference Result 111 states and 144 transitions. [2022-07-13 17:59:20,141 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:59:20,141 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-13 17:59:20,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,142 INFO L225 Difference]: With dead ends: 111 [2022-07-13 17:59:20,142 INFO L226 Difference]: Without dead ends: 59 [2022-07-13 17:59:20,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:20,143 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 100 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,144 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 172 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-07-13 17:59:20,148 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-07-13 17:59:20,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 47 states have (on average 1.3191489361702127) internal successors, (62), 52 states have internal predecessors, (62), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2022-07-13 17:59:20,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 74 transitions. [2022-07-13 17:59:20,149 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 74 transitions. Word has length 31 [2022-07-13 17:59:20,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,150 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 74 transitions. [2022-07-13 17:59:20,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,150 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 74 transitions. [2022-07-13 17:59:20,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-07-13 17:59:20,151 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,151 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,151 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:59:20,151 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,152 INFO L85 PathProgramCache]: Analyzing trace with hash -349370363, now seen corresponding path program 1 times [2022-07-13 17:59:20,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1844965065] [2022-07-13 17:59:20,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:20,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 17:59:20,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,187 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1844965065] [2022-07-13 17:59:20,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1844965065] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:59:20,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [206921105] [2022-07-13 17:59:20,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:59:20,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:59:20,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:20,190 INFO L87 Difference]: Start difference. First operand 59 states and 74 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:59:20,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,214 INFO L93 Difference]: Finished difference Result 152 states and 195 transitions. [2022-07-13 17:59:20,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:59:20,215 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-07-13 17:59:20,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,216 INFO L225 Difference]: With dead ends: 152 [2022-07-13 17:59:20,216 INFO L226 Difference]: Without dead ends: 100 [2022-07-13 17:59:20,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:20,218 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 47 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,218 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 146 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-07-13 17:59:20,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 98. [2022-07-13 17:59:20,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 83 states have internal predecessors, (101), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (12), 10 states have call predecessors, (12), 10 states have call successors, (12) [2022-07-13 17:59:20,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 123 transitions. [2022-07-13 17:59:20,235 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 123 transitions. Word has length 36 [2022-07-13 17:59:20,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,236 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 123 transitions. [2022-07-13 17:59:20,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:59:20,236 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 123 transitions. [2022-07-13 17:59:20,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-07-13 17:59:20,239 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,239 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:59:20,239 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,240 INFO L85 PathProgramCache]: Analyzing trace with hash 2107801392, now seen corresponding path program 1 times [2022-07-13 17:59:20,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1456788479] [2022-07-13 17:59:20,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-13 17:59:20,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,318 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1456788479] [2022-07-13 17:59:20,319 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1456788479] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,319 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,320 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:20,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25402533] [2022-07-13 17:59:20,323 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:20,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:20,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:20,326 INFO L87 Difference]: Start difference. First operand 98 states and 123 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,372 INFO L93 Difference]: Finished difference Result 209 states and 266 transitions. [2022-07-13 17:59:20,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-13 17:59:20,377 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2022-07-13 17:59:20,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,378 INFO L225 Difference]: With dead ends: 209 [2022-07-13 17:59:20,380 INFO L226 Difference]: Without dead ends: 118 [2022-07-13 17:59:20,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:20,384 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 50 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 351 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2022-07-13 17:59:20,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 101. [2022-07-13 17:59:20,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 80 states have (on average 1.3) internal successors, (104), 86 states have internal predecessors, (104), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (12), 10 states have call predecessors, (12), 10 states have call successors, (12) [2022-07-13 17:59:20,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 126 transitions. [2022-07-13 17:59:20,399 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 126 transitions. Word has length 40 [2022-07-13 17:59:20,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,399 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 126 transitions. [2022-07-13 17:59:20,400 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,400 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 126 transitions. [2022-07-13 17:59:20,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-07-13 17:59:20,403 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,403 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,404 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:59:20,404 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,404 INFO L85 PathProgramCache]: Analyzing trace with hash 113656686, now seen corresponding path program 1 times [2022-07-13 17:59:20,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9858017] [2022-07-13 17:59:20,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-13 17:59:20,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,449 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9858017] [2022-07-13 17:59:20,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9858017] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 17:59:20,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831750783] [2022-07-13 17:59:20,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-13 17:59:20,451 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 17:59:20,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 17:59:20,452 INFO L87 Difference]: Start difference. First operand 101 states and 126 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,473 INFO L93 Difference]: Finished difference Result 215 states and 275 transitions. [2022-07-13 17:59:20,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-13 17:59:20,474 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2022-07-13 17:59:20,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,477 INFO L225 Difference]: With dead ends: 215 [2022-07-13 17:59:20,477 INFO L226 Difference]: Without dead ends: 121 [2022-07-13 17:59:20,478 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:20,483 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 37 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 234 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-07-13 17:59:20,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 103. [2022-07-13 17:59:20,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 82 states have (on average 1.2926829268292683) internal successors, (106), 88 states have internal predecessors, (106), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (12), 10 states have call predecessors, (12), 10 states have call successors, (12) [2022-07-13 17:59:20,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 128 transitions. [2022-07-13 17:59:20,504 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 128 transitions. Word has length 40 [2022-07-13 17:59:20,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,505 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 128 transitions. [2022-07-13 17:59:20,505 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,505 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 128 transitions. [2022-07-13 17:59:20,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-07-13 17:59:20,506 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,507 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:59:20,508 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,508 INFO L85 PathProgramCache]: Analyzing trace with hash -703991764, now seen corresponding path program 1 times [2022-07-13 17:59:20,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1123874213] [2022-07-13 17:59:20,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-13 17:59:20,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,563 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,563 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1123874213] [2022-07-13 17:59:20,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1123874213] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:59:20,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70897772] [2022-07-13 17:59:20,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:59:20,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:59:20,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:20,565 INFO L87 Difference]: Start difference. First operand 103 states and 128 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,581 INFO L93 Difference]: Finished difference Result 245 states and 308 transitions. [2022-07-13 17:59:20,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:59:20,581 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2022-07-13 17:59:20,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,582 INFO L225 Difference]: With dead ends: 245 [2022-07-13 17:59:20,583 INFO L226 Difference]: Without dead ends: 149 [2022-07-13 17:59:20,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:20,585 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 39 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 137 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-07-13 17:59:20,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 147. [2022-07-13 17:59:20,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 124 states have internal predecessors, (149), 15 states have call successors, (15), 15 states have call predecessors, (15), 14 states have return successors, (17), 14 states have call predecessors, (17), 15 states have call successors, (17) [2022-07-13 17:59:20,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 181 transitions. [2022-07-13 17:59:20,602 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 181 transitions. Word has length 40 [2022-07-13 17:59:20,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,602 INFO L495 AbstractCegarLoop]: Abstraction has 147 states and 181 transitions. [2022-07-13 17:59:20,602 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:20,602 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 181 transitions. [2022-07-13 17:59:20,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-07-13 17:59:20,603 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,604 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,604 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:59:20,604 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,604 INFO L85 PathProgramCache]: Analyzing trace with hash -430431235, now seen corresponding path program 1 times [2022-07-13 17:59:20,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484778453] [2022-07-13 17:59:20,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-07-13 17:59:20,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-13 17:59:20,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484778453] [2022-07-13 17:59:20,679 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484778453] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,679 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:20,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375764496] [2022-07-13 17:59:20,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:20,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:20,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:20,681 INFO L87 Difference]: Start difference. First operand 147 states and 181 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:59:20,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,715 INFO L93 Difference]: Finished difference Result 288 states and 356 transitions. [2022-07-13 17:59:20,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:59:20,716 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-07-13 17:59:20,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,718 INFO L225 Difference]: With dead ends: 288 [2022-07-13 17:59:20,718 INFO L226 Difference]: Without dead ends: 148 [2022-07-13 17:59:20,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:20,719 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 30 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 287 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:20,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2022-07-13 17:59:20,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 145. [2022-07-13 17:59:20,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 115 states have (on average 1.2608695652173914) internal successors, (145), 122 states have internal predecessors, (145), 15 states have call successors, (15), 15 states have call predecessors, (15), 14 states have return successors, (17), 14 states have call predecessors, (17), 15 states have call successors, (17) [2022-07-13 17:59:20,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 177 transitions. [2022-07-13 17:59:20,731 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 177 transitions. Word has length 42 [2022-07-13 17:59:20,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,732 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 177 transitions. [2022-07-13 17:59:20,732 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:59:20,732 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 177 transitions. [2022-07-13 17:59:20,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-13 17:59:20,733 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,733 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:59:20,733 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,734 INFO L85 PathProgramCache]: Analyzing trace with hash -994693806, now seen corresponding path program 1 times [2022-07-13 17:59:20,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112469720] [2022-07-13 17:59:20,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:20,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-13 17:59:20,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:20,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:20,801 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:20,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112469720] [2022-07-13 17:59:20,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112469720] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:20,802 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:20,802 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:20,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702160174] [2022-07-13 17:59:20,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:20,803 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:20,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:20,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:20,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:20,804 INFO L87 Difference]: Start difference. First operand 145 states and 177 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:20,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:20,931 INFO L93 Difference]: Finished difference Result 267 states and 332 transitions. [2022-07-13 17:59:20,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:59:20,931 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-13 17:59:20,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:20,934 INFO L225 Difference]: With dead ends: 267 [2022-07-13 17:59:20,935 INFO L226 Difference]: Without dead ends: 104 [2022-07-13 17:59:20,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-13 17:59:20,937 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 106 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:20,937 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [110 Valid, 396 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:20,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-07-13 17:59:20,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2022-07-13 17:59:20,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 80 states have (on average 1.2125) internal successors, (97), 85 states have internal predecessors, (97), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (11), 9 states have call predecessors, (11), 10 states have call successors, (11) [2022-07-13 17:59:20,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 118 transitions. [2022-07-13 17:59:20,944 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 118 transitions. Word has length 44 [2022-07-13 17:59:20,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:20,945 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 118 transitions. [2022-07-13 17:59:20,945 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:20,945 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 118 transitions. [2022-07-13 17:59:20,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-13 17:59:20,945 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:20,945 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:20,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:59:20,946 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:20,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:20,946 INFO L85 PathProgramCache]: Analyzing trace with hash -622219357, now seen corresponding path program 1 times [2022-07-13 17:59:20,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:20,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494797854] [2022-07-13 17:59:20,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:20,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:20,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:21,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 17:59:21,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-13 17:59:21,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,006 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:21,006 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:21,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494797854] [2022-07-13 17:59:21,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494797854] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:21,007 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:21,007 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:21,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [382257006] [2022-07-13 17:59:21,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:21,008 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:21,008 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:21,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:21,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:21,008 INFO L87 Difference]: Start difference. First operand 101 states and 118 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:21,094 INFO L93 Difference]: Finished difference Result 206 states and 248 transitions. [2022-07-13 17:59:21,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:59:21,094 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-13 17:59:21,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:21,095 INFO L225 Difference]: With dead ends: 206 [2022-07-13 17:59:21,095 INFO L226 Difference]: Without dead ends: 154 [2022-07-13 17:59:21,096 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:59:21,096 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 110 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:21,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 235 Invalid, 107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:21,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2022-07-13 17:59:21,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 145. [2022-07-13 17:59:21,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2280701754385965) internal successors, (140), 121 states have internal predecessors, (140), 15 states have call successors, (15), 15 states have call predecessors, (15), 15 states have return successors, (18), 14 states have call predecessors, (18), 15 states have call successors, (18) [2022-07-13 17:59:21,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 173 transitions. [2022-07-13 17:59:21,103 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 173 transitions. Word has length 46 [2022-07-13 17:59:21,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:21,103 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 173 transitions. [2022-07-13 17:59:21,103 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,104 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 173 transitions. [2022-07-13 17:59:21,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-13 17:59:21,104 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:21,104 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:21,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:59:21,105 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:21,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:21,105 INFO L85 PathProgramCache]: Analyzing trace with hash -403364639, now seen corresponding path program 1 times [2022-07-13 17:59:21,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:21,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [141046043] [2022-07-13 17:59:21,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:21,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:21,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:21,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 17:59:21,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-13 17:59:21,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:21,132 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:21,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [141046043] [2022-07-13 17:59:21,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [141046043] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:21,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:21,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:21,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2074113320] [2022-07-13 17:59:21,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:21,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:21,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:21,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:21,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:21,134 INFO L87 Difference]: Start difference. First operand 145 states and 173 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:21,185 INFO L93 Difference]: Finished difference Result 255 states and 309 transitions. [2022-07-13 17:59:21,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:59:21,185 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-13 17:59:21,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:21,186 INFO L225 Difference]: With dead ends: 255 [2022-07-13 17:59:21,186 INFO L226 Difference]: Without dead ends: 159 [2022-07-13 17:59:21,187 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:21,187 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 70 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:21,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 190 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:21,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-07-13 17:59:21,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 159. [2022-07-13 17:59:21,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 125 states have (on average 1.2) internal successors, (150), 133 states have internal predecessors, (150), 17 states have call successors, (17), 15 states have call predecessors, (17), 16 states have return successors, (21), 16 states have call predecessors, (21), 17 states have call successors, (21) [2022-07-13 17:59:21,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 188 transitions. [2022-07-13 17:59:21,195 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 188 transitions. Word has length 46 [2022-07-13 17:59:21,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:21,195 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 188 transitions. [2022-07-13 17:59:21,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,196 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 188 transitions. [2022-07-13 17:59:21,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-13 17:59:21,196 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:21,196 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:21,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-13 17:59:21,197 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:21,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:21,197 INFO L85 PathProgramCache]: Analyzing trace with hash -1221013089, now seen corresponding path program 1 times [2022-07-13 17:59:21,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:21,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877532831] [2022-07-13 17:59:21,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:21,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:21,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:21,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 17:59:21,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-13 17:59:21,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:21,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:21,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:21,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877532831] [2022-07-13 17:59:21,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877532831] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:21,247 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:21,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-13 17:59:21,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510252671] [2022-07-13 17:59:21,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:21,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:59:21,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:21,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:59:21,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:59:21,249 INFO L87 Difference]: Start difference. First operand 159 states and 188 transitions. Second operand has 8 states, 8 states have (on average 4.875) internal successors, (39), 7 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:21,333 INFO L93 Difference]: Finished difference Result 230 states and 275 transitions. [2022-07-13 17:59:21,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:59:21,334 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 7 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-13 17:59:21,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:21,334 INFO L225 Difference]: With dead ends: 230 [2022-07-13 17:59:21,335 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:59:21,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:59:21,335 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 64 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:21,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 255 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:21,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:59:21,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:59:21,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:59:21,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:59:21,337 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 46 [2022-07-13 17:59:21,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:21,337 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:59:21,337 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 7 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:21,337 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:59:21,337 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:59:21,339 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:59:21,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-07-13 17:59:21,341 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:59:22,303 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 257 263) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 257 263) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point L831-1(lines 827 838) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 827 838) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 827 838) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 839 847) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 839 847) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 839 847) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point L129(line 129) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point L129-1(line 129) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 123 152) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 123 152) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point L148(lines 123 152) the Hoare annotation is: true [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L899 garLoopResultBuilder]: For program point L137(lines 137 141) no Hoare annotation was computed. [2022-07-13 17:59:22,304 INFO L902 garLoopResultBuilder]: At program point L137-1(lines 137 141) the Hoare annotation is: true [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L134(line 134) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L902 garLoopResultBuilder]: At program point L133-2(lines 133 147) the Hoare annotation is: true [2022-07-13 17:59:22,305 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |timeShift_processEnvironment_~tmp~2#1| 0) (not (= 2 ~waterLevel~0)) (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 1)) .cse0))) [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 233 256) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L767(lines 767 787) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L895 garLoopResultBuilder]: At program point L284(line 284) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L796(line 796) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 265 289) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse5 (not .cse0)) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 .cse5) .cse0) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse3 .cse4 (not (= 2 ~waterLevel~0)) .cse6 .cse5) .cse0 (and .cse6 .cse1)))))) [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L371(lines 371 375) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L371-2(lines 371 375) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L895 garLoopResultBuilder]: At program point L322(lines 317 325) the Hoare annotation is: (let ((.cse0 (= |timeShift_isPumpRunning_#res#1| 1)) (.cse1 (= ~pumpRunning~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2) (or .cse3 .cse2 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1)) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2022-07-13 17:59:22,305 INFO L895 garLoopResultBuilder]: At program point L797(lines 792 799) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 1)) .cse0))) [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 890) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2022-07-13 17:59:22,305 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 281) no Hoare annotation was computed. [2022-07-13 17:59:22,306 INFO L899 garLoopResultBuilder]: For program point L269(lines 269 286) no Hoare annotation was computed. [2022-07-13 17:59:22,306 INFO L895 garLoopResultBuilder]: At program point L876(lines 871 879) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse3 .cse4 (= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse3 (not (= 2 |timeShift_getWaterLevel_#res#1|)) .cse4 (not (= 2 ~waterLevel~0)) .cse5) .cse0 (and .cse5 .cse1))))) [2022-07-13 17:59:22,306 INFO L899 garLoopResultBuilder]: For program point L777(lines 777 783) no Hoare annotation was computed. [2022-07-13 17:59:22,306 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 786) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L773-1(lines 758 790) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse5 (not .cse0)) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 .cse5) .cse0) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse3 .cse4 (not (= 2 ~waterLevel~0)) .cse6 .cse5) .cse0 (and .cse6 .cse1)))))) [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L765(line 765) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse5 (not .cse0)) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 .cse5) .cse0) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse3 .cse4 (not (= 2 ~waterLevel~0)) .cse6 .cse5) .cse0 (and .cse6 .cse1)))))) [2022-07-13 17:59:22,307 INFO L899 garLoopResultBuilder]: For program point L765-1(line 765) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L889(lines 880 893) the Hoare annotation is: (let ((.cse0 (= |timeShift_isHighWaterSensorDry_#res#1| 1)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse3 (not (= 2 ~waterLevel~0)) .cse4) .cse1 .cse2 (and .cse3 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse4))) (or (not (= |old(~pumpRunning~0)| 1)) .cse2))) [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L377(lines 362 380) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse2 (= |timeShift_isHighWaterLevel_#res#1| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3)) (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not .cse1))) (or .cse0 (and .cse4 (not (= 2 ~waterLevel~0)) .cse5 .cse6) .cse1 (and .cse4 (not .cse3) (= |timeShift_isHighWaterLevel_~tmp~3#1| 0) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse5 .cse6 (not .cse2)))) (or (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 233 256) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (and .cse1 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0))) [2022-07-13 17:59:22,307 INFO L899 garLoopResultBuilder]: For program point L237-1(lines 236 255) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 233 256) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 796) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L899 garLoopResultBuilder]: For program point L807(lines 807 811) no Hoare annotation was computed. [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L295(lines 290 297) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2022-07-13 17:59:22,307 INFO L895 garLoopResultBuilder]: At program point L807-2(lines 803 814) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-07-13 17:59:22,307 INFO L902 garLoopResultBuilder]: At program point L192(lines 185 194) the Hoare annotation is: true [2022-07-13 17:59:22,307 INFO L902 garLoopResultBuilder]: At program point L217(lines 198 220) the Hoare annotation is: true [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-07-13 17:59:22,308 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2022-07-13 17:59:22,308 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:59:22,308 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 107) no Hoare annotation was computed. [2022-07-13 17:59:22,309 INFO L895 garLoopResultBuilder]: At program point L103-2(lines 95 108) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-13 17:59:22,309 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-07-13 17:59:22,309 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:59:22,309 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-07-13 17:59:22,309 INFO L895 garLoopResultBuilder]: At program point L925(lines 920 928) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:22,309 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-13 17:59:22,309 INFO L895 garLoopResultBuilder]: At program point L182(lines 178 184) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:22,309 INFO L895 garLoopResultBuilder]: At program point L917(lines 913 919) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:22,310 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-07-13 17:59:22,310 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-07-13 17:59:22,310 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-07-13 17:59:22,310 INFO L899 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-07-13 17:59:22,310 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-07-13 17:59:22,310 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 215) no Hoare annotation was computed. [2022-07-13 17:59:22,310 INFO L895 garLoopResultBuilder]: At program point L910(lines 906 912) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:22,310 INFO L899 garLoopResultBuilder]: For program point L208-2(lines 208 215) no Hoare annotation was computed. [2022-07-13 17:59:22,310 INFO L895 garLoopResultBuilder]: At program point L386(lines 381 388) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-13 17:59:22,311 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 815 826) no Hoare annotation was computed. [2022-07-13 17:59:22,311 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 815 826) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 1)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (= |old(~waterLevel~0)| 2)))) [2022-07-13 17:59:22,311 INFO L899 garLoopResultBuilder]: For program point L819-1(lines 815 826) no Hoare annotation was computed. [2022-07-13 17:59:22,313 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:22,315 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:59:22,341 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:59:22 BoogieIcfgContainer [2022-07-13 17:59:22,343 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:59:22,343 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:59:22,344 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:59:22,344 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:59:22,344 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:19" (3/4) ... [2022-07-13 17:59:22,346 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:59:22,350 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:59:22,350 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:59:22,351 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:59:22,351 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:59:22,351 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:59:22,351 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:59:22,360 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2022-07-13 17:59:22,361 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:59:22,361 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:59:22,361 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:59:22,361 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:59:22,362 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:22,362 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:22,379 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:22,381 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:22,381 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && pumpRunning == 1) || (((((pumpRunning == 0 && \result == 1) && !(2 == waterLevel)) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-13 17:59:22,382 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (!(\old(pumpRunning) == 0) || 0 == systemActive) [2022-07-13 17:59:22,383 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-07-13 17:59:22,383 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && pumpRunning == 1) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-13 17:59:22,384 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-07-13 17:59:22,384 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && \result == 1))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(2 == \result)) && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-07-13 17:59:22,384 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) && ((((((\result == 1 && pumpRunning == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(\old(pumpRunning) == 1) || 0 == systemActive) [2022-07-13 17:59:22,384 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || (\result == 0 && tmp___0 == 0)) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || ((((((pumpRunning == 0 && !(tmp___0 == 0)) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && !(\result == 0)))) && (!(\old(pumpRunning) == 1) || 0 == systemActive) [2022-07-13 17:59:22,384 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || (\result == 1 && pumpRunning == 1)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || 0 == systemActive) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-07-13 17:59:22,385 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (!(\old(pumpRunning) == 1) || 0 == systemActive) [2022-07-13 17:59:22,385 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || 0 == systemActive) && (!(\old(pumpRunning) == 1) || 0 == systemActive) [2022-07-13 17:59:22,411 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:59:22,411 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:59:22,412 INFO L158 Benchmark]: Toolchain (without parser) took 3611.05ms. Allocated memory was 111.1MB in the beginning and 136.3MB in the end (delta: 25.2MB). Free memory was 81.4MB in the beginning and 88.1MB in the end (delta: -6.7MB). Peak memory consumption was 18.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,412 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 77.6MB. Free memory is still 37.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:59:22,412 INFO L158 Benchmark]: CACSL2BoogieTranslator took 348.32ms. Allocated memory is still 111.1MB. Free memory was 81.1MB in the beginning and 78.2MB in the end (delta: 2.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,412 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.48ms. Allocated memory is still 111.1MB. Free memory was 78.2MB in the beginning and 76.0MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,413 INFO L158 Benchmark]: Boogie Preprocessor took 31.12ms. Allocated memory is still 111.1MB. Free memory was 76.0MB in the beginning and 74.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,413 INFO L158 Benchmark]: RCFGBuilder took 334.29ms. Allocated memory is still 111.1MB. Free memory was 74.3MB in the beginning and 58.6MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,413 INFO L158 Benchmark]: TraceAbstraction took 2773.91ms. Allocated memory was 111.1MB in the beginning and 136.3MB in the end (delta: 25.2MB). Free memory was 58.3MB in the beginning and 94.4MB in the end (delta: -36.2MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,413 INFO L158 Benchmark]: Witness Printer took 67.99ms. Allocated memory is still 136.3MB. Free memory was 94.4MB in the beginning and 88.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:22,414 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 77.6MB. Free memory is still 37.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 348.32ms. Allocated memory is still 111.1MB. Free memory was 81.1MB in the beginning and 78.2MB in the end (delta: 2.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.48ms. Allocated memory is still 111.1MB. Free memory was 78.2MB in the beginning and 76.0MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.12ms. Allocated memory is still 111.1MB. Free memory was 76.0MB in the beginning and 74.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 334.29ms. Allocated memory is still 111.1MB. Free memory was 74.3MB in the beginning and 58.6MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 2773.91ms. Allocated memory was 111.1MB in the beginning and 136.3MB in the end (delta: 25.2MB). Free memory was 58.3MB in the beginning and 94.4MB in the end (delta: -36.2MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. * Witness Printer took 67.99ms. Allocated memory is still 136.3MB. Free memory was 94.4MB in the beginning and 88.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 796]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 77 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.7s, OverallIterations: 12, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 682 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 666 mSDsluCounter, 2630 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1653 mSDsCounter, 76 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 448 IncrementalHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 76 mSolverCounterUnsat, 977 mSDtfsCounter, 448 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 123 GetRequests, 69 SyntacticMatches, 1 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=159occurred in iteration=11, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 12 MinimizatonAttempts, 54 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 473 PreInvPairs, 584 NumberOfFragments, 878 HoareAnnotationTreeSize, 473 FomulaSimplifications, 94 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 35 FomulaSimplificationsInter, 2726 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 462 NumberOfCodeBlocks, 462 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 450 ConstructedInterpolants, 0 QuantifiedInterpolants, 712 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || (\result == 1 && pumpRunning == 1)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || 0 == systemActive) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((\result == 1 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && pumpRunning == 1) || (((((pumpRunning == 0 && \result == 1) && !(2 == waterLevel)) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 803]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (!(\old(pumpRunning) == 0) || 0 == systemActive) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: ((((\result == 1 || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) && ((((((\result == 1 && pumpRunning == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(\old(pumpRunning) == 1) || 0 == systemActive) - InvariantResult [Line: 792]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || 0 == systemActive) && (!(\old(pumpRunning) == 1) || 0 == systemActive) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 185]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: ((((\result == 1 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && pumpRunning == 1) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || (\result == 0 && tmp___0 == 0)) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || ((((((pumpRunning == 0 && !(tmp___0 == 0)) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && !(\result == 0)))) && (!(\old(pumpRunning) == 1) || 0 == systemActive) - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 758]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (!(\old(pumpRunning) == 1) || 0 == systemActive) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && \result == 1))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(2 == \result)) && tmp == 0) && !(2 == waterLevel)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:59:22,455 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE