./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8e8f57de68bd156f96d4553940231369dc2e0f8c550ee7a61d6446a6f476745 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:18:50,451 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:18:50,469 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:18:50,521 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:18:50,521 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:18:50,522 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:18:50,523 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:18:50,525 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:18:50,526 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:18:50,530 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:18:50,530 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:18:50,532 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:18:50,532 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:18:50,533 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:18:50,534 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:18:50,536 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:18:50,537 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:18:50,551 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:18:50,553 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:18:50,557 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:18:50,558 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:18:50,559 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:18:50,560 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:18:50,560 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:18:50,561 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:18:50,566 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:18:50,566 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:18:50,567 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:18:50,567 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:18:50,568 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:18:50,568 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:18:50,569 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:18:50,570 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:18:50,570 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:18:50,571 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:18:50,571 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:18:50,571 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:18:50,572 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:18:50,572 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:18:50,573 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:18:50,573 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:18:50,574 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:18:50,578 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:18:50,613 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:18:50,613 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:18:50,614 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:18:50,614 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:18:50,614 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:18:50,614 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:18:50,615 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:18:50,615 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:18:50,615 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:18:50,627 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:18:50,628 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:18:50,628 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:18:50,628 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:18:50,628 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:18:50,628 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:18:50,629 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:18:50,630 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:18:50,630 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:18:50,630 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:18:50,630 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:50,630 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:18:50,630 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:18:50,631 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:18:50,631 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:18:50,631 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:18:50,631 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:18:50,631 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:18:50,632 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:18:50,632 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8e8f57de68bd156f96d4553940231369dc2e0f8c550ee7a61d6446a6f476745 [2022-07-12 06:18:50,977 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:18:51,013 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:18:51,015 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:18:51,028 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:18:51,029 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:18:51,030 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c [2022-07-12 06:18:51,118 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6e9bdb3aa/d0342a8b8af54f88b5c80b812b123424/FLAG4c60a1c80 [2022-07-12 06:18:51,757 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:18:51,771 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c [2022-07-12 06:18:51,812 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6e9bdb3aa/d0342a8b8af54f88b5c80b812b123424/FLAG4c60a1c80 [2022-07-12 06:18:52,126 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6e9bdb3aa/d0342a8b8af54f88b5c80b812b123424 [2022-07-12 06:18:52,128 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:18:52,129 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:18:52,129 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:52,136 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:18:52,139 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:18:52,140 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,156 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@ac9b736 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52, skipping insertion in model container [2022-07-12 06:18:52,156 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,161 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:18:52,215 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:18:52,601 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-07-12 06:18:52,684 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:52,692 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:18:52,752 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-07-12 06:18:52,775 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:52,828 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:18:52,828 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52 WrapperNode [2022-07-12 06:18:52,829 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:52,830 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:52,830 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:18:52,830 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:18:52,855 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,878 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,936 INFO L137 Inliner]: procedures = 59, calls = 162, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 279 [2022-07-12 06:18:52,936 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:52,937 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:18:52,938 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:18:52,938 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:18:52,947 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,963 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,973 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,977 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,981 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,990 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,995 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:52,997 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:18:53,001 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:18:53,001 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:18:53,001 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:18:53,002 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (1/1) ... [2022-07-12 06:18:53,018 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:53,025 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:53,090 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:18:53,119 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:18:53,161 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:18:53,162 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:18:53,162 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:18:53,162 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-12 06:18:53,162 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-12 06:18:53,162 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:18:53,162 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:18:53,162 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:18:53,163 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:18:53,163 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:53,163 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:53,163 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:18:53,163 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:18:53,163 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:18:53,163 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:18:53,163 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-12 06:18:53,163 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-12 06:18:53,164 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-12 06:18:53,164 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-12 06:18:53,164 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:18:53,164 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:18:53,164 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:18:53,164 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:18:53,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:18:53,289 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:18:53,297 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:18:53,766 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:18:53,771 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:18:53,771 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:18:53,773 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:53 BoogieIcfgContainer [2022-07-12 06:18:53,788 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:18:53,803 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:18:53,803 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:18:53,805 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:18:53,805 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:18:52" (1/3) ... [2022-07-12 06:18:53,806 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@747d3636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:53, skipping insertion in model container [2022-07-12 06:18:53,806 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:52" (2/3) ... [2022-07-12 06:18:53,806 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@747d3636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:53, skipping insertion in model container [2022-07-12 06:18:53,806 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:53" (3/3) ... [2022-07-12 06:18:53,807 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product62.cil.c [2022-07-12 06:18:53,818 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:18:53,835 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:18:53,895 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:18:53,918 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5941b1f6, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6b83af42 [2022-07-12 06:18:53,919 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:18:53,947 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-07-12 06:18:53,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-12 06:18:53,959 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:53,960 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:53,960 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:53,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:53,975 INFO L85 PathProgramCache]: Analyzing trace with hash -561821178, now seen corresponding path program 1 times [2022-07-12 06:18:53,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:53,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1434374236] [2022-07-12 06:18:53,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:53,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:54,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-12 06:18:54,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:54,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:54,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1434374236] [2022-07-12 06:18:54,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1434374236] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:54,345 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:54,346 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:18:54,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974494492] [2022-07-12 06:18:54,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:54,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:18:54,350 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:54,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:18:54,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:54,409 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:54,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:54,456 INFO L93 Difference]: Finished difference Result 213 states and 288 transitions. [2022-07-12 06:18:54,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:18:54,458 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-12 06:18:54,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:54,465 INFO L225 Difference]: With dead ends: 213 [2022-07-12 06:18:54,471 INFO L226 Difference]: Without dead ends: 102 [2022-07-12 06:18:54,476 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:54,480 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:54,480 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:54,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-07-12 06:18:54,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2022-07-12 06:18:54,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-12 06:18:54,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2022-07-12 06:18:54,560 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2022-07-12 06:18:54,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:54,560 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2022-07-12 06:18:54,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:54,561 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2022-07-12 06:18:54,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-12 06:18:54,566 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:54,566 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:54,567 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:18:54,567 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:54,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:54,569 INFO L85 PathProgramCache]: Analyzing trace with hash 1983272792, now seen corresponding path program 1 times [2022-07-12 06:18:54,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:54,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1148591535] [2022-07-12 06:18:54,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:54,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:54,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 06:18:54,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:54,708 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:54,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1148591535] [2022-07-12 06:18:54,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1148591535] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:54,708 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:54,708 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:18:54,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214544414] [2022-07-12 06:18:54,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:54,710 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:54,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:54,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:54,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:54,711 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:54,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:54,762 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2022-07-12 06:18:54,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:54,764 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-12 06:18:54,764 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:54,766 INFO L225 Difference]: With dead ends: 168 [2022-07-12 06:18:54,768 INFO L226 Difference]: Without dead ends: 93 [2022-07-12 06:18:54,769 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:54,771 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:54,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:54,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-12 06:18:54,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-12 06:18:54,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-12 06:18:54,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2022-07-12 06:18:54,798 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2022-07-12 06:18:54,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:54,799 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2022-07-12 06:18:54,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:54,800 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2022-07-12 06:18:54,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-12 06:18:54,802 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:54,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:54,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:18:54,803 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:54,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:54,804 INFO L85 PathProgramCache]: Analyzing trace with hash -452039463, now seen corresponding path program 1 times [2022-07-12 06:18:54,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:54,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495291969] [2022-07-12 06:18:54,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:54,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:54,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:54,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:54,933 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:54,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495291969] [2022-07-12 06:18:54,933 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495291969] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:54,934 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:54,934 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:54,934 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995093952] [2022-07-12 06:18:54,934 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:54,935 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:54,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:54,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:54,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:54,936 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:55,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:55,044 INFO L93 Difference]: Finished difference Result 178 states and 233 transitions. [2022-07-12 06:18:55,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:55,045 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-12 06:18:55,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:55,047 INFO L225 Difference]: With dead ends: 178 [2022-07-12 06:18:55,047 INFO L226 Difference]: Without dead ends: 93 [2022-07-12 06:18:55,048 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:55,051 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 147 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:55,067 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 305 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:55,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-12 06:18:55,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-12 06:18:55,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-12 06:18:55,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2022-07-12 06:18:55,081 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2022-07-12 06:18:55,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:55,082 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2022-07-12 06:18:55,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:55,082 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2022-07-12 06:18:55,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-12 06:18:55,086 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:55,086 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:55,087 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:18:55,087 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:55,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:55,088 INFO L85 PathProgramCache]: Analyzing trace with hash -1529000788, now seen corresponding path program 1 times [2022-07-12 06:18:55,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:55,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1904270945] [2022-07-12 06:18:55,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:55,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:55,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:55,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:55,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:55,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 06:18:55,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:55,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:55,239 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1904270945] [2022-07-12 06:18:55,239 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1904270945] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:55,239 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:55,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:55,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559779613] [2022-07-12 06:18:55,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:55,240 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:55,240 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:55,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:55,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:55,241 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:18:55,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:55,525 INFO L93 Difference]: Finished difference Result 267 states and 341 transitions. [2022-07-12 06:18:55,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:55,526 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2022-07-12 06:18:55,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:55,530 INFO L225 Difference]: With dead ends: 267 [2022-07-12 06:18:55,531 INFO L226 Difference]: Without dead ends: 182 [2022-07-12 06:18:55,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:18:55,538 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 210 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:55,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 339 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:55,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-07-12 06:18:55,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 176. [2022-07-12 06:18:55,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 130 states have (on average 1.2538461538461538) internal successors, (163), 139 states have internal predecessors, (163), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-12 06:18:55,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 214 transitions. [2022-07-12 06:18:55,579 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 214 transitions. Word has length 46 [2022-07-12 06:18:55,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:55,580 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 214 transitions. [2022-07-12 06:18:55,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:18:55,580 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 214 transitions. [2022-07-12 06:18:55,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-12 06:18:55,582 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:55,582 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:55,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:18:55,583 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:55,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:55,583 INFO L85 PathProgramCache]: Analyzing trace with hash -821652620, now seen corresponding path program 1 times [2022-07-12 06:18:55,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:55,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1383972181] [2022-07-12 06:18:55,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:55,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:55,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:55,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:55,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:55,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-12 06:18:55,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:55,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:55,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:55,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1383972181] [2022-07-12 06:18:55,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1383972181] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:55,753 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:55,753 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:55,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1375234258] [2022-07-12 06:18:55,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:55,753 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:55,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:55,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:55,754 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:55,755 INFO L87 Difference]: Start difference. First operand 176 states and 214 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:56,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:56,027 INFO L93 Difference]: Finished difference Result 356 states and 434 transitions. [2022-07-12 06:18:56,027 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-12 06:18:56,027 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-07-12 06:18:56,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:56,043 INFO L225 Difference]: With dead ends: 356 [2022-07-12 06:18:56,043 INFO L226 Difference]: Without dead ends: 188 [2022-07-12 06:18:56,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:18:56,046 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 146 mSDsluCounter, 325 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:56,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 447 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:56,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-07-12 06:18:56,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 174. [2022-07-12 06:18:56,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2265625) internal successors, (157), 137 states have internal predecessors, (157), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-12 06:18:56,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 208 transitions. [2022-07-12 06:18:56,092 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 208 transitions. Word has length 52 [2022-07-12 06:18:56,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:56,094 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 208 transitions. [2022-07-12 06:18:56,094 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:56,094 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 208 transitions. [2022-07-12 06:18:56,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-12 06:18:56,095 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:56,095 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:56,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:18:56,096 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:56,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:56,096 INFO L85 PathProgramCache]: Analyzing trace with hash 1197221374, now seen corresponding path program 1 times [2022-07-12 06:18:56,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:56,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446094100] [2022-07-12 06:18:56,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:56,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:56,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:56,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:56,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:56,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:56,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:18:56,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,248 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:56,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:56,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446094100] [2022-07-12 06:18:56,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446094100] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:56,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:56,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:56,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [471930474] [2022-07-12 06:18:56,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:56,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:56,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:56,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:56,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:56,251 INFO L87 Difference]: Start difference. First operand 174 states and 208 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:56,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:56,454 INFO L93 Difference]: Finished difference Result 350 states and 427 transitions. [2022-07-12 06:18:56,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:56,463 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-07-12 06:18:56,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:56,464 INFO L225 Difference]: With dead ends: 350 [2022-07-12 06:18:56,464 INFO L226 Difference]: Without dead ends: 184 [2022-07-12 06:18:56,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:56,465 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 78 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:56,465 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 430 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:56,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-07-12 06:18:56,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 177. [2022-07-12 06:18:56,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.2213740458015268) internal successors, (160), 140 states have internal predecessors, (160), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-12 06:18:56,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 211 transitions. [2022-07-12 06:18:56,496 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 211 transitions. Word has length 62 [2022-07-12 06:18:56,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:56,496 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 211 transitions. [2022-07-12 06:18:56,497 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:56,497 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 211 transitions. [2022-07-12 06:18:56,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-12 06:18:56,497 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:56,497 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:56,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:18:56,498 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:56,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:56,498 INFO L85 PathProgramCache]: Analyzing trace with hash 1124834816, now seen corresponding path program 1 times [2022-07-12 06:18:56,498 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:56,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1976603032] [2022-07-12 06:18:56,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:56,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:56,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:56,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:56,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:56,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:56,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:18:56,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,649 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:56,649 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:56,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1976603032] [2022-07-12 06:18:56,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1976603032] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:56,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:56,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:56,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1944166294] [2022-07-12 06:18:56,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:56,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:56,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:56,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:56,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:56,660 INFO L87 Difference]: Start difference. First operand 177 states and 211 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:56,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:56,891 INFO L93 Difference]: Finished difference Result 356 states and 433 transitions. [2022-07-12 06:18:56,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:56,892 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-07-12 06:18:56,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:56,895 INFO L225 Difference]: With dead ends: 356 [2022-07-12 06:18:56,895 INFO L226 Difference]: Without dead ends: 187 [2022-07-12 06:18:56,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:56,896 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 115 mSDsluCounter, 369 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:56,897 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 478 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:56,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-07-12 06:18:56,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 179. [2022-07-12 06:18:56,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.218045112781955) internal successors, (162), 142 states have internal predecessors, (162), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-12 06:18:56,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 213 transitions. [2022-07-12 06:18:56,916 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 213 transitions. Word has length 62 [2022-07-12 06:18:56,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:56,918 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 213 transitions. [2022-07-12 06:18:56,918 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:56,918 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 213 transitions. [2022-07-12 06:18:56,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-12 06:18:56,919 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:56,919 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:56,919 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:18:56,919 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:56,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:56,920 INFO L85 PathProgramCache]: Analyzing trace with hash 280829314, now seen corresponding path program 1 times [2022-07-12 06:18:56,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:56,920 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [261752943] [2022-07-12 06:18:56,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:56,920 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:56,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:56,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:57,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:57,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:57,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:57,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:18:57,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,073 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:57,073 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:57,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [261752943] [2022-07-12 06:18:57,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [261752943] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:57,074 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:57,074 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:57,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923111776] [2022-07-12 06:18:57,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:57,075 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:57,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:57,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:57,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:57,076 INFO L87 Difference]: Start difference. First operand 179 states and 213 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:18:57,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:57,352 INFO L93 Difference]: Finished difference Result 477 states and 597 transitions. [2022-07-12 06:18:57,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:57,353 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2022-07-12 06:18:57,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:57,356 INFO L225 Difference]: With dead ends: 477 [2022-07-12 06:18:57,356 INFO L226 Difference]: Without dead ends: 306 [2022-07-12 06:18:57,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:57,357 INFO L413 NwaCegarLoop]: 162 mSDtfsCounter, 222 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:57,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 358 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:57,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2022-07-12 06:18:57,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 304. [2022-07-12 06:18:57,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 226 states have (on average 1.2079646017699115) internal successors, (273), 239 states have internal predecessors, (273), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2022-07-12 06:18:57,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 370 transitions. [2022-07-12 06:18:57,392 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 370 transitions. Word has length 62 [2022-07-12 06:18:57,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:57,392 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 370 transitions. [2022-07-12 06:18:57,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:18:57,393 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 370 transitions. [2022-07-12 06:18:57,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-07-12 06:18:57,394 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:57,394 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:57,395 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:18:57,395 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:57,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:57,395 INFO L85 PathProgramCache]: Analyzing trace with hash 135373532, now seen corresponding path program 1 times [2022-07-12 06:18:57,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:57,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [698780298] [2022-07-12 06:18:57,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:57,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:57,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:57,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:57,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:57,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:57,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:57,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-07-12 06:18:57,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,625 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:57,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:57,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [698780298] [2022-07-12 06:18:57,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [698780298] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:57,626 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:57,626 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-12 06:18:57,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484955987] [2022-07-12 06:18:57,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:57,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-12 06:18:57,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:57,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-12 06:18:57,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:18:57,635 INFO L87 Difference]: Start difference. First operand 304 states and 370 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 06:18:58,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:58,669 INFO L93 Difference]: Finished difference Result 936 states and 1182 transitions. [2022-07-12 06:18:58,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-12 06:18:58,670 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-07-12 06:18:58,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:58,674 INFO L225 Difference]: With dead ends: 936 [2022-07-12 06:18:58,674 INFO L226 Difference]: Without dead ends: 640 [2022-07-12 06:18:58,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-07-12 06:18:58,677 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 460 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 865 mSolverCounterSat, 235 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 468 SdHoareTripleChecker+Valid, 535 SdHoareTripleChecker+Invalid, 1100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 235 IncrementalHoareTripleChecker+Valid, 865 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:58,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [468 Valid, 535 Invalid, 1100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [235 Valid, 865 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-12 06:18:58,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-07-12 06:18:58,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 615. [2022-07-12 06:18:58,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 615 states, 450 states have (on average 1.18) internal successors, (531), 480 states have internal predecessors, (531), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2022-07-12 06:18:58,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 615 states and 752 transitions. [2022-07-12 06:18:58,744 INFO L78 Accepts]: Start accepts. Automaton has 615 states and 752 transitions. Word has length 66 [2022-07-12 06:18:58,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:58,744 INFO L495 AbstractCegarLoop]: Abstraction has 615 states and 752 transitions. [2022-07-12 06:18:58,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 06:18:58,744 INFO L276 IsEmpty]: Start isEmpty. Operand 615 states and 752 transitions. [2022-07-12 06:18:58,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-07-12 06:18:58,749 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:58,749 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:58,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:18:58,750 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:58,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:58,750 INFO L85 PathProgramCache]: Analyzing trace with hash -165520112, now seen corresponding path program 1 times [2022-07-12 06:18:58,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:58,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [976550843] [2022-07-12 06:18:58,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:58,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:58,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:58,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:58,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:58,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:58,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:58,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:58,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-12 06:18:58,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-12 06:18:58,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-12 06:18:58,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:58,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:18:58,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-07-12 06:18:59,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:18:59,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:59,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-12 06:18:59,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,014 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-07-12 06:18:59,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:59,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [976550843] [2022-07-12 06:18:59,014 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [976550843] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:59,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1405519922] [2022-07-12 06:18:59,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:59,015 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:59,015 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:59,031 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:59,069 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:18:59,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:59,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 542 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-12 06:18:59,203 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:59,496 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-12 06:18:59,497 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:59,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1405519922] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:59,497 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:59,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-07-12 06:18:59,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [266258172] [2022-07-12 06:18:59,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:59,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 06:18:59,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:59,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 06:18:59,499 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2022-07-12 06:18:59,505 INFO L87 Difference]: Start difference. First operand 615 states and 752 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:18:59,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:59,700 INFO L93 Difference]: Finished difference Result 1328 states and 1622 transitions. [2022-07-12 06:18:59,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-12 06:18:59,701 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2022-07-12 06:18:59,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:59,701 INFO L225 Difference]: With dead ends: 1328 [2022-07-12 06:18:59,701 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:18:59,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 145 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2022-07-12 06:18:59,704 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 76 mSDsluCounter, 917 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 1120 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:59,705 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 1120 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:59,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:18:59,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:18:59,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:18:59,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:18:59,706 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2022-07-12 06:18:59,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:59,706 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:18:59,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 06:18:59,707 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:18:59,707 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:18:59,709 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:18:59,754 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:59,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-12 06:18:59,928 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:19:03,469 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 922 929) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 922 929) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 922 929) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 812 818) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 812 818) the Hoare annotation is: true [2022-07-12 06:19:03,470 INFO L895 garLoopResultBuilder]: At program point L865(line 865) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or (not .cse0) .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point L865-1(lines 846 870) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L895 garLoopResultBuilder]: At program point L1020(lines 1005 1023) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point L1014(lines 1014 1018) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point L1014-2(lines 1014 1018) no Hoare annotation was computed. [2022-07-12 06:19:03,470 INFO L895 garLoopResultBuilder]: At program point L860(line 860) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-12 06:19:03,470 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-12 06:19:03,470 INFO L899 garLoopResultBuilder]: For program point L854(lines 854 862) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 867) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 846 870) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 846 870) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point L675(lines 670 678) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0) (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse0))) [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 615 623) the Hoare annotation is: true [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 615 623) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 615 623) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L899 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point L886(line 886) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-12 06:19:03,471 INFO L895 garLoopResultBuilder]: At program point L878(line 878) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L878-1(line 878) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 788 811) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L895 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (and .cse2 .cse1 .cse3) .cse4) (or (and .cse1 .cse3) (and .cse2 .cse0) (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse3) .cse4))) [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L895 garLoopResultBuilder]: At program point L891(line 891) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-07-12 06:19:03,472 INFO L895 garLoopResultBuilder]: At program point L891-1(lines 872 896) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (and .cse2 .cse1 .cse3) .cse4) (or (and .cse1 .cse3) (and .cse2 .cse0) (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse3) .cse4))) [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 791 810) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L895 garLoopResultBuilder]: At program point L946(lines 941 949) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0))) (or (not (<= 1 ~methaneLevelCritical~0)) (and (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse1) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2)) (or (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L880(lines 880 888) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 893) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 564) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L899 garLoopResultBuilder]: For program point L550(lines 550 567) no Hoare annotation was computed. [2022-07-12 06:19:03,472 INFO L895 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-07-12 06:19:03,473 INFO L895 garLoopResultBuilder]: At program point L550-1(lines 542 570) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (and .cse2 .cse1 .cse3) .cse4) (let ((.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~4#1| 0))) (or (and .cse2 .cse1 .cse5 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse0 .cse1 .cse5) (and (<= 2 ~waterLevel~0) .cse5 .cse3) (and .cse2 .cse0 .cse5) .cse4)))) [2022-07-12 06:19:03,473 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 788 811) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L555(lines 555 561) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 788 811) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2022-07-12 06:19:03,473 INFO L902 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-07-12 06:19:03,473 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2022-07-12 06:19:03,473 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2022-07-12 06:19:03,473 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 746 752) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L771(lines 726 773) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L710(lines 705 713) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L702(lines 698 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2022-07-12 06:19:03,474 INFO L895 garLoopResultBuilder]: At program point L764-2(lines 756 769) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,474 INFO L899 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-07-12 06:19:03,475 INFO L899 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2022-07-12 06:19:03,475 INFO L899 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2022-07-12 06:19:03,475 INFO L895 garLoopResultBuilder]: At program point L748(line 748) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,475 INFO L902 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-07-12 06:19:03,475 INFO L902 garLoopResultBuilder]: At program point L777(lines 716 781) the Hoare annotation is: true [2022-07-12 06:19:03,479 INFO L895 garLoopResultBuilder]: At program point L1029(lines 1024 1031) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,479 INFO L902 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-07-12 06:19:03,479 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-07-12 06:19:03,479 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2022-07-12 06:19:03,480 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2022-07-12 06:19:03,480 INFO L895 garLoopResultBuilder]: At program point L695(lines 691 697) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:19:03,480 INFO L895 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: false [2022-07-12 06:19:03,480 INFO L899 garLoopResultBuilder]: For program point L995-2(lines 995 999) no Hoare annotation was computed. [2022-07-12 06:19:03,480 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 820 844) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-12 06:19:03,480 INFO L899 garLoopResultBuilder]: For program point L828(lines 828 836) no Hoare annotation was computed. [2022-07-12 06:19:03,480 INFO L895 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and .cse5 (<= 2 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or (not .cse0) (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2) (or .cse4 .cse1 .cse2 .cse3)))) [2022-07-12 06:19:03,481 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 841) no Hoare annotation was computed. [2022-07-12 06:19:03,481 INFO L895 garLoopResultBuilder]: At program point L839(line 839) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-12 06:19:03,481 INFO L899 garLoopResultBuilder]: For program point L839-1(lines 820 844) no Hoare annotation was computed. [2022-07-12 06:19:03,481 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 820 844) no Hoare annotation was computed. [2022-07-12 06:19:03,481 INFO L899 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-07-12 06:19:03,481 INFO L899 garLoopResultBuilder]: For program point L912(lines 912 918) no Hoare annotation was computed. [2022-07-12 06:19:03,481 INFO L895 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-12 06:19:03,481 INFO L895 garLoopResultBuilder]: At program point L912-2(lines 905 921) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not .cse0) (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse1 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~9#1|)) .cse2) (or .cse0 .cse3 .cse2) (or .cse1 .cse3 .cse2))) [2022-07-12 06:19:03,482 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2022-07-12 06:19:03,482 INFO L895 garLoopResultBuilder]: At program point L1001(lines 986 1004) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (and .cse3 .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse2))) (.cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2)))) [2022-07-12 06:19:03,482 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 904) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse2 .cse1) (or (<= 2 ~waterLevel~0) .cse2 .cse1))) [2022-07-12 06:19:03,482 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 999) no Hoare annotation was computed. [2022-07-12 06:19:03,482 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-07-12 06:19:03,482 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2022-07-12 06:19:03,483 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-07-12 06:19:03,483 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2022-07-12 06:19:03,483 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 930 940) the Hoare annotation is: true [2022-07-12 06:19:03,483 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 930 940) no Hoare annotation was computed. [2022-07-12 06:19:03,483 INFO L902 garLoopResultBuilder]: At program point L935(line 935) the Hoare annotation is: true [2022-07-12 06:19:03,483 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 930 940) no Hoare annotation was computed. [2022-07-12 06:19:03,483 INFO L899 garLoopResultBuilder]: For program point L935-1(line 935) no Hoare annotation was computed. [2022-07-12 06:19:03,486 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:19:03,487 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:19:03,534 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:19:03 BoogieIcfgContainer [2022-07-12 06:19:03,538 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:19:03,538 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:19:03,539 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:19:03,539 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:19:03,539 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:53" (3/4) ... [2022-07-12 06:19:03,542 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:19:03,546 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-12 06:19:03,559 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:19:03,559 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:19:03,559 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-12 06:19:03,559 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:19:03,560 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:19:03,560 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:19:03,560 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:19:03,560 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:19:03,560 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-12 06:19:03,570 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-12 06:19:03,570 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:19:03,571 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:19:03,571 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:19:03,571 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:19:03,572 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:19:03,572 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:19:03,610 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:19:03,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:19:03,617 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:19:03,617 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-12 06:19:03,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || 0 == systemActive) [2022-07-12 06:19:03,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-07-12 06:19:03,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 <= methaneLevelCritical && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-12 06:19:03,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel) || !(methaneLevelCritical == 0)) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0)) || ((2 <= waterLevel && tmp == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || 0 == systemActive) [2022-07-12 06:19:03,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-07-12 06:19:03,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:19:03,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:19:03,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:19:03,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(methaneLevelCritical == 0) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-07-12 06:19:03,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:19:03,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-12 06:19:03,667 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:19:03,668 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:19:03,671 INFO L158 Benchmark]: Toolchain (without parser) took 11539.41ms. Allocated memory was 90.2MB in the beginning and 159.4MB in the end (delta: 69.2MB). Free memory was 67.4MB in the beginning and 109.5MB in the end (delta: -42.0MB). Peak memory consumption was 27.5MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,671 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 90.2MB. Free memory is still 64.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:19:03,672 INFO L158 Benchmark]: CACSL2BoogieTranslator took 699.50ms. Allocated memory is still 90.2MB. Free memory was 67.3MB in the beginning and 54.8MB in the end (delta: 12.4MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,672 INFO L158 Benchmark]: Boogie Procedure Inliner took 106.78ms. Allocated memory is still 90.2MB. Free memory was 54.6MB in the beginning and 52.1MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,672 INFO L158 Benchmark]: Boogie Preprocessor took 63.15ms. Allocated memory is still 90.2MB. Free memory was 52.1MB in the beginning and 50.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,672 INFO L158 Benchmark]: RCFGBuilder took 799.44ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 50.5MB in the beginning and 84.4MB in the end (delta: -33.9MB). Peak memory consumption was 23.3MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,673 INFO L158 Benchmark]: TraceAbstraction took 9735.44ms. Allocated memory was 109.1MB in the beginning and 159.4MB in the end (delta: 50.3MB). Free memory was 84.4MB in the beginning and 115.8MB in the end (delta: -31.4MB). Peak memory consumption was 94.1MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,673 INFO L158 Benchmark]: Witness Printer took 129.20ms. Allocated memory is still 159.4MB. Free memory was 115.8MB in the beginning and 109.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,675 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 90.2MB. Free memory is still 64.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 699.50ms. Allocated memory is still 90.2MB. Free memory was 67.3MB in the beginning and 54.8MB in the end (delta: 12.4MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 106.78ms. Allocated memory is still 90.2MB. Free memory was 54.6MB in the beginning and 52.1MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 63.15ms. Allocated memory is still 90.2MB. Free memory was 52.1MB in the beginning and 50.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 799.44ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 50.5MB in the beginning and 84.4MB in the end (delta: -33.9MB). Peak memory consumption was 23.3MB. Max. memory is 16.1GB. * TraceAbstraction took 9735.44ms. Allocated memory was 109.1MB in the beginning and 159.4MB in the end (delta: 50.3MB). Free memory was 84.4MB in the beginning and 115.8MB in the end (delta: -31.4MB). Peak memory consumption was 94.1MB. Max. memory is 16.1GB. * Witness Printer took 129.20ms. Allocated memory is still 159.4MB. Free memory was 115.8MB in the beginning and 109.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.6s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1509 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1467 mSDsluCounter, 4374 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3034 mSDsCounter, 497 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1824 IncrementalHoareTripleChecker+Invalid, 2321 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 497 mSolverCounterUnsat, 1340 mSDtfsCounter, 1824 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 339 GetRequests, 241 SyntacticMatches, 2 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 320 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=615occurred in iteration=9, InterpolantAutomatonStates: 86, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 62 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1319 PreInvPairs, 1604 NumberOfFragments, 1409 HoareAnnotationTreeSize, 1319 FomulaSimplifications, 2792 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 51 FomulaSimplificationsInter, 10182 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 682 NumberOfCodeBlocks, 682 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 671 ConstructedInterpolants, 0 QuantifiedInterpolants, 1144 SizeOfPredicates, 3 NumberOfNonLiveVariables, 542 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 107/110 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || 0 == systemActive) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(methaneLevelCritical == 0) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: ((((1 <= methaneLevelCritical && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: (!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel) || !(methaneLevelCritical == 0)) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0)) || ((2 <= waterLevel && tmp == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || 0 == systemActive) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-12 06:19:03,760 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE