./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:58:12,779 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:58:12,797 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:58:12,827 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:58:12,828 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:58:12,829 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:58:12,832 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:58:12,835 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:58:12,837 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:58:12,840 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:58:12,841 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:58:12,843 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:58:12,843 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:58:12,844 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:58:12,845 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:58:12,847 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:58:12,847 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:58:12,849 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:58:12,851 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:58:12,854 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:58:12,855 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:58:12,856 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:58:12,856 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:58:12,857 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:58:12,858 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:58:12,863 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:58:12,864 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:58:12,864 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:58:12,864 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:58:12,865 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:58:12,865 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:58:12,866 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:58:12,866 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:58:12,866 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:58:12,867 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:58:12,868 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:58:12,868 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:58:12,868 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:58:12,868 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:58:12,869 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:58:12,869 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:58:12,870 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:58:12,871 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:58:12,892 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:58:12,894 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:58:12,894 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:58:12,894 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:58:12,894 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:58:12,895 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:58:12,895 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:58:12,895 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:58:12,895 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:58:12,896 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:58:12,896 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:58:12,896 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:58:12,896 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:58:12,897 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:58:12,898 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:58:12,898 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:58:12,899 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:58:12,899 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:58:12,899 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:58:12,899 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:12,899 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:58:12,899 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:58:12,900 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:58:12,900 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:58:12,900 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:58:12,900 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:58:12,901 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:58:12,901 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:58:12,901 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f [2022-07-13 17:58:13,091 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:58:13,108 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:58:13,110 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:58:13,110 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:58:13,111 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:58:13,112 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2022-07-13 17:58:13,150 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f66fde67a/5bc5b3d0e4da44a986ca6a622130d40f/FLAG70b25af0a [2022-07-13 17:58:13,554 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:58:13,555 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2022-07-13 17:58:13,566 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f66fde67a/5bc5b3d0e4da44a986ca6a622130d40f/FLAG70b25af0a [2022-07-13 17:58:13,578 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f66fde67a/5bc5b3d0e4da44a986ca6a622130d40f [2022-07-13 17:58:13,580 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:58:13,581 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:58:13,583 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:13,583 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:58:13,586 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:58:13,587 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,587 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@751736de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13, skipping insertion in model container [2022-07-13 17:58:13,588 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,594 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:58:13,645 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:58:13,796 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2022-07-13 17:58:13,868 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:13,877 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:58:13,900 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2022-07-13 17:58:13,942 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:13,960 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:58:13,960 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13 WrapperNode [2022-07-13 17:58:13,960 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:13,961 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:13,961 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:58:13,961 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:58:13,966 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,989 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,011 INFO L137 Inliner]: procedures = 57, calls = 160, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 268 [2022-07-13 17:58:14,021 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:14,022 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:58:14,022 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:58:14,022 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:58:14,028 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,028 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,030 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,030 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,034 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,037 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,051 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,053 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:58:14,057 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:58:14,057 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:58:14,057 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:58:14,058 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:14,064 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:14,071 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:14,080 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:58:14,090 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:58:14,124 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:58:14,124 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:58:14,125 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:58:14,125 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:58:14,125 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:58:14,125 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:58:14,125 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:58:14,125 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:58:14,126 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:58:14,126 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:14,126 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:14,126 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:58:14,126 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:58:14,126 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:14,127 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:14,127 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-13 17:58:14,127 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-13 17:58:14,127 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 17:58:14,127 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 17:58:14,127 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:58:14,127 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:58:14,127 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:58:14,128 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:58:14,128 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:58:14,202 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:58:14,204 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:58:14,501 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:58:14,508 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:58:14,511 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:58:14,513 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:14 BoogieIcfgContainer [2022-07-13 17:58:14,519 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:58:14,521 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:58:14,521 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:58:14,524 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:58:14,524 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:58:13" (1/3) ... [2022-07-13 17:58:14,524 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6da43934 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:14, skipping insertion in model container [2022-07-13 17:58:14,525 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (2/3) ... [2022-07-13 17:58:14,525 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6da43934 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:14, skipping insertion in model container [2022-07-13 17:58:14,525 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:14" (3/3) ... [2022-07-13 17:58:14,527 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product61.cil.c [2022-07-13 17:58:14,537 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:58:14,538 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:58:14,580 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:58:14,586 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3be63ae1, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@26e193b0 [2022-07-13 17:58:14,586 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:58:14,594 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-07-13 17:58:14,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-07-13 17:58:14,605 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,606 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,606 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,611 INFO L85 PathProgramCache]: Analyzing trace with hash 1854857434, now seen corresponding path program 1 times [2022-07-13 17:58:14,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932955484] [2022-07-13 17:58:14,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:14,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,811 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932955484] [2022-07-13 17:58:14,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932955484] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,813 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:58:14,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166239074] [2022-07-13 17:58:14,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:58:14,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:58:14,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:14,840 INFO L87 Difference]: Start difference. First operand has 108 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:14,882 INFO L93 Difference]: Finished difference Result 208 states and 281 transitions. [2022-07-13 17:58:14,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:58:14,884 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-07-13 17:58:14,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:14,894 INFO L225 Difference]: With dead ends: 208 [2022-07-13 17:58:14,895 INFO L226 Difference]: Without dead ends: 99 [2022-07-13 17:58:14,898 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:14,901 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:14,902 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:14,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-07-13 17:58:14,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2022-07-13 17:58:14,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-13 17:58:14,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 128 transitions. [2022-07-13 17:58:14,944 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 128 transitions. Word has length 23 [2022-07-13 17:58:14,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:14,944 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 128 transitions. [2022-07-13 17:58:14,945 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,945 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 128 transitions. [2022-07-13 17:58:14,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-13 17:58:14,948 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,948 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,948 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:58:14,949 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,950 INFO L85 PathProgramCache]: Analyzing trace with hash 1310134844, now seen corresponding path program 1 times [2022-07-13 17:58:14,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386195138] [2022-07-13 17:58:14,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:58:15,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:15,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386195138] [2022-07-13 17:58:15,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [386195138] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,009 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,009 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:15,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705423095] [2022-07-13 17:58:15,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:15,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:15,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:15,011 INFO L87 Difference]: Start difference. First operand 99 states and 128 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:15,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,029 INFO L93 Difference]: Finished difference Result 164 states and 212 transitions. [2022-07-13 17:58:15,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:15,030 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-07-13 17:58:15,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,032 INFO L225 Difference]: With dead ends: 164 [2022-07-13 17:58:15,032 INFO L226 Difference]: Without dead ends: 90 [2022-07-13 17:58:15,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:15,042 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 12 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,044 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:15,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-13 17:58:15,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-13 17:58:15,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 65 states have (on average 1.323076923076923) internal successors, (86), 74 states have internal predecessors, (86), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-13 17:58:15,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2022-07-13 17:58:15,057 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 24 [2022-07-13 17:58:15,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,058 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2022-07-13 17:58:15,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:15,059 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2022-07-13 17:58:15,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-13 17:58:15,061 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,061 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:58:15,061 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,062 INFO L85 PathProgramCache]: Analyzing trace with hash 2011182624, now seen corresponding path program 1 times [2022-07-13 17:58:15,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1328881528] [2022-07-13 17:58:15,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:15,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:15,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1328881528] [2022-07-13 17:58:15,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1328881528] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:15,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524029991] [2022-07-13 17:58:15,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:15,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:15,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:15,136 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:15,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,151 INFO L93 Difference]: Finished difference Result 173 states and 226 transitions. [2022-07-13 17:58:15,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:15,153 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-07-13 17:58:15,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,154 INFO L225 Difference]: With dead ends: 173 [2022-07-13 17:58:15,154 INFO L226 Difference]: Without dead ends: 90 [2022-07-13 17:58:15,154 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:15,155 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 98 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 114 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:15,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-13 17:58:15,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-13 17:58:15,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 74 states have internal predecessors, (85), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-13 17:58:15,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2022-07-13 17:58:15,167 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 28 [2022-07-13 17:58:15,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,167 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2022-07-13 17:58:15,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:15,167 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2022-07-13 17:58:15,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-07-13 17:58:15,169 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,169 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,169 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:58:15,169 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,170 INFO L85 PathProgramCache]: Analyzing trace with hash -1454995953, now seen corresponding path program 1 times [2022-07-13 17:58:15,170 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980867177] [2022-07-13 17:58:15,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:15,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:15,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:15,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:58:15,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:15,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980867177] [2022-07-13 17:58:15,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980867177] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,255 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,255 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:15,255 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2135395711] [2022-07-13 17:58:15,255 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:15,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,256 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:15,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:15,256 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:58:15,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,466 INFO L93 Difference]: Finished difference Result 258 states and 327 transitions. [2022-07-13 17:58:15,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:15,467 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 43 [2022-07-13 17:58:15,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,468 INFO L225 Difference]: With dead ends: 258 [2022-07-13 17:58:15,468 INFO L226 Difference]: Without dead ends: 175 [2022-07-13 17:58:15,469 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:15,470 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 213 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 312 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:15,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2022-07-13 17:58:15,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 169. [2022-07-13 17:58:15,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 123 states have (on average 1.2357723577235773) internal successors, (152), 132 states have internal predecessors, (152), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-13 17:58:15,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 203 transitions. [2022-07-13 17:58:15,503 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 203 transitions. Word has length 43 [2022-07-13 17:58:15,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,503 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 203 transitions. [2022-07-13 17:58:15,503 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:58:15,503 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 203 transitions. [2022-07-13 17:58:15,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-13 17:58:15,504 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,504 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,505 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:58:15,505 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,505 INFO L85 PathProgramCache]: Analyzing trace with hash 541296903, now seen corresponding path program 1 times [2022-07-13 17:58:15,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [859853562] [2022-07-13 17:58:15,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,506 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:15,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:15,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-13 17:58:15,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:15,603 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [859853562] [2022-07-13 17:58:15,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [859853562] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,604 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:15,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011750501] [2022-07-13 17:58:15,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:15,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:15,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:15,605 INFO L87 Difference]: Start difference. First operand 169 states and 203 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,813 INFO L93 Difference]: Finished difference Result 185 states and 219 transitions. [2022-07-13 17:58:15,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-13 17:58:15,814 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-07-13 17:58:15,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,815 INFO L225 Difference]: With dead ends: 185 [2022-07-13 17:58:15,815 INFO L226 Difference]: Without dead ends: 183 [2022-07-13 17:58:15,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:15,816 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 149 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 434 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:15,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-07-13 17:58:15,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 169. [2022-07-13 17:58:15,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 132 states have internal predecessors, (150), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-13 17:58:15,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 201 transitions. [2022-07-13 17:58:15,838 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 201 transitions. Word has length 49 [2022-07-13 17:58:15,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,839 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 201 transitions. [2022-07-13 17:58:15,839 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,839 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 201 transitions. [2022-07-13 17:58:15,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-13 17:58:15,840 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,840 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,840 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:58:15,840 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,840 INFO L85 PathProgramCache]: Analyzing trace with hash -543497229, now seen corresponding path program 1 times [2022-07-13 17:58:15,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [957801265] [2022-07-13 17:58:15,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:15,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:15,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:15,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-13 17:58:15,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,921 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:15,922 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [957801265] [2022-07-13 17:58:15,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [957801265] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,923 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,923 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:15,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453045932] [2022-07-13 17:58:15,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,925 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:15,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:15,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:15,926 INFO L87 Difference]: Start difference. First operand 169 states and 201 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:16,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:16,044 INFO L93 Difference]: Finished difference Result 341 states and 414 transitions. [2022-07-13 17:58:16,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:16,045 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-07-13 17:58:16,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:16,046 INFO L225 Difference]: With dead ends: 341 [2022-07-13 17:58:16,046 INFO L226 Difference]: Without dead ends: 179 [2022-07-13 17:58:16,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:16,048 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 76 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:16,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 402 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:16,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2022-07-13 17:58:16,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 172. [2022-07-13 17:58:16,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 126 states have (on average 1.2142857142857142) internal successors, (153), 135 states have internal predecessors, (153), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-13 17:58:16,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 204 transitions. [2022-07-13 17:58:16,059 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 204 transitions. Word has length 59 [2022-07-13 17:58:16,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:16,059 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 204 transitions. [2022-07-13 17:58:16,060 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:16,060 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 204 transitions. [2022-07-13 17:58:16,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-13 17:58:16,061 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:16,061 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:16,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:58:16,061 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:16,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:16,062 INFO L85 PathProgramCache]: Analyzing trace with hash -268737615, now seen corresponding path program 1 times [2022-07-13 17:58:16,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:16,062 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651276409] [2022-07-13 17:58:16,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:16,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:16,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:16,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:16,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:16,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-13 17:58:16,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,123 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:16,123 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:16,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651276409] [2022-07-13 17:58:16,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651276409] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:16,123 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:16,123 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:16,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009418045] [2022-07-13 17:58:16,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:16,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:16,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:16,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:16,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:16,125 INFO L87 Difference]: Start difference. First operand 172 states and 204 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:16,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:16,279 INFO L93 Difference]: Finished difference Result 350 states and 424 transitions. [2022-07-13 17:58:16,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:16,280 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-07-13 17:58:16,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:16,281 INFO L225 Difference]: With dead ends: 350 [2022-07-13 17:58:16,281 INFO L226 Difference]: Without dead ends: 185 [2022-07-13 17:58:16,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:16,283 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 177 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:16,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 308 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:16,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-07-13 17:58:16,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 174. [2022-07-13 17:58:16,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2109375) internal successors, (155), 137 states have internal predecessors, (155), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-13 17:58:16,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 206 transitions. [2022-07-13 17:58:16,301 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 206 transitions. Word has length 59 [2022-07-13 17:58:16,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:16,301 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 206 transitions. [2022-07-13 17:58:16,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:16,301 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 206 transitions. [2022-07-13 17:58:16,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-13 17:58:16,302 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:16,302 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:16,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:58:16,303 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:16,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:16,303 INFO L85 PathProgramCache]: Analyzing trace with hash 1782246383, now seen corresponding path program 1 times [2022-07-13 17:58:16,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:16,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1844665636] [2022-07-13 17:58:16,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:16,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:16,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:16,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:16,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:16,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-13 17:58:16,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,371 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:16,373 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:16,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1844665636] [2022-07-13 17:58:16,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1844665636] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:16,374 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:16,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:16,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367898745] [2022-07-13 17:58:16,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:16,374 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:16,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:16,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:16,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:16,376 INFO L87 Difference]: Start difference. First operand 174 states and 206 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 17:58:16,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:16,564 INFO L93 Difference]: Finished difference Result 465 states and 581 transitions. [2022-07-13 17:58:16,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:16,564 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2022-07-13 17:58:16,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:16,566 INFO L225 Difference]: With dead ends: 465 [2022-07-13 17:58:16,566 INFO L226 Difference]: Without dead ends: 298 [2022-07-13 17:58:16,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:16,567 INFO L413 NwaCegarLoop]: 155 mSDtfsCounter, 217 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:16,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 337 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:16,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-07-13 17:58:16,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 296. [2022-07-13 17:58:16,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 218 states have (on average 1.2064220183486238) internal successors, (263), 231 states have internal predecessors, (263), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2022-07-13 17:58:16,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 360 transitions. [2022-07-13 17:58:16,581 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 360 transitions. Word has length 59 [2022-07-13 17:58:16,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:16,581 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 360 transitions. [2022-07-13 17:58:16,582 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 17:58:16,582 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 360 transitions. [2022-07-13 17:58:16,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-13 17:58:16,583 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:16,585 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:16,586 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:58:16,586 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:16,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:16,586 INFO L85 PathProgramCache]: Analyzing trace with hash -1601702199, now seen corresponding path program 1 times [2022-07-13 17:58:16,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:16,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1641592096] [2022-07-13 17:58:16,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:16,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:16,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:16,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:16,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:16,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:16,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-13 17:58:16,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,712 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:16,712 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:16,712 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1641592096] [2022-07-13 17:58:16,712 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1641592096] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:16,712 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:16,713 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-13 17:58:16,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1276917748] [2022-07-13 17:58:16,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:16,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-13 17:58:16,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:16,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-13 17:58:16,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:16,714 INFO L87 Difference]: Start difference. First operand 296 states and 360 transitions. Second operand has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:58:17,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:17,387 INFO L93 Difference]: Finished difference Result 916 states and 1158 transitions. [2022-07-13 17:58:17,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-13 17:58:17,391 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2022-07-13 17:58:17,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:17,394 INFO L225 Difference]: With dead ends: 916 [2022-07-13 17:58:17,394 INFO L226 Difference]: Without dead ends: 627 [2022-07-13 17:58:17,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-07-13 17:58:17,396 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 525 mSDsluCounter, 380 mSDsCounter, 0 mSdLazyCounter, 861 mSolverCounterSat, 282 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 533 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 1143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 282 IncrementalHoareTripleChecker+Valid, 861 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:17,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [533 Valid, 483 Invalid, 1143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [282 Valid, 861 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-13 17:58:17,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 627 states. [2022-07-13 17:58:17,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 627 to 602. [2022-07-13 17:58:17,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 437 states have (on average 1.1807780320366132) internal successors, (516), 467 states have internal predecessors, (516), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2022-07-13 17:58:17,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 737 transitions. [2022-07-13 17:58:17,420 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 737 transitions. Word has length 63 [2022-07-13 17:58:17,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:17,420 INFO L495 AbstractCegarLoop]: Abstraction has 602 states and 737 transitions. [2022-07-13 17:58:17,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:58:17,420 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 737 transitions. [2022-07-13 17:58:17,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-07-13 17:58:17,422 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:17,422 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:17,422 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:58:17,422 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:17,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:17,423 INFO L85 PathProgramCache]: Analyzing trace with hash 1570194048, now seen corresponding path program 1 times [2022-07-13 17:58:17,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:17,423 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519948833] [2022-07-13 17:58:17,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:17,423 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:17,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:17,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:17,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:17,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:17,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:17,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:17,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:58:17,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-13 17:58:17,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-13 17:58:17,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:17,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-07-13 17:58:17,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 17:58:17,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:17,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-13 17:58:17,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,613 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-13 17:58:17,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:17,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519948833] [2022-07-13 17:58:17,614 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1519948833] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:17,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1586482956] [2022-07-13 17:58:17,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:17,614 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:17,615 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:17,616 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:17,621 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:58:17,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,706 INFO L263 TraceCheckSpWp]: Trace formula consists of 521 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-13 17:58:17,711 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:17,887 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-13 17:58:17,888 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:17,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1586482956] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:17,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:17,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-07-13 17:58:17,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [361288314] [2022-07-13 17:58:17,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:17,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:58:17,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:17,890 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:58:17,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:58:17,890 INFO L87 Difference]: Start difference. First operand 602 states and 737 transitions. Second operand has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 17:58:18,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:18,019 INFO L93 Difference]: Finished difference Result 1302 states and 1594 transitions. [2022-07-13 17:58:18,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:18,020 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2022-07-13 17:58:18,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:18,021 INFO L225 Difference]: With dead ends: 1302 [2022-07-13 17:58:18,021 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:58:18,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-07-13 17:58:18,024 INFO L413 NwaCegarLoop]: 200 mSDtfsCounter, 76 mSDsluCounter, 693 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 893 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:18,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 893 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:18,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:58:18,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:58:18,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:58:18,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:58:18,024 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2022-07-13 17:58:18,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:18,025 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:58:18,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 17:58:18,025 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:58:18,025 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:58:18,027 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:58:18,047 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:18,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-13 17:58:18,241 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:58:20,415 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 473 480) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:20,415 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 473 480) no Hoare annotation was computed. [2022-07-13 17:58:20,415 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 473 480) no Hoare annotation was computed. [2022-07-13 17:58:20,415 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 363 369) no Hoare annotation was computed. [2022-07-13 17:58:20,415 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 363 369) the Hoare annotation is: true [2022-07-13 17:58:20,416 INFO L895 garLoopResultBuilder]: At program point L411(line 411) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:20,416 INFO L895 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:20,416 INFO L899 garLoopResultBuilder]: For program point L405(lines 405 413) no Hoare annotation was computed. [2022-07-13 17:58:20,417 INFO L899 garLoopResultBuilder]: For program point L401(lines 401 418) no Hoare annotation was computed. [2022-07-13 17:58:20,417 INFO L895 garLoopResultBuilder]: At program point L416(line 416) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse3 .cse0 .cse2))) [2022-07-13 17:58:20,417 INFO L899 garLoopResultBuilder]: For program point L416-1(lines 397 421) no Hoare annotation was computed. [2022-07-13 17:58:20,417 INFO L895 garLoopResultBuilder]: At program point L571(lines 556 574) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:20,417 INFO L899 garLoopResultBuilder]: For program point L565(lines 565 569) no Hoare annotation was computed. [2022-07-13 17:58:20,418 INFO L899 garLoopResultBuilder]: For program point L565-2(lines 565 569) no Hoare annotation was computed. [2022-07-13 17:58:20,418 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 397 421) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-13 17:58:20,418 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 397 421) no Hoare annotation was computed. [2022-07-13 17:58:20,418 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:20,418 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-07-13 17:58:20,419 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0) (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-07-13 17:58:20,421 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-07-13 17:58:20,421 INFO L899 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2022-07-13 17:58:20,421 INFO L899 garLoopResultBuilder]: For program point L217(lines 217 230) no Hoare annotation was computed. [2022-07-13 17:58:20,422 INFO L895 garLoopResultBuilder]: At program point L217-1(lines 209 233) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0))) (let ((.cse2 (not .cse6)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse0 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) .cse2 (and .cse3 .cse4 .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and .cse3 .cse5 .cse0) (and .cse5 .cse4 .cse0 .cse6))) (or .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse5 .cse4 .cse6) (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4 .cse1))))) [2022-07-13 17:58:20,422 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 339 362) no Hoare annotation was computed. [2022-07-13 17:58:20,422 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-07-13 17:58:20,422 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse3)) (or .cse3 .cse1 .cse2))) [2022-07-13 17:58:20,422 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2022-07-13 17:58:20,423 INFO L895 garLoopResultBuilder]: At program point L437(line 437) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-13 17:58:20,423 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse3)) (or .cse3 .cse1 .cse2))) [2022-07-13 17:58:20,423 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse3)) (or .cse3 .cse1 .cse2))) [2022-07-13 17:58:20,423 INFO L899 garLoopResultBuilder]: For program point L429-1(line 429) no Hoare annotation was computed. [2022-07-13 17:58:20,423 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-13 17:58:20,424 INFO L895 garLoopResultBuilder]: At program point L442-1(lines 423 447) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse0 .cse1) .cse2 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse1 .cse4)) (or (and .cse1 .cse4) .cse2 (and .cse3 .cse0) (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4)))) [2022-07-13 17:58:20,424 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse0 .cse1) .cse2 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse1 .cse4)) (or (and .cse1 .cse4) .cse2 (and .cse3 .cse0) (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4)))) [2022-07-13 17:58:20,426 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 342 361) no Hoare annotation was computed. [2022-07-13 17:58:20,426 INFO L899 garLoopResultBuilder]: For program point L215-1(line 215) no Hoare annotation was computed. [2022-07-13 17:58:20,426 INFO L899 garLoopResultBuilder]: For program point L203(line 203) no Hoare annotation was computed. [2022-07-13 17:58:20,427 INFO L895 garLoopResultBuilder]: At program point L497(lines 492 500) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0))) (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:20,427 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 339 362) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-13 17:58:20,427 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 439) no Hoare annotation was computed. [2022-07-13 17:58:20,427 INFO L895 garLoopResultBuilder]: At program point L204(lines 199 206) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:20,428 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 444) no Hoare annotation was computed. [2022-07-13 17:58:20,428 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 339 362) no Hoare annotation was computed. [2022-07-13 17:58:20,428 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 203) no Hoare annotation was computed. [2022-07-13 17:58:20,428 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 237 266) no Hoare annotation was computed. [2022-07-13 17:58:20,428 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 237 266) the Hoare annotation is: true [2022-07-13 17:58:20,428 INFO L899 garLoopResultBuilder]: For program point L251(lines 251 255) no Hoare annotation was computed. [2022-07-13 17:58:20,428 INFO L902 garLoopResultBuilder]: At program point L251-1(lines 251 255) the Hoare annotation is: true [2022-07-13 17:58:20,429 INFO L899 garLoopResultBuilder]: For program point L248(line 248) no Hoare annotation was computed. [2022-07-13 17:58:20,429 INFO L902 garLoopResultBuilder]: At program point L247-2(lines 247 261) the Hoare annotation is: true [2022-07-13 17:58:20,429 INFO L902 garLoopResultBuilder]: At program point L243(line 243) the Hoare annotation is: true [2022-07-13 17:58:20,429 INFO L899 garLoopResultBuilder]: For program point L243-1(line 243) no Hoare annotation was computed. [2022-07-13 17:58:20,429 INFO L902 garLoopResultBuilder]: At program point L262(lines 237 266) the Hoare annotation is: true [2022-07-13 17:58:20,429 INFO L899 garLoopResultBuilder]: For program point L258(line 258) no Hoare annotation was computed. [2022-07-13 17:58:20,429 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2022-07-13 17:58:20,429 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-07-13 17:58:20,429 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-07-13 17:58:20,430 INFO L899 garLoopResultBuilder]: For program point L320(lines 320 327) no Hoare annotation was computed. [2022-07-13 17:58:20,430 INFO L899 garLoopResultBuilder]: For program point L320-2(lines 320 327) no Hoare annotation was computed. [2022-07-13 17:58:20,430 INFO L899 garLoopResultBuilder]: For program point L622(lines 622 626) no Hoare annotation was computed. [2022-07-13 17:58:20,430 INFO L895 garLoopResultBuilder]: At program point L622-2(lines 616 627) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-07-13 17:58:20,431 INFO L902 garLoopResultBuilder]: At program point L329(lines 310 332) the Hoare annotation is: true [2022-07-13 17:58:20,431 INFO L895 garLoopResultBuilder]: At program point L296(lines 292 298) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:20,431 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:58:20,431 INFO L899 garLoopResultBuilder]: For program point L606(lines 606 612) no Hoare annotation was computed. [2022-07-13 17:58:20,432 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:58:20,432 INFO L899 garLoopResultBuilder]: For program point L606-1(lines 606 612) no Hoare annotation was computed. [2022-07-13 17:58:20,432 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:58:20,433 INFO L902 garLoopResultBuilder]: At program point L635(lines 576 639) the Hoare annotation is: true [2022-07-13 17:58:20,433 INFO L895 garLoopResultBuilder]: At program point L598(line 598) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-13 17:58:20,433 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:58:20,433 INFO L895 garLoopResultBuilder]: At program point L632(lines 585 633) the Hoare annotation is: false [2022-07-13 17:58:20,433 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:20,433 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:20,434 INFO L899 garLoopResultBuilder]: For program point L587(lines 586 631) no Hoare annotation was computed. [2022-07-13 17:58:20,434 INFO L899 garLoopResultBuilder]: For program point L616(lines 616 627) no Hoare annotation was computed. [2022-07-13 17:58:20,434 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-13 17:58:20,434 INFO L895 garLoopResultBuilder]: At program point L629(lines 586 631) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-13 17:58:20,434 INFO L899 garLoopResultBuilder]: For program point L596(lines 596 602) no Hoare annotation was computed. [2022-07-13 17:58:20,434 INFO L899 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2022-07-13 17:58:20,434 INFO L902 garLoopResultBuilder]: At program point L307(lines 300 309) the Hoare annotation is: true [2022-07-13 17:58:20,434 INFO L899 garLoopResultBuilder]: For program point L588(lines 588 592) no Hoare annotation was computed. [2022-07-13 17:58:20,435 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:20,435 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 371 395) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-13 17:58:20,435 INFO L895 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-07-13 17:58:20,435 INFO L899 garLoopResultBuilder]: For program point L463(lines 463 469) no Hoare annotation was computed. [2022-07-13 17:58:20,435 INFO L895 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:20,436 INFO L895 garLoopResultBuilder]: At program point L463-2(lines 456 472) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~5#1|) .cse3)))) [2022-07-13 17:58:20,436 INFO L899 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2022-07-13 17:58:20,436 INFO L895 garLoopResultBuilder]: At program point L552(lines 537 555) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4)))) [2022-07-13 17:58:20,436 INFO L895 garLoopResultBuilder]: At program point L453(lines 448 455) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-07-13 17:58:20,436 INFO L899 garLoopResultBuilder]: For program point L546(lines 546 550) no Hoare annotation was computed. [2022-07-13 17:58:20,436 INFO L895 garLoopResultBuilder]: At program point L385(line 385) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse2)) (.cse1 (not .cse2))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)))))) [2022-07-13 17:58:20,436 INFO L899 garLoopResultBuilder]: For program point L546-2(lines 546 550) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 371 395) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point L379(lines 379 387) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point L375(lines 375 392) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L895 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point L390-1(lines 371 395) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-07-13 17:58:20,437 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-13 17:58:20,438 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 481 491) the Hoare annotation is: true [2022-07-13 17:58:20,438 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 481 491) no Hoare annotation was computed. [2022-07-13 17:58:20,438 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 481 491) no Hoare annotation was computed. [2022-07-13 17:58:20,438 INFO L902 garLoopResultBuilder]: At program point L486(line 486) the Hoare annotation is: true [2022-07-13 17:58:20,438 INFO L899 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2022-07-13 17:58:20,441 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:20,442 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:58:20,474 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:58:20 BoogieIcfgContainer [2022-07-13 17:58:20,474 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:58:20,474 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:58:20,475 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:58:20,475 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:58:20,475 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:14" (3/4) ... [2022-07-13 17:58:20,477 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:58:20,481 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 17:58:20,481 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:58:20,481 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:20,482 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-13 17:58:20,487 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-13 17:58:20,487 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:58:20,487 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:58:20,488 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:58:20,488 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:58:20,488 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:20,489 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:20,504 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:20,505 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-07-13 17:58:20,505 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0) && 1 == systemActive)) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && methaneLevelCritical == tmp) && 2 <= waterLevel)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-13 17:58:20,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:20,507 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-13 17:58:20,521 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:58:20,522 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:58:20,523 INFO L158 Benchmark]: Toolchain (without parser) took 6941.64ms. Allocated memory was 96.5MB in the beginning and 180.4MB in the end (delta: 83.9MB). Free memory was 65.3MB in the beginning and 120.2MB in the end (delta: -54.9MB). Peak memory consumption was 29.8MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,523 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 96.5MB. Free memory was 53.1MB in the beginning and 53.1MB in the end (delta: 38.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:58:20,524 INFO L158 Benchmark]: CACSL2BoogieTranslator took 377.84ms. Allocated memory was 96.5MB in the beginning and 123.7MB in the end (delta: 27.3MB). Free memory was 65.1MB in the beginning and 90.9MB in the end (delta: -25.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,524 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.19ms. Allocated memory is still 123.7MB. Free memory was 90.9MB in the beginning and 88.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,524 INFO L158 Benchmark]: Boogie Preprocessor took 34.12ms. Allocated memory is still 123.7MB. Free memory was 88.6MB in the beginning and 87.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,524 INFO L158 Benchmark]: RCFGBuilder took 462.81ms. Allocated memory is still 123.7MB. Free memory was 86.7MB in the beginning and 99.7MB in the end (delta: -13.0MB). Peak memory consumption was 23.8MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,525 INFO L158 Benchmark]: TraceAbstraction took 5952.81ms. Allocated memory was 123.7MB in the beginning and 180.4MB in the end (delta: 56.6MB). Free memory was 99.1MB in the beginning and 126.5MB in the end (delta: -27.4MB). Peak memory consumption was 87.2MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,525 INFO L158 Benchmark]: Witness Printer took 48.09ms. Allocated memory is still 180.4MB. Free memory was 126.5MB in the beginning and 120.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:58:20,526 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 96.5MB. Free memory was 53.1MB in the beginning and 53.1MB in the end (delta: 38.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 377.84ms. Allocated memory was 96.5MB in the beginning and 123.7MB in the end (delta: 27.3MB). Free memory was 65.1MB in the beginning and 90.9MB in the end (delta: -25.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.19ms. Allocated memory is still 123.7MB. Free memory was 90.9MB in the beginning and 88.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.12ms. Allocated memory is still 123.7MB. Free memory was 88.6MB in the beginning and 87.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 462.81ms. Allocated memory is still 123.7MB. Free memory was 86.7MB in the beginning and 99.7MB in the end (delta: -13.0MB). Peak memory consumption was 23.8MB. Max. memory is 16.1GB. * TraceAbstraction took 5952.81ms. Allocated memory was 123.7MB in the beginning and 180.4MB in the end (delta: 56.6MB). Free memory was 99.1MB in the beginning and 126.5MB in the end (delta: -27.4MB). Peak memory consumption was 87.2MB. Max. memory is 16.1GB. * Witness Printer took 48.09ms. Allocated memory is still 180.4MB. Free memory was 126.5MB in the beginning and 120.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 203]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.9s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1582 SdHoareTripleChecker+Valid, 1.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1543 mSDsluCounter, 3634 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2340 mSDsCounter, 566 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1738 IncrementalHoareTripleChecker+Invalid, 2304 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 566 mSolverCounterUnsat, 1294 mSDtfsCounter, 1738 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 325 GetRequests, 232 SyntacticMatches, 2 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 317 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=602occurred in iteration=9, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 65 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1249 PreInvPairs, 1521 NumberOfFragments, 1405 HoareAnnotationTreeSize, 1249 FomulaSimplifications, 2738 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 49 FomulaSimplificationsInter, 10293 FormulaSimplificationTreeSizeReductionInter, 1.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 649 NumberOfCodeBlocks, 649 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 638 ConstructedInterpolants, 0 QuantifiedInterpolants, 1105 SizeOfPredicates, 3 NumberOfNonLiveVariables, 521 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 96/108 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 310]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: (((((((tmp == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0) && 1 == systemActive)) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && methaneLevelCritical == tmp) && 2 <= waterLevel)) - InvariantResult [Line: 492]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 448]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:58:20,564 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE