./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:20:34,006 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:20:34,110 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:20:34,116 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:20:34,117 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:20:34,143 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:20:34,144 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:20:34,145 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:20:34,146 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:20:34,146 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:20:34,147 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:20:34,148 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:20:34,149 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:20:34,150 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:20:34,150 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:20:34,151 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:20:34,152 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:20:34,152 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:20:34,153 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:20:34,154 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:20:34,154 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:20:34,155 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:20:34,156 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:20:34,156 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:20:34,157 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:20:34,157 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:20:34,158 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:20:34,159 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:20:34,159 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:20:34,160 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:20:34,160 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:20:34,161 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:20:34,161 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:20:34,161 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:20:34,162 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:20:34,162 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:20:34,162 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:20:34,162 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:20:34,163 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:20:34,163 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:20:34,163 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:20:34,164 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:20:34,164 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2023-11-21 22:20:34,447 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:20:34,480 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:20:34,483 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:20:34,485 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:20:34,486 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:20:34,488 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2023-11-21 22:20:37,860 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:20:38,182 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:20:38,183 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2023-11-21 22:20:38,200 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/data/fa97d3f9b/be9486da88ec4bfdbe155fdad046801e/FLAGb6c2ad2ef [2023-11-21 22:20:38,213 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/data/fa97d3f9b/be9486da88ec4bfdbe155fdad046801e [2023-11-21 22:20:38,216 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:20:38,218 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:20:38,219 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:20:38,219 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:20:38,225 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:20:38,227 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,228 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1348ce5d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38, skipping insertion in model container [2023-11-21 22:20:38,228 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,277 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:20:38,560 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2023-11-21 22:20:38,660 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:20:38,675 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:20:38,686 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-21 22:20:38,688 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] [2023-11-21 22:20:38,689 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] [2023-11-21 22:20:38,689 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] [2023-11-21 22:20:38,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] [2023-11-21 22:20:38,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] [2023-11-21 22:20:38,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] [2023-11-21 22:20:38,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] [2023-11-21 22:20:38,731 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2023-11-21 22:20:38,790 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:20:38,811 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:20:38,812 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38 WrapperNode [2023-11-21 22:20:38,812 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:20:38,813 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:20:38,814 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:20:38,814 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:20:38,822 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,848 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,904 INFO L138 Inliner]: procedures = 60, calls = 108, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 241 [2023-11-21 22:20:38,904 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:20:38,905 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:20:38,905 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:20:38,905 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:20:38,914 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,914 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,917 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,930 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:20:38,931 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,931 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,937 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,942 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,944 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,946 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,950 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:20:38,951 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:20:38,951 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:20:38,951 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:20:38,952 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (1/1) ... [2023-11-21 22:20:38,958 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:20:38,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:39,014 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:20:39,050 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:20:39,063 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:20:39,063 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:20:39,064 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:20:39,064 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:20:39,064 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:20:39,064 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:20:39,064 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:20:39,064 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:20:39,065 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:20:39,065 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:20:39,065 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:20:39,066 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:20:39,066 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:20:39,066 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-21 22:20:39,085 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-21 22:20:39,085 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:20:39,085 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:20:39,086 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:20:39,086 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:20:39,086 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:20:39,086 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:20:39,086 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:20:39,225 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:20:39,232 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:20:39,560 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:20:39,749 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:20:39,750 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:20:39,752 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:39 BoogieIcfgContainer [2023-11-21 22:20:39,752 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:20:39,755 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:20:39,756 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:20:39,759 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:20:39,760 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:20:38" (1/3) ... [2023-11-21 22:20:39,762 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6d246fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:20:39, skipping insertion in model container [2023-11-21 22:20:39,763 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:38" (2/3) ... [2023-11-21 22:20:39,764 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6d246fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:20:39, skipping insertion in model container [2023-11-21 22:20:39,764 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:39" (3/3) ... [2023-11-21 22:20:39,766 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2023-11-21 22:20:39,786 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:20:39,786 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:20:39,839 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:20:39,846 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@637441d3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:20:39,846 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:20:39,850 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 57 states have internal predecessors, (67), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-21 22:20:39,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-21 22:20:39,860 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:39,861 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:39,862 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:39,867 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:39,868 INFO L85 PathProgramCache]: Analyzing trace with hash 1727210022, now seen corresponding path program 1 times [2023-11-21 22:20:39,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:39,879 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1716068797] [2023-11-21 22:20:39,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:39,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:40,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:40,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:20:40,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,151 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:40,152 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:40,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1716068797] [2023-11-21 22:20:40,153 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1716068797] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:40,155 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:40,156 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:20:40,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549403119] [2023-11-21 22:20:40,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:40,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:20:40,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:40,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:20:40,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:20:40,215 INFO L87 Difference]: Start difference. First operand has 74 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 57 states have internal predecessors, (67), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:40,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:40,338 INFO L93 Difference]: Finished difference Result 146 states and 203 transitions. [2023-11-21 22:20:40,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:20:40,341 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-11-21 22:20:40,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:40,353 INFO L225 Difference]: With dead ends: 146 [2023-11-21 22:20:40,354 INFO L226 Difference]: Without dead ends: 69 [2023-11-21 22:20:40,360 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:20:40,365 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:40,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 79 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:40,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-21 22:20:40,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-21 22:20:40,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 43 states have (on average 1.372093023255814) internal successors, (59), 53 states have internal predecessors, (59), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-21 22:20:40,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 92 transitions. [2023-11-21 22:20:40,436 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 92 transitions. Word has length 21 [2023-11-21 22:20:40,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:40,437 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 92 transitions. [2023-11-21 22:20:40,437 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:40,438 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 92 transitions. [2023-11-21 22:20:40,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-21 22:20:40,444 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:40,444 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:40,444 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:20:40,445 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:40,446 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:40,446 INFO L85 PathProgramCache]: Analyzing trace with hash 1602639805, now seen corresponding path program 1 times [2023-11-21 22:20:40,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:40,447 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1197925934] [2023-11-21 22:20:40,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:40,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:40,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:20:40,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:20:40,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,619 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:40,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:40,620 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1197925934] [2023-11-21 22:20:40,621 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1197925934] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:40,621 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:40,621 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:20:40,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943038619] [2023-11-21 22:20:40,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:40,623 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:20:40,623 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:40,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:20:40,625 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:40,625 INFO L87 Difference]: Start difference. First operand 69 states and 92 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:40,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:40,694 INFO L93 Difference]: Finished difference Result 110 states and 146 transitions. [2023-11-21 22:20:40,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:20:40,695 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-21 22:20:40,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:40,697 INFO L225 Difference]: With dead ends: 110 [2023-11-21 22:20:40,697 INFO L226 Difference]: Without dead ends: 61 [2023-11-21 22:20:40,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:40,703 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 14 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:40,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 114 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:20:40,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-21 22:20:40,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-21 22:20:40,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 38 states have (on average 1.394736842105263) internal successors, (53), 48 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-21 22:20:40,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 81 transitions. [2023-11-21 22:20:40,725 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 81 transitions. Word has length 22 [2023-11-21 22:20:40,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:40,725 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 81 transitions. [2023-11-21 22:20:40,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:40,726 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 81 transitions. [2023-11-21 22:20:40,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-21 22:20:40,737 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:40,737 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:40,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:20:40,738 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:40,738 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:40,739 INFO L85 PathProgramCache]: Analyzing trace with hash -1984871609, now seen corresponding path program 1 times [2023-11-21 22:20:40,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:40,739 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982335597] [2023-11-21 22:20:40,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:40,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:40,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:20:40,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-21 22:20:40,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:40,928 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:40,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:40,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982335597] [2023-11-21 22:20:40,930 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982335597] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:40,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:40,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:20:40,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [5149019] [2023-11-21 22:20:40,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:40,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:20:40,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:40,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:20:40,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:40,933 INFO L87 Difference]: Start difference. First operand 61 states and 81 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:20:41,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:41,009 INFO L93 Difference]: Finished difference Result 179 states and 240 transitions. [2023-11-21 22:20:41,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:20:41,010 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2023-11-21 22:20:41,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:41,012 INFO L225 Difference]: With dead ends: 179 [2023-11-21 22:20:41,013 INFO L226 Difference]: Without dead ends: 120 [2023-11-21 22:20:41,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:41,015 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 73 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:41,016 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 140 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:20:41,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-21 22:20:41,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2023-11-21 22:20:41,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 72 states have (on average 1.4027777777777777) internal successors, (101), 91 states have internal predecessors, (101), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2023-11-21 22:20:41,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 157 transitions. [2023-11-21 22:20:41,039 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 157 transitions. Word has length 25 [2023-11-21 22:20:41,039 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:41,040 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 157 transitions. [2023-11-21 22:20:41,040 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:20:41,040 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 157 transitions. [2023-11-21 22:20:41,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-21 22:20:41,042 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:41,042 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:41,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:20:41,042 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:41,043 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:41,043 INFO L85 PathProgramCache]: Analyzing trace with hash -827608469, now seen corresponding path program 1 times [2023-11-21 22:20:41,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:41,043 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2106189053] [2023-11-21 22:20:41,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:41,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:41,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:20:41,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-21 22:20:41,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,185 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:20:41,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:41,186 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2106189053] [2023-11-21 22:20:41,186 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2106189053] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:41,186 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:41,186 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:20:41,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011320794] [2023-11-21 22:20:41,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:41,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:20:41,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:41,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:20:41,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:20:41,189 INFO L87 Difference]: Start difference. First operand 117 states and 157 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:41,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:41,385 INFO L93 Difference]: Finished difference Result 318 states and 437 transitions. [2023-11-21 22:20:41,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-21 22:20:41,386 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2023-11-21 22:20:41,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:41,389 INFO L225 Difference]: With dead ends: 318 [2023-11-21 22:20:41,390 INFO L226 Difference]: Without dead ends: 203 [2023-11-21 22:20:41,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:20:41,393 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 41 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:41,394 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 296 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:41,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2023-11-21 22:20:41,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 198. [2023-11-21 22:20:41,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 129 states have (on average 1.310077519379845) internal successors, (169), 146 states have internal predecessors, (169), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2023-11-21 22:20:41,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 257 transitions. [2023-11-21 22:20:41,427 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 257 transitions. Word has length 28 [2023-11-21 22:20:41,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:41,428 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 257 transitions. [2023-11-21 22:20:41,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:41,428 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 257 transitions. [2023-11-21 22:20:41,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-21 22:20:41,430 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:41,430 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:41,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:20:41,431 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:41,431 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:41,432 INFO L85 PathProgramCache]: Analyzing trace with hash 428357752, now seen corresponding path program 1 times [2023-11-21 22:20:41,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:41,432 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [450365164] [2023-11-21 22:20:41,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:41,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:41,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:20:41,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:20:41,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:41,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-21 22:20:41,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:41,803 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:41,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:41,803 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [450365164] [2023-11-21 22:20:41,804 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [450365164] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:41,804 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:41,804 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-21 22:20:41,804 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1098410855] [2023-11-21 22:20:41,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:41,805 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:20:41,805 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:41,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:20:41,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:20:41,806 INFO L87 Difference]: Start difference. First operand 198 states and 257 transitions. Second operand has 9 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:20:42,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:42,322 INFO L93 Difference]: Finished difference Result 612 states and 790 transitions. [2023-11-21 22:20:42,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-21 22:20:42,323 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 38 [2023-11-21 22:20:42,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:42,327 INFO L225 Difference]: With dead ends: 612 [2023-11-21 22:20:42,328 INFO L226 Difference]: Without dead ends: 416 [2023-11-21 22:20:42,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=146, Unknown=0, NotChecked=0, Total=210 [2023-11-21 22:20:42,330 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 227 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 389 SdHoareTripleChecker+Invalid, 463 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:42,331 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [234 Valid, 389 Invalid, 463 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:20:42,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2023-11-21 22:20:42,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 404. [2023-11-21 22:20:42,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 265 states have (on average 1.2792452830188679) internal successors, (339), 293 states have internal predecessors, (339), 73 states have call successors, (73), 59 states have call predecessors, (73), 65 states have return successors, (103), 70 states have call predecessors, (103), 73 states have call successors, (103) [2023-11-21 22:20:42,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 515 transitions. [2023-11-21 22:20:42,394 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 515 transitions. Word has length 38 [2023-11-21 22:20:42,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:42,394 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 515 transitions. [2023-11-21 22:20:42,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:20:42,395 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 515 transitions. [2023-11-21 22:20:42,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-21 22:20:42,397 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:42,397 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:42,397 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:20:42,398 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:42,398 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:42,398 INFO L85 PathProgramCache]: Analyzing trace with hash 1015378397, now seen corresponding path program 1 times [2023-11-21 22:20:42,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:42,399 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782550714] [2023-11-21 22:20:42,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:42,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:42,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:42,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:20:42,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-21 22:20:42,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:42,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-21 22:20:42,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:42,730 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:42,730 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:42,730 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782550714] [2023-11-21 22:20:42,731 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782550714] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:42,731 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:42,731 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-21 22:20:42,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585742061] [2023-11-21 22:20:42,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:42,732 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:20:42,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:42,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:20:42,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:20:42,734 INFO L87 Difference]: Start difference. First operand 404 states and 515 transitions. Second operand has 9 states, 8 states have (on average 3.625) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:20:43,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:43,531 INFO L93 Difference]: Finished difference Result 950 states and 1225 transitions. [2023-11-21 22:20:43,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-21 22:20:43,532 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.625) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 41 [2023-11-21 22:20:43,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:43,540 INFO L225 Difference]: With dead ends: 950 [2023-11-21 22:20:43,540 INFO L226 Difference]: Without dead ends: 660 [2023-11-21 22:20:43,542 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 94 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=125, Invalid=381, Unknown=0, NotChecked=0, Total=506 [2023-11-21 22:20:43,545 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 311 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 445 mSolverCounterSat, 169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 316 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 614 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 169 IncrementalHoareTripleChecker+Valid, 445 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:43,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [316 Valid, 282 Invalid, 614 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [169 Valid, 445 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:20:43,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2023-11-21 22:20:43,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 586. [2023-11-21 22:20:43,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 390 states have (on average 1.2743589743589743) internal successors, (497), 430 states have internal predecessors, (497), 102 states have call successors, (102), 76 states have call predecessors, (102), 93 states have return successors, (149), 105 states have call predecessors, (149), 102 states have call successors, (149) [2023-11-21 22:20:43,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 748 transitions. [2023-11-21 22:20:43,635 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 748 transitions. Word has length 41 [2023-11-21 22:20:43,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:43,636 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 748 transitions. [2023-11-21 22:20:43,636 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.625) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:20:43,636 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 748 transitions. [2023-11-21 22:20:43,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-21 22:20:43,639 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:43,640 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:43,640 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:20:43,640 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:43,640 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:43,641 INFO L85 PathProgramCache]: Analyzing trace with hash -2038326735, now seen corresponding path program 1 times [2023-11-21 22:20:43,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:43,641 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1830149177] [2023-11-21 22:20:43,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:43,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:43,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:43,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:20:43,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:43,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:43,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:43,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-21 22:20:43,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-21 22:20:43,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:43,780 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:20:43,780 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:43,780 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1830149177] [2023-11-21 22:20:43,780 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1830149177] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:43,781 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:43,781 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:20:43,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [434484098] [2023-11-21 22:20:43,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:43,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:20:43,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:43,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:20:43,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:20:43,783 INFO L87 Difference]: Start difference. First operand 586 states and 748 transitions. Second operand has 7 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-21 22:20:44,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:44,145 INFO L93 Difference]: Finished difference Result 983 states and 1251 transitions. [2023-11-21 22:20:44,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:20:44,146 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 63 [2023-11-21 22:20:44,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:44,149 INFO L225 Difference]: With dead ends: 983 [2023-11-21 22:20:44,149 INFO L226 Difference]: Without dead ends: 399 [2023-11-21 22:20:44,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:20:44,154 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 160 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 213 mSolverCounterSat, 104 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 104 IncrementalHoareTripleChecker+Valid, 213 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:44,154 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 198 Invalid, 317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [104 Valid, 213 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:20:44,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 399 states. [2023-11-21 22:20:44,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 399 to 383. [2023-11-21 22:20:44,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 383 states, 257 states have (on average 1.2568093385214008) internal successors, (323), 284 states have internal predecessors, (323), 66 states have call successors, (66), 51 states have call predecessors, (66), 59 states have return successors, (89), 67 states have call predecessors, (89), 66 states have call successors, (89) [2023-11-21 22:20:44,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 383 states to 383 states and 478 transitions. [2023-11-21 22:20:44,223 INFO L78 Accepts]: Start accepts. Automaton has 383 states and 478 transitions. Word has length 63 [2023-11-21 22:20:44,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:44,224 INFO L495 AbstractCegarLoop]: Abstraction has 383 states and 478 transitions. [2023-11-21 22:20:44,225 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-21 22:20:44,225 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states and 478 transitions. [2023-11-21 22:20:44,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-21 22:20:44,227 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:44,227 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:44,227 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:20:44,227 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:44,228 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:44,229 INFO L85 PathProgramCache]: Analyzing trace with hash -1353352105, now seen corresponding path program 1 times [2023-11-21 22:20:44,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:44,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258244819] [2023-11-21 22:20:44,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:44,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:44,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:44,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:44,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:44,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:44,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:44,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-21 22:20:44,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-21 22:20:44,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:44,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-21 22:20:44,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,409 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-21 22:20:44,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:44,410 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258244819] [2023-11-21 22:20:44,410 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258244819] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:20:44,410 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1805431337] [2023-11-21 22:20:44,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:44,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:44,411 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:44,413 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:20:44,415 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:20:44,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:44,549 INFO L262 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-21 22:20:44,558 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:20:44,658 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:44,658 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:20:44,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1805431337] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:44,658 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:20:44,658 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-21 22:20:44,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1263125711] [2023-11-21 22:20:44,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:44,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:20:44,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:44,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:20:44,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:20:44,662 INFO L87 Difference]: Start difference. First operand 383 states and 478 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-21 22:20:44,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:44,792 INFO L93 Difference]: Finished difference Result 686 states and 860 transitions. [2023-11-21 22:20:44,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:20:44,793 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 72 [2023-11-21 22:20:44,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:44,796 INFO L225 Difference]: With dead ends: 686 [2023-11-21 22:20:44,796 INFO L226 Difference]: Without dead ends: 373 [2023-11-21 22:20:44,798 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:20:44,799 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 40 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:44,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 139 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:44,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2023-11-21 22:20:44,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 373. [2023-11-21 22:20:44,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 250 states have (on average 1.224) internal successors, (306), 275 states have internal predecessors, (306), 64 states have call successors, (64), 51 states have call predecessors, (64), 58 states have return successors, (75), 65 states have call predecessors, (75), 64 states have call successors, (75) [2023-11-21 22:20:44,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 445 transitions. [2023-11-21 22:20:44,858 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 445 transitions. Word has length 72 [2023-11-21 22:20:44,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:44,859 INFO L495 AbstractCegarLoop]: Abstraction has 373 states and 445 transitions. [2023-11-21 22:20:44,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-21 22:20:44,859 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 445 transitions. [2023-11-21 22:20:44,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2023-11-21 22:20:44,862 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:44,862 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:44,884 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-21 22:20:45,083 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:45,084 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:45,084 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:45,084 INFO L85 PathProgramCache]: Analyzing trace with hash -505086902, now seen corresponding path program 1 times [2023-11-21 22:20:45,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:45,084 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683663598] [2023-11-21 22:20:45,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:45,085 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:45,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:45,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:45,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:45,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:45,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:45,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-21 22:20:45,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:20:45,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:20:45,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:45,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2023-11-21 22:20:45,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,344 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 12 proven. 10 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-21 22:20:45,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:45,344 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683663598] [2023-11-21 22:20:45,345 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683663598] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:20:45,345 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [869987666] [2023-11-21 22:20:45,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:45,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:45,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:45,350 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:20:45,373 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:20:45,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:45,483 INFO L262 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-21 22:20:45,487 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:20:45,618 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 21 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:45,618 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:20:45,803 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 14 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-21 22:20:45,803 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [869987666] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:20:45,803 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:20:45,803 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-21 22:20:45,804 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1243111252] [2023-11-21 22:20:45,804 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:20:45,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-21 22:20:45,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:45,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-21 22:20:45,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-21 22:20:45,806 INFO L87 Difference]: Start difference. First operand 373 states and 445 transitions. Second operand has 15 states, 11 states have (on average 7.818181818181818) internal successors, (86), 10 states have internal predecessors, (86), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2023-11-21 22:20:47,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:47,179 INFO L93 Difference]: Finished difference Result 494 states and 612 transitions. [2023-11-21 22:20:47,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2023-11-21 22:20:47,180 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 7.818181818181818) internal successors, (86), 10 states have internal predecessors, (86), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 76 [2023-11-21 22:20:47,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:47,187 INFO L225 Difference]: With dead ends: 494 [2023-11-21 22:20:47,187 INFO L226 Difference]: Without dead ends: 492 [2023-11-21 22:20:47,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 178 SyntacticMatches, 4 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 796 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=551, Invalid=2205, Unknown=0, NotChecked=0, Total=2756 [2023-11-21 22:20:47,191 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 371 mSDsluCounter, 594 mSDsCounter, 0 mSdLazyCounter, 959 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 691 SdHoareTripleChecker+Invalid, 1196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 959 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:47,192 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 691 Invalid, 1196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [237 Valid, 959 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-21 22:20:47,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2023-11-21 22:20:47,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 414. [2023-11-21 22:20:47,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 276 states have (on average 1.2246376811594204) internal successors, (338), 307 states have internal predecessors, (338), 72 states have call successors, (72), 59 states have call predecessors, (72), 65 states have return successors, (87), 70 states have call predecessors, (87), 72 states have call successors, (87) [2023-11-21 22:20:47,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 497 transitions. [2023-11-21 22:20:47,258 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 497 transitions. Word has length 76 [2023-11-21 22:20:47,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:47,259 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 497 transitions. [2023-11-21 22:20:47,259 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 7.818181818181818) internal successors, (86), 10 states have internal predecessors, (86), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2023-11-21 22:20:47,259 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 497 transitions. [2023-11-21 22:20:47,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-11-21 22:20:47,262 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:47,262 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:47,290 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:20:47,483 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:47,483 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:47,483 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:47,483 INFO L85 PathProgramCache]: Analyzing trace with hash -798142830, now seen corresponding path program 1 times [2023-11-21 22:20:47,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:47,484 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223775827] [2023-11-21 22:20:47,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:47,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:47,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:47,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:47,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:47,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:47,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:47,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-21 22:20:47,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:47,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:20:47,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2023-11-21 22:20:47,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2023-11-21 22:20:47,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:47,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2023-11-21 22:20:47,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:47,686 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2023-11-21 22:20:47,686 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:47,686 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223775827] [2023-11-21 22:20:47,686 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223775827] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:47,686 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:47,687 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-21 22:20:47,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1600107921] [2023-11-21 22:20:47,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:47,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:20:47,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:47,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:20:47,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:20:47,689 INFO L87 Difference]: Start difference. First operand 414 states and 497 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 4 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2023-11-21 22:20:48,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:48,258 INFO L93 Difference]: Finished difference Result 1017 states and 1234 transitions. [2023-11-21 22:20:48,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-21 22:20:48,259 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 4 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 96 [2023-11-21 22:20:48,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:48,265 INFO L225 Difference]: With dead ends: 1017 [2023-11-21 22:20:48,265 INFO L226 Difference]: Without dead ends: 777 [2023-11-21 22:20:48,266 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=69, Invalid=237, Unknown=0, NotChecked=0, Total=306 [2023-11-21 22:20:48,267 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 165 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 437 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 512 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:48,268 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 332 Invalid, 512 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 437 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:20:48,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 777 states. [2023-11-21 22:20:48,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 777 to 770. [2023-11-21 22:20:48,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 517 states have (on average 1.2185686653771761) internal successors, (630), 570 states have internal predecessors, (630), 131 states have call successors, (131), 111 states have call predecessors, (131), 121 states have return successors, (155), 130 states have call predecessors, (155), 131 states have call successors, (155) [2023-11-21 22:20:48,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 916 transitions. [2023-11-21 22:20:48,363 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 916 transitions. Word has length 96 [2023-11-21 22:20:48,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:48,364 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 916 transitions. [2023-11-21 22:20:48,364 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 4 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2023-11-21 22:20:48,364 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 916 transitions. [2023-11-21 22:20:48,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2023-11-21 22:20:48,372 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:48,373 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:48,373 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-21 22:20:48,373 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:48,374 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:48,374 INFO L85 PathProgramCache]: Analyzing trace with hash -640331475, now seen corresponding path program 1 times [2023-11-21 22:20:48,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:48,374 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [434976851] [2023-11-21 22:20:48,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:48,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:48,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:48,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:20:48,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:20:48,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:48,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:48,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:48,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2023-11-21 22:20:48,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:48,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:20:48,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-21 22:20:48,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-21 22:20:48,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:48,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2023-11-21 22:20:48,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,814 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 33 proven. 5 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2023-11-21 22:20:48,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:48,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [434976851] [2023-11-21 22:20:48,815 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [434976851] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:20:48,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [705820570] [2023-11-21 22:20:48,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:48,815 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:48,815 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:48,816 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:20:48,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:20:48,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:48,949 INFO L262 TraceCheckSpWp]: Trace formula consists of 383 conjuncts, 15 conjunts are in the unsatisfiable core [2023-11-21 22:20:48,961 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:20:49,221 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 66 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:20:49,221 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:20:49,558 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 48 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-21 22:20:49,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [705820570] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:20:49,558 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:20:49,558 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 23 [2023-11-21 22:20:49,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528099381] [2023-11-21 22:20:49,559 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:20:49,559 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-21 22:20:49,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:49,560 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-21 22:20:49,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=86, Invalid=420, Unknown=0, NotChecked=0, Total=506 [2023-11-21 22:20:49,561 INFO L87 Difference]: Start difference. First operand 770 states and 916 transitions. Second operand has 23 states, 23 states have (on average 5.217391304347826) internal successors, (120), 20 states have internal predecessors, (120), 9 states have call successors, (29), 8 states have call predecessors, (29), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) [2023-11-21 22:20:51,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:51,963 INFO L93 Difference]: Finished difference Result 2430 states and 3149 transitions. [2023-11-21 22:20:51,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2023-11-21 22:20:51,964 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 5.217391304347826) internal successors, (120), 20 states have internal predecessors, (120), 9 states have call successors, (29), 8 states have call predecessors, (29), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) Word has length 99 [2023-11-21 22:20:51,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:51,978 INFO L225 Difference]: With dead ends: 2430 [2023-11-21 22:20:51,978 INFO L226 Difference]: Without dead ends: 1650 [2023-11-21 22:20:51,985 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 230 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1055 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=768, Invalid=3392, Unknown=0, NotChecked=0, Total=4160 [2023-11-21 22:20:51,986 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 631 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 1501 mSolverCounterSat, 334 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 636 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 1835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 334 IncrementalHoareTripleChecker+Valid, 1501 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:51,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [636 Valid, 360 Invalid, 1835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [334 Valid, 1501 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-11-21 22:20:51,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1650 states. [2023-11-21 22:20:52,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1650 to 1030. [2023-11-21 22:20:52,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1030 states, 697 states have (on average 1.2022955523672885) internal successors, (838), 759 states have internal predecessors, (838), 161 states have call successors, (161), 153 states have call predecessors, (161), 171 states have return successors, (200), 173 states have call predecessors, (200), 161 states have call successors, (200) [2023-11-21 22:20:52,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1030 states to 1030 states and 1199 transitions. [2023-11-21 22:20:52,135 INFO L78 Accepts]: Start accepts. Automaton has 1030 states and 1199 transitions. Word has length 99 [2023-11-21 22:20:52,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:52,136 INFO L495 AbstractCegarLoop]: Abstraction has 1030 states and 1199 transitions. [2023-11-21 22:20:52,136 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 5.217391304347826) internal successors, (120), 20 states have internal predecessors, (120), 9 states have call successors, (29), 8 states have call predecessors, (29), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) [2023-11-21 22:20:52,136 INFO L276 IsEmpty]: Start isEmpty. Operand 1030 states and 1199 transitions. [2023-11-21 22:20:52,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2023-11-21 22:20:52,140 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:52,140 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:52,161 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:20:52,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:52,354 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:52,355 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:52,355 INFO L85 PathProgramCache]: Analyzing trace with hash 747206845, now seen corresponding path program 1 times [2023-11-21 22:20:52,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:52,355 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [648331357] [2023-11-21 22:20:52,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:52,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:52,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:53,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:20:53,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:20:53,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:53,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:20:53,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:53,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2023-11-21 22:20:53,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:20:53,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:20:53,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:20:53,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-21 22:20:53,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2023-11-21 22:20:53,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:20:53,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2023-11-21 22:20:53,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,473 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 19 proven. 39 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2023-11-21 22:20:53,473 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:53,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [648331357] [2023-11-21 22:20:53,473 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [648331357] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:20:53,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [142211177] [2023-11-21 22:20:53,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:53,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:53,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:53,475 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:20:53,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-21 22:20:53,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:53,599 INFO L262 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 26 conjunts are in the unsatisfiable core [2023-11-21 22:20:53,610 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:20:54,154 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 39 proven. 43 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:54,155 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:20:54,966 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 54 proven. 5 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2023-11-21 22:20:54,967 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [142211177] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:20:54,967 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:20:54,967 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 13, 11] total 37 [2023-11-21 22:20:54,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051484970] [2023-11-21 22:20:54,967 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:20:54,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2023-11-21 22:20:54,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:54,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2023-11-21 22:20:54,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1126, Unknown=0, NotChecked=0, Total=1332 [2023-11-21 22:20:54,971 INFO L87 Difference]: Start difference. First operand 1030 states and 1199 transitions. Second operand has 37 states, 34 states have (on average 5.088235294117647) internal successors, (173), 34 states have internal predecessors, (173), 18 states have call successors, (38), 10 states have call predecessors, (38), 14 states have return successors, (35), 17 states have call predecessors, (35), 17 states have call successors, (35) [2023-11-21 22:20:59,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:59,529 INFO L93 Difference]: Finished difference Result 2953 states and 3541 transitions. [2023-11-21 22:20:59,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 79 states. [2023-11-21 22:20:59,530 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 34 states have (on average 5.088235294117647) internal successors, (173), 34 states have internal predecessors, (173), 18 states have call successors, (38), 10 states have call predecessors, (38), 14 states have return successors, (35), 17 states have call predecessors, (35), 17 states have call successors, (35) Word has length 104 [2023-11-21 22:20:59,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:59,532 INFO L225 Difference]: With dead ends: 2953 [2023-11-21 22:20:59,532 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:20:59,543 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 364 GetRequests, 252 SyntacticMatches, 4 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3769 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=1876, Invalid=10114, Unknown=0, NotChecked=0, Total=11990 [2023-11-21 22:20:59,543 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 1698 mSDsluCounter, 858 mSDsCounter, 0 mSdLazyCounter, 3016 mSolverCounterSat, 1061 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1701 SdHoareTripleChecker+Valid, 943 SdHoareTripleChecker+Invalid, 4077 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1061 IncrementalHoareTripleChecker+Valid, 3016 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:59,544 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1701 Valid, 943 Invalid, 4077 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1061 Valid, 3016 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2023-11-21 22:20:59,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:20:59,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:20:59,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:20:59,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:20:59,545 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 104 [2023-11-21 22:20:59,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:59,545 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:20:59,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 34 states have (on average 5.088235294117647) internal successors, (173), 34 states have internal predecessors, (173), 18 states have call successors, (38), 10 states have call predecessors, (38), 14 states have return successors, (35), 17 states have call predecessors, (35), 17 states have call successors, (35) [2023-11-21 22:20:59,546 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:20:59,546 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:20:59,549 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:20:59,574 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-21 22:20:59,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:59,764 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:21:12,694 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2023-11-21 22:21:12,695 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 293 300) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse2))) [2023-11-21 22:21:12,695 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2023-11-21 22:21:12,695 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2023-11-21 22:21:12,695 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: (let ((.cse3 (< 2 ~waterLevel~0)) (.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (< ~pumpRunning~0 1)) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (< ~switchedOnBeforeTS~0 1))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse3 .cse4 .cse2 (not (= 0 ~systemActive~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse5 .cse6 .cse1 .cse7) (or .cse3 .cse4 .cse1 .cse2) (or .cse0 .cse5 .cse6 .cse1 (< 0 ~waterLevel~0) .cse7))) [2023-11-21 22:21:12,696 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-21 22:21:12,696 INFO L902 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2023-11-21 22:21:12,696 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2023-11-21 22:21:12,696 INFO L902 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2023-11-21 22:21:12,701 INFO L899 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2023-11-21 22:21:12,701 INFO L899 garLoopResultBuilder]: For program point L977(lines 952 981) no Hoare annotation was computed. [2023-11-21 22:21:12,701 INFO L899 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2023-11-21 22:21:12,702 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 952 981) the Hoare annotation is: true [2023-11-21 22:21:12,702 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2023-11-21 22:21:12,702 INFO L902 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2023-11-21 22:21:12,702 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2023-11-21 22:21:12,703 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-11-21 22:21:12,703 INFO L899 garLoopResultBuilder]: For program point L279-1(lines 260 284) no Hoare annotation was computed. [2023-11-21 22:21:12,703 INFO L899 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2023-11-21 22:21:12,703 INFO L899 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2023-11-21 22:21:12,704 INFO L895 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0))) (let ((.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse9 (not (= 0 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse0 .cse14 .cse15)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (let ((.cse1 (= ~methaneLevelCritical~0 0))) (and (or .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse3 (< |old(~waterLevel~0)| 2) .cse4))) .cse5) (or .cse6 .cse3 .cse7) (or .cse6 .cse8 .cse4 .cse9) (let ((.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 1)) (.cse11 (= ~waterLevel~0 1))) (or .cse3 (and .cse0 .cse10 .cse11 .cse12) (and .cse13 .cse10 .cse11 .cse12) .cse7 .cse5)) (or (and .cse0 .cse14 .cse12 .cse15) .cse2 (and .cse13 .cse14 .cse12 .cse15) .cse3 (< 0 |old(~waterLevel~0)|) .cse5) (let ((.cse16 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse14)))) (or (and .cse0 .cse16 .cse12 .cse15) (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 (and .cse13 .cse16 .cse12 .cse15) .cse5)) (or .cse6 .cse7 .cse9) (or .cse6 .cse8 .cse3 .cse4)))) [2023-11-21 22:21:12,704 INFO L899 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2023-11-21 22:21:12,704 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2023-11-21 22:21:12,704 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2023-11-21 22:21:12,706 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 173 199) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-21 22:21:12,706 INFO L895 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-21 22:21:12,706 INFO L899 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2023-11-21 22:21:12,706 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2023-11-21 22:21:12,707 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2023-11-21 22:21:12,707 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2023-11-21 22:21:12,708 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse3 .cse1 (and .cse4 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse5 (<= ~waterLevel~0 0) .cse6) .cse7) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse7 (and .cse4 .cse8 .cse5 (= ~waterLevel~0 1) .cse6)) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or .cse8 .cse3 .cse1 .cse7 .cse2))) [2023-11-21 22:21:12,708 INFO L899 garLoopResultBuilder]: For program point L563-1(lines 555 583) no Hoare annotation was computed. [2023-11-21 22:21:12,709 INFO L895 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse11)) (.cse10 (and (or .cse11 .cse0 .cse1 .cse4) (or .cse11 .cse1 (< |old(~waterLevel~0)| 2) .cse4))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse4) (or .cse1 .cse2 .cse6 .cse3) (or (and .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse9) (< 0 |old(~waterLevel~0)|) .cse10 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse10 .cse3 (and .cse7 .cse8 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse9)) (or .cse10 .cse6 .cse3 (and .cse7 .cse8 (= ~waterLevel~0 1) .cse9)) (or .cse5 .cse4 (not (= 0 ~systemActive~0)))))) [2023-11-21 22:21:12,709 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2023-11-21 22:21:12,709 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2023-11-21 22:21:12,709 INFO L895 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (not .cse2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse7 .cse3 .cse5 .cse4) (and .cse6 .cse4 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse6 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 .cse7 .cse3 .cse4)))) [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L483(lines 420 487) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2023-11-21 22:21:12,710 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2023-11-21 22:21:12,711 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:21:12,711 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (not .cse2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse7 .cse3 .cse5 .cse4) (and .cse6 .cse4 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse6 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 .cse7 .cse3 .cse4)))) [2023-11-21 22:21:12,711 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse7)) (.cse4 (<= ~waterLevel~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~waterLevel~0 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse6 .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse3) (and .cse0 .cse7 .cse1 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse1 .cse3 .cse6 .cse5)))) [2023-11-21 22:21:12,711 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:21:12,712 INFO L895 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2023-11-21 22:21:12,712 INFO L899 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2023-11-21 22:21:12,712 INFO L895 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse9 (<= ~waterLevel~0 2)) (.cse5 (not .cse2)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= ~waterLevel~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse10 (= ~waterLevel~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse3 .cse5 .cse4 .cse6 .cse7) (and .cse8 .cse4 .cse9 (= 0 ~systemActive~0)) (and .cse8 .cse3 .cse5 .cse4 .cse9) (and .cse0 .cse3 .cse5 .cse4 .cse10 .cse7) (and .cse8 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse10 .cse7) (and .cse8 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4)))) [2023-11-21 22:21:12,712 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2023-11-21 22:21:12,712 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2023-11-21 22:21:12,713 INFO L899 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2023-11-21 22:21:12,713 INFO L899 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2023-11-21 22:21:12,713 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse5 (not .cse2)) (.cse7 (<= ~waterLevel~0 2)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse4 .cse7 (= 0 ~systemActive~0)) (and .cse6 .cse3 .cse5 .cse4 .cse7) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4)))) [2023-11-21 22:21:12,713 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 208 232) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 (< 1 ~waterLevel~0)) (or .cse5 .cse6 .cse1 (not (= 2 ~waterLevel~0))))) [2023-11-21 22:21:12,714 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 (< 0 ~waterLevel~0) .cse1 .cse2 .cse3) (or .cse4 .cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (< 1 ~waterLevel~0)) (or (< 2 ~waterLevel~0) .cse4 (= ~pumpRunning~0 0) .cse0) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2023-11-21 22:21:12,714 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2023-11-21 22:21:12,714 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2023-11-21 22:21:12,714 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2023-11-21 22:21:12,714 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~switchedOnBeforeTS~0 1)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse2 .cse1 .cse3 .cse4 .cse5) (or .cse2 .cse1 (< 0 ~waterLevel~0) .cse3 .cse4 .cse5) (or .cse0 .cse1 (< 1 ~waterLevel~0)))) [2023-11-21 22:21:12,715 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2023-11-21 22:21:12,717 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-21 22:21:12,717 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (< ~pumpRunning~0 1)) (.cse6 (< ~switchedOnBeforeTS~0 1)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (< 1 |old(~waterLevel~0)|)) (.cse4 (not (= ~pumpRunning~0 0))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse3 .cse5) (or .cse0 .cse2 (< 0 |old(~waterLevel~0)|) .cse6 .cse7 .cse8) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse6 .cse7 (= ~waterLevel~0 1)) (or .cse9 .cse4 .cse2 .cse8) (or .cse9 .cse4 .cse8 .cse5))) [2023-11-21 22:21:12,717 INFO L895 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~switchedOnBeforeTS~0 1)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse2 .cse1 .cse3 .cse4 .cse5) (or .cse2 .cse1 (< 0 ~waterLevel~0) .cse3 .cse4 .cse5) (or .cse0 .cse1 (< 1 ~waterLevel~0)))) [2023-11-21 22:21:12,718 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~switchedOnBeforeTS~0 1)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse2 .cse1 .cse3 .cse4 .cse5) (or .cse2 .cse1 (< 0 ~waterLevel~0) .cse3 .cse4 .cse5) (or .cse0 .cse1 (< 1 ~waterLevel~0)))) [2023-11-21 22:21:12,718 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2023-11-21 22:21:12,718 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2023-11-21 22:21:12,719 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 234 258) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 (< 1 ~waterLevel~0)) (or .cse5 .cse6 .cse1 (not (= 2 ~waterLevel~0))))) [2023-11-21 22:21:12,719 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2023-11-21 22:21:12,719 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 0 ~waterLevel~0) .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 (< 1 ~waterLevel~0)) (or .cse4 .cse5 .cse0 (not (= 2 ~waterLevel~0))))) [2023-11-21 22:21:12,719 INFO L899 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2023-11-21 22:21:12,719 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2023-11-21 22:21:12,720 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 312 320) the Hoare annotation is: true [2023-11-21 22:21:12,722 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:21:12,724 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:21:12,761 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:21:12 BoogieIcfgContainer [2023-11-21 22:21:12,762 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:21:12,762 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:21:12,762 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:21:12,762 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:21:12,763 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:39" (3/4) ... [2023-11-21 22:21:12,765 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:21:12,769 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:21:12,769 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:21:12,770 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-21 22:21:12,793 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 48 nodes and edges [2023-11-21 22:21:12,794 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-21 22:21:12,795 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:21:12,795 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:21:12,796 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:21:12,969 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:21:12,970 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:21:12,970 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:21:12,970 INFO L158 Benchmark]: Toolchain (without parser) took 34752.59ms. Allocated memory was 132.1MB in the beginning and 553.6MB in the end (delta: 421.5MB). Free memory was 86.5MB in the beginning and 341.2MB in the end (delta: -254.7MB). Peak memory consumption was 167.8MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,971 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory is still 78.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:21:12,971 INFO L158 Benchmark]: CACSL2BoogieTranslator took 593.43ms. Allocated memory is still 132.1MB. Free memory was 86.5MB in the beginning and 66.8MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,972 INFO L158 Benchmark]: Boogie Procedure Inliner took 91.24ms. Allocated memory is still 132.1MB. Free memory was 66.8MB in the beginning and 64.4MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,972 INFO L158 Benchmark]: Boogie Preprocessor took 44.78ms. Allocated memory is still 132.1MB. Free memory was 64.4MB in the beginning and 61.8MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,973 INFO L158 Benchmark]: RCFGBuilder took 801.36ms. Allocated memory was 132.1MB in the beginning and 182.5MB in the end (delta: 50.3MB). Free memory was 61.8MB in the beginning and 130.2MB in the end (delta: -68.4MB). Peak memory consumption was 12.0MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,974 INFO L158 Benchmark]: TraceAbstraction took 33006.13ms. Allocated memory was 182.5MB in the beginning and 553.6MB in the end (delta: 371.2MB). Free memory was 130.0MB in the beginning and 349.6MB in the end (delta: -219.5MB). Peak memory consumption was 260.9MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,974 INFO L158 Benchmark]: Witness Printer took 207.67ms. Allocated memory is still 553.6MB. Free memory was 349.6MB in the beginning and 341.2MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-21 22:21:12,978 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory is still 78.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 593.43ms. Allocated memory is still 132.1MB. Free memory was 86.5MB in the beginning and 66.8MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 91.24ms. Allocated memory is still 132.1MB. Free memory was 66.8MB in the beginning and 64.4MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.78ms. Allocated memory is still 132.1MB. Free memory was 64.4MB in the beginning and 61.8MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 801.36ms. Allocated memory was 132.1MB in the beginning and 182.5MB in the end (delta: 50.3MB). Free memory was 61.8MB in the beginning and 130.2MB in the end (delta: -68.4MB). Peak memory consumption was 12.0MB. Max. memory is 16.1GB. * TraceAbstraction took 33006.13ms. Allocated memory was 182.5MB in the beginning and 553.6MB in the end (delta: 371.2MB). Free memory was 130.0MB in the beginning and 349.6MB in the end (delta: -219.5MB). Peak memory consumption was 260.9MB. Max. memory is 16.1GB. * Witness Printer took 207.67ms. Allocated memory is still 553.6MB. Free memory was 349.6MB in the beginning and 341.2MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] - GenericResultAtLocation [Line: 418]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] - GenericResultAtLocation [Line: 488]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] - GenericResultAtLocation [Line: 526]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] - GenericResultAtLocation [Line: 535]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] - GenericResultAtLocation [Line: 584]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] - GenericResultAtLocation [Line: 950]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 32.9s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 11.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3777 SdHoareTripleChecker+Valid, 5.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3731 mSDsluCounter, 3963 SdHoareTripleChecker+Invalid, 5.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3062 mSDsCounter, 2096 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7189 IncrementalHoareTripleChecker+Invalid, 9285 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2096 mSolverCounterUnsat, 901 mSDtfsCounter, 7189 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1151 GetRequests, 846 SyntacticMatches, 8 SemanticMatches, 297 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5814 ImplicationChecksByTransitivity, 4.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1030occurred in iteration=11, InterpolantAutomatonStates: 249, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 815 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 28 LocationsWithAnnotation, 2199 PreInvPairs, 2471 NumberOfFragments, 2308 HoareAnnotationTreeSize, 2199 FomulaSimplifications, 44884 FormulaSimplificationTreeSizeReduction, 3.0s HoareSimplificationTime, 28 FomulaSimplificationsInter, 38484 FormulaSimplificationTreeSizeReductionInter, 9.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.8s InterpolantComputationTime, 1036 NumberOfCodeBlocks, 1036 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1296 ConstructedInterpolants, 0 QuantifiedInterpolants, 3502 SizeOfPredicates, 21 NumberOfNonLiveVariables, 1392 ConjunctsInSsa, 53 ConjunctsInUnsatCore, 19 InterpolantComputations, 9 PerfectInterpolantSequences, 602/733 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((((((((1 <= pumpRunning) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-21 22:21:13,028 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_62e6b7bd-0fd7-4570-b90b-8dc6e52ff28c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE