./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-28 23:58:05,459 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-28 23:58:05,519 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-28 23:58:05,524 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-28 23:58:05,525 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-28 23:58:05,547 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-28 23:58:05,548 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-28 23:58:05,549 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-28 23:58:05,549 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-28 23:58:05,550 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-28 23:58:05,550 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-28 23:58:05,551 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-28 23:58:05,552 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-28 23:58:05,552 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-28 23:58:05,553 INFO L153 SettingsManager]: * Use SBE=true [2023-11-28 23:58:05,553 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-28 23:58:05,554 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-28 23:58:05,554 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-28 23:58:05,555 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-28 23:58:05,555 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-28 23:58:05,555 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-28 23:58:05,556 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-28 23:58:05,557 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-28 23:58:05,557 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-28 23:58:05,557 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-28 23:58:05,558 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-28 23:58:05,558 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-28 23:58:05,559 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-28 23:58:05,559 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-28 23:58:05,559 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-28 23:58:05,560 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-28 23:58:05,560 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-28 23:58:05,561 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-28 23:58:05,561 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-28 23:58:05,562 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-28 23:58:05,562 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-28 23:58:05,562 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-28 23:58:05,562 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-28 23:58:05,562 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-28 23:58:05,563 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-28 23:58:05,563 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-28 23:58:05,563 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-28 23:58:05,563 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2023-11-28 23:58:05,802 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-28 23:58:05,822 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-28 23:58:05,825 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-28 23:58:05,826 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-28 23:58:05,827 INFO L274 PluginConnector]: CDTParser initialized [2023-11-28 23:58:05,828 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2023-11-28 23:58:08,582 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-28 23:58:08,800 INFO L384 CDTParser]: Found 1 translation units. [2023-11-28 23:58:08,800 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2023-11-28 23:58:08,815 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/data/114363d54/ccdfbc03c23543ffa758e15d726c34db/FLAGbd3ad301f [2023-11-28 23:58:08,828 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/data/114363d54/ccdfbc03c23543ffa758e15d726c34db [2023-11-28 23:58:08,830 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-28 23:58:08,831 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-28 23:58:08,833 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-28 23:58:08,833 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-28 23:58:08,837 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-28 23:58:08,837 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:58:08" (1/1) ... [2023-11-28 23:58:08,838 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@455d6cbb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:08, skipping insertion in model container [2023-11-28 23:58:08,838 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:58:08" (1/1) ... [2023-11-28 23:58:08,880 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-28 23:58:09,015 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2023-11-28 23:58:09,112 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-28 23:58:09,124 INFO L202 MainTranslator]: Completed pre-run [2023-11-28 23:58:09,134 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2023-11-28 23:58:09,136 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [101] [2023-11-28 23:58:09,136 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [139] [2023-11-28 23:58:09,136 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [148] [2023-11-28 23:58:09,136 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] [2023-11-28 23:58:09,136 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [318] [2023-11-28 23:58:09,137 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] [2023-11-28 23:58:09,137 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [686] [2023-11-28 23:58:09,144 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2023-11-28 23:58:09,196 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-28 23:58:09,216 INFO L206 MainTranslator]: Completed translation [2023-11-28 23:58:09,217 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09 WrapperNode [2023-11-28 23:58:09,217 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-28 23:58:09,218 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-28 23:58:09,218 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-28 23:58:09,218 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-28 23:58:09,226 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,240 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,269 INFO L138 Inliner]: procedures = 60, calls = 109, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 246 [2023-11-28 23:58:09,269 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-28 23:58:09,270 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-28 23:58:09,270 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-28 23:58:09,270 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-28 23:58:09,282 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,282 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,285 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,301 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-28 23:58:09,302 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,302 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,308 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,313 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,315 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,317 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,320 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-28 23:58:09,321 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-28 23:58:09,321 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-28 23:58:09,321 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-28 23:58:09,323 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (1/1) ... [2023-11-28 23:58:09,329 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-28 23:58:09,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:09,352 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-28 23:58:09,357 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-28 23:58:09,389 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-28 23:58:09,389 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-28 23:58:09,389 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-28 23:58:09,389 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-28 23:58:09,390 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-28 23:58:09,390 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-28 23:58:09,390 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-28 23:58:09,390 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-28 23:58:09,390 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-28 23:58:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-28 23:58:09,391 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-28 23:58:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-28 23:58:09,391 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-28 23:58:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-28 23:58:09,391 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-28 23:58:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-28 23:58:09,392 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-28 23:58:09,392 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-28 23:58:09,392 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-28 23:58:09,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-28 23:58:09,392 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-28 23:58:09,392 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-28 23:58:09,392 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-28 23:58:09,393 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-28 23:58:09,471 INFO L241 CfgBuilder]: Building ICFG [2023-11-28 23:58:09,473 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-28 23:58:09,744 INFO L282 CfgBuilder]: Performing block encoding [2023-11-28 23:58:09,811 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-28 23:58:09,811 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-28 23:58:09,812 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:58:09 BoogieIcfgContainer [2023-11-28 23:58:09,812 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-28 23:58:09,814 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-28 23:58:09,814 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-28 23:58:09,817 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-28 23:58:09,817 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 11:58:08" (1/3) ... [2023-11-28 23:58:09,818 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3688d9b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 11:58:09, skipping insertion in model container [2023-11-28 23:58:09,819 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:58:09" (2/3) ... [2023-11-28 23:58:09,819 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3688d9b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 11:58:09, skipping insertion in model container [2023-11-28 23:58:09,819 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:58:09" (3/3) ... [2023-11-28 23:58:09,820 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2023-11-28 23:58:09,835 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-28 23:58:09,836 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-28 23:58:09,910 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-28 23:58:09,916 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1f239792, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-28 23:58:09,916 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-28 23:58:09,920 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 62 states have (on average 1.5) internal successors, (93), 73 states have internal predecessors, (93), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-28 23:58:09,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-28 23:58:09,929 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:09,930 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:09,930 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:09,935 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:09,936 INFO L85 PathProgramCache]: Analyzing trace with hash 1768623423, now seen corresponding path program 1 times [2023-11-28 23:58:09,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:09,943 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [535039679] [2023-11-28 23:58:09,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:09,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:10,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:10,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:10,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,114 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:10,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:10,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [535039679] [2023-11-28 23:58:10,116 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [535039679] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:10,116 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:10,116 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-28 23:58:10,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738289486] [2023-11-28 23:58:10,118 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:10,122 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-28 23:58:10,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:10,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-28 23:58:10,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-28 23:58:10,152 INFO L87 Difference]: Start difference. First operand has 93 states, 62 states have (on average 1.5) internal successors, (93), 73 states have internal predecessors, (93), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:10,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:10,214 INFO L93 Difference]: Finished difference Result 184 states and 263 transitions. [2023-11-28 23:58:10,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-28 23:58:10,217 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-28 23:58:10,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:10,225 INFO L225 Difference]: With dead ends: 184 [2023-11-28 23:58:10,225 INFO L226 Difference]: Without dead ends: 88 [2023-11-28 23:58:10,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-28 23:58:10,233 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:10,234 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 109 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-28 23:58:10,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2023-11-28 23:58:10,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2023-11-28 23:58:10,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 59 states have (on average 1.4067796610169492) internal successors, (83), 69 states have internal predecessors, (83), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-28 23:58:10,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 120 transitions. [2023-11-28 23:58:10,277 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 120 transitions. Word has length 22 [2023-11-28 23:58:10,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:10,278 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 120 transitions. [2023-11-28 23:58:10,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:10,278 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 120 transitions. [2023-11-28 23:58:10,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-28 23:58:10,281 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:10,282 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:10,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-28 23:58:10,282 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:10,283 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:10,283 INFO L85 PathProgramCache]: Analyzing trace with hash 541963458, now seen corresponding path program 1 times [2023-11-28 23:58:10,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:10,283 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1916881344] [2023-11-28 23:58:10,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:10,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:10,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:10,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-28 23:58:10,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,382 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:10,382 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:10,383 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1916881344] [2023-11-28 23:58:10,383 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1916881344] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:10,383 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:10,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:10,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [941951436] [2023-11-28 23:58:10,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:10,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-28 23:58:10,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:10,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:58:10,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:10,386 INFO L87 Difference]: Start difference. First operand 88 states and 120 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:10,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:10,432 INFO L93 Difference]: Finished difference Result 146 states and 198 transitions. [2023-11-28 23:58:10,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:58:10,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-28 23:58:10,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:10,435 INFO L225 Difference]: With dead ends: 146 [2023-11-28 23:58:10,435 INFO L226 Difference]: Without dead ends: 80 [2023-11-28 23:58:10,437 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:10,438 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 14 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:10,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 173 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-28 23:58:10,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-28 23:58:10,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2023-11-28 23:58:10,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 64 states have internal predecessors, (77), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-28 23:58:10,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 109 transitions. [2023-11-28 23:58:10,452 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 109 transitions. Word has length 23 [2023-11-28 23:58:10,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:10,453 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 109 transitions. [2023-11-28 23:58:10,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:10,453 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 109 transitions. [2023-11-28 23:58:10,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-28 23:58:10,455 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:10,455 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:10,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-28 23:58:10,455 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:10,456 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:10,456 INFO L85 PathProgramCache]: Analyzing trace with hash -1027451880, now seen corresponding path program 1 times [2023-11-28 23:58:10,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:10,457 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656394138] [2023-11-28 23:58:10,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:10,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:10,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-28 23:58:10,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-28 23:58:10,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,546 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:10,546 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:10,546 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656394138] [2023-11-28 23:58:10,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656394138] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:10,547 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:10,547 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:10,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [152418678] [2023-11-28 23:58:10,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:10,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-28 23:58:10,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:10,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:58:10,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:10,549 INFO L87 Difference]: Start difference. First operand 80 states and 109 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-28 23:58:10,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:10,615 INFO L93 Difference]: Finished difference Result 236 states and 324 transitions. [2023-11-28 23:58:10,616 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:58:10,616 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-28 23:58:10,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:10,619 INFO L225 Difference]: With dead ends: 236 [2023-11-28 23:58:10,619 INFO L226 Difference]: Without dead ends: 158 [2023-11-28 23:58:10,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:10,622 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 93 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:10,623 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 201 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-28 23:58:10,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2023-11-28 23:58:10,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 155. [2023-11-28 23:58:10,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 104 states have (on average 1.4326923076923077) internal successors, (149), 123 states have internal predecessors, (149), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2023-11-28 23:58:10,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 213 transitions. [2023-11-28 23:58:10,648 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 213 transitions. Word has length 26 [2023-11-28 23:58:10,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:10,648 INFO L495 AbstractCegarLoop]: Abstraction has 155 states and 213 transitions. [2023-11-28 23:58:10,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-28 23:58:10,648 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 213 transitions. [2023-11-28 23:58:10,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-28 23:58:10,651 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:10,651 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:10,651 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-28 23:58:10,651 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:10,652 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:10,652 INFO L85 PathProgramCache]: Analyzing trace with hash 1399715380, now seen corresponding path program 1 times [2023-11-28 23:58:10,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:10,652 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1742530557] [2023-11-28 23:58:10,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:10,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:10,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-28 23:58:10,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-28 23:58:10,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:10,774 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-28 23:58:10,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:10,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1742530557] [2023-11-28 23:58:10,775 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1742530557] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:10,775 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:10,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:58:10,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629112078] [2023-11-28 23:58:10,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:10,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-28 23:58:10,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:10,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:58:10,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:58:10,777 INFO L87 Difference]: Start difference. First operand 155 states and 213 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:10,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:10,965 INFO L93 Difference]: Finished difference Result 406 states and 565 transitions. [2023-11-28 23:58:10,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-28 23:58:10,966 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2023-11-28 23:58:10,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:10,969 INFO L225 Difference]: With dead ends: 406 [2023-11-28 23:58:10,970 INFO L226 Difference]: Without dead ends: 253 [2023-11-28 23:58:10,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-28 23:58:10,974 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 58 mSDsluCounter, 311 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:10,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 404 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-28 23:58:10,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2023-11-28 23:58:11,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 248. [2023-11-28 23:58:11,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 171 states have (on average 1.3508771929824561) internal successors, (231), 190 states have internal predecessors, (231), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2023-11-28 23:58:11,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 327 transitions. [2023-11-28 23:58:11,005 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 327 transitions. Word has length 29 [2023-11-28 23:58:11,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:11,006 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 327 transitions. [2023-11-28 23:58:11,024 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-28 23:58:11,024 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 327 transitions. [2023-11-28 23:58:11,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-28 23:58:11,026 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:11,027 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:11,027 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-28 23:58:11,027 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:11,027 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:11,028 INFO L85 PathProgramCache]: Analyzing trace with hash -173196600, now seen corresponding path program 1 times [2023-11-28 23:58:11,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:11,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441491419] [2023-11-28 23:58:11,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:11,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:11,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-28 23:58:11,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-28 23:58:11,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:11,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:11,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-28 23:58:11,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,137 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:11,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:11,137 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441491419] [2023-11-28 23:58:11,137 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1441491419] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:11,137 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:11,138 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:11,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1058834317] [2023-11-28 23:58:11,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:11,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-28 23:58:11,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:11,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:58:11,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:58:11,140 INFO L87 Difference]: Start difference. First operand 248 states and 327 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-28 23:58:11,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:11,329 INFO L93 Difference]: Finished difference Result 550 states and 747 transitions. [2023-11-28 23:58:11,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-28 23:58:11,330 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 49 [2023-11-28 23:58:11,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:11,333 INFO L225 Difference]: With dead ends: 550 [2023-11-28 23:58:11,334 INFO L226 Difference]: Without dead ends: 304 [2023-11-28 23:58:11,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-28 23:58:11,336 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 63 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 249 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:11,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 249 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-28 23:58:11,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2023-11-28 23:58:11,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 298. [2023-11-28 23:58:11,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 207 states have (on average 1.328502415458937) internal successors, (275), 226 states have internal predecessors, (275), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2023-11-28 23:58:11,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 389 transitions. [2023-11-28 23:58:11,369 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 389 transitions. Word has length 49 [2023-11-28 23:58:11,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:11,369 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 389 transitions. [2023-11-28 23:58:11,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-28 23:58:11,370 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 389 transitions. [2023-11-28 23:58:11,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-28 23:58:11,371 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:11,372 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:11,372 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-28 23:58:11,372 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:11,372 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:11,373 INFO L85 PathProgramCache]: Analyzing trace with hash -1978634934, now seen corresponding path program 1 times [2023-11-28 23:58:11,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:11,373 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1144134636] [2023-11-28 23:58:11,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:11,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:11,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-28 23:58:11,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-28 23:58:11,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:11,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:11,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-28 23:58:11,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,473 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:11,473 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:11,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1144134636] [2023-11-28 23:58:11,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1144134636] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:11,474 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:11,474 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:11,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [971416752] [2023-11-28 23:58:11,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:11,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-28 23:58:11,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:11,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:58:11,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:58:11,476 INFO L87 Difference]: Start difference. First operand 298 states and 389 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-28 23:58:11,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:11,670 INFO L93 Difference]: Finished difference Result 610 states and 821 transitions. [2023-11-28 23:58:11,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-28 23:58:11,671 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 49 [2023-11-28 23:58:11,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:11,674 INFO L225 Difference]: With dead ends: 610 [2023-11-28 23:58:11,674 INFO L226 Difference]: Without dead ends: 314 [2023-11-28 23:58:11,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-28 23:58:11,676 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 69 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:11,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 247 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-28 23:58:11,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2023-11-28 23:58:11,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 302. [2023-11-28 23:58:11,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 302 states, 211 states have (on average 1.3222748815165877) internal successors, (279), 230 states have internal predecessors, (279), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2023-11-28 23:58:11,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 393 transitions. [2023-11-28 23:58:11,706 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 393 transitions. Word has length 49 [2023-11-28 23:58:11,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:11,707 INFO L495 AbstractCegarLoop]: Abstraction has 302 states and 393 transitions. [2023-11-28 23:58:11,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-28 23:58:11,707 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 393 transitions. [2023-11-28 23:58:11,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-28 23:58:11,708 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:11,708 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:11,708 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-28 23:58:11,708 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:11,709 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:11,709 INFO L85 PathProgramCache]: Analyzing trace with hash -1838086324, now seen corresponding path program 1 times [2023-11-28 23:58:11,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:11,709 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [210663906] [2023-11-28 23:58:11,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:11,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:11,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-28 23:58:11,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-28 23:58:11,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:11,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:11,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-28 23:58:11,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:11,816 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:11,816 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:11,816 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [210663906] [2023-11-28 23:58:11,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [210663906] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:11,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:11,816 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:11,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248864816] [2023-11-28 23:58:11,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:11,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-28 23:58:11,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:11,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:58:11,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:58:11,818 INFO L87 Difference]: Start difference. First operand 302 states and 393 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-28 23:58:12,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:12,149 INFO L93 Difference]: Finished difference Result 860 states and 1163 transitions. [2023-11-28 23:58:12,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-28 23:58:12,150 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 49 [2023-11-28 23:58:12,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:12,155 INFO L225 Difference]: With dead ends: 860 [2023-11-28 23:58:12,155 INFO L226 Difference]: Without dead ends: 560 [2023-11-28 23:58:12,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-28 23:58:12,157 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 221 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 276 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:12,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 261 Invalid, 276 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-28 23:58:12,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 560 states. [2023-11-28 23:58:12,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 560 to 554. [2023-11-28 23:58:12,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 554 states, 389 states have (on average 1.275064267352185) internal successors, (496), 417 states have internal predecessors, (496), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2023-11-28 23:58:12,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 722 transitions. [2023-11-28 23:58:12,209 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 722 transitions. Word has length 49 [2023-11-28 23:58:12,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:12,210 INFO L495 AbstractCegarLoop]: Abstraction has 554 states and 722 transitions. [2023-11-28 23:58:12,210 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-28 23:58:12,210 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 722 transitions. [2023-11-28 23:58:12,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-28 23:58:12,212 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:12,212 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:12,212 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-28 23:58:12,212 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:12,213 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:12,213 INFO L85 PathProgramCache]: Analyzing trace with hash -444083930, now seen corresponding path program 1 times [2023-11-28 23:58:12,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:12,213 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101981746] [2023-11-28 23:58:12,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:12,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:12,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:12,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:12,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-28 23:58:12,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:12,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:12,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2023-11-28 23:58:12,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:12,407 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-28 23:58:12,407 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:12,407 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2101981746] [2023-11-28 23:58:12,407 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2101981746] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:12,407 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:12,408 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:58:12,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894215975] [2023-11-28 23:58:12,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:12,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-28 23:58:12,408 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:12,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-28 23:58:12,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-28 23:58:12,409 INFO L87 Difference]: Start difference. First operand 554 states and 722 transitions. Second operand has 8 states, 8 states have (on average 4.875) internal successors, (39), 6 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-28 23:58:13,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:13,163 INFO L93 Difference]: Finished difference Result 1707 states and 2322 transitions. [2023-11-28 23:58:13,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-28 23:58:13,164 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 6 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 53 [2023-11-28 23:58:13,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:13,172 INFO L225 Difference]: With dead ends: 1707 [2023-11-28 23:58:13,173 INFO L226 Difference]: Without dead ends: 1255 [2023-11-28 23:58:13,175 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=126, Invalid=426, Unknown=0, NotChecked=0, Total=552 [2023-11-28 23:58:13,176 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 445 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 566 mSolverCounterSat, 190 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 453 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 756 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 190 IncrementalHoareTripleChecker+Valid, 566 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:13,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [453 Valid, 354 Invalid, 756 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [190 Valid, 566 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-28 23:58:13,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1255 states. [2023-11-28 23:58:13,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1255 to 1072. [2023-11-28 23:58:13,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1072 states, 751 states have (on average 1.2743009320905458) internal successors, (957), 812 states have internal predecessors, (957), 170 states have call successors, (170), 126 states have call predecessors, (170), 150 states have return successors, (270), 172 states have call predecessors, (270), 170 states have call successors, (270) [2023-11-28 23:58:13,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1072 states to 1072 states and 1397 transitions. [2023-11-28 23:58:13,251 INFO L78 Accepts]: Start accepts. Automaton has 1072 states and 1397 transitions. Word has length 53 [2023-11-28 23:58:13,251 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:13,251 INFO L495 AbstractCegarLoop]: Abstraction has 1072 states and 1397 transitions. [2023-11-28 23:58:13,251 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 6 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-28 23:58:13,251 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1397 transitions. [2023-11-28 23:58:13,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2023-11-28 23:58:13,253 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:13,254 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:13,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-28 23:58:13,254 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:13,254 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:13,254 INFO L85 PathProgramCache]: Analyzing trace with hash -937529434, now seen corresponding path program 1 times [2023-11-28 23:58:13,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:13,255 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938735932] [2023-11-28 23:58:13,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:13,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:13,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:13,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-28 23:58:13,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:13,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:13,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:13,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:13,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-28 23:58:13,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-28 23:58:13,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,343 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-28 23:58:13,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:13,344 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938735932] [2023-11-28 23:58:13,344 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938735932] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:13,344 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:13,344 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-28 23:58:13,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1134057147] [2023-11-28 23:58:13,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:13,345 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-28 23:58:13,345 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:13,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-28 23:58:13,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-28 23:58:13,346 INFO L87 Difference]: Start difference. First operand 1072 states and 1397 transitions. Second operand has 7 states, 6 states have (on average 9.666666666666666) internal successors, (58), 4 states have internal predecessors, (58), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2023-11-28 23:58:13,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:13,772 INFO L93 Difference]: Finished difference Result 1272 states and 1650 transitions. [2023-11-28 23:58:13,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-28 23:58:13,773 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 9.666666666666666) internal successors, (58), 4 states have internal predecessors, (58), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 77 [2023-11-28 23:58:13,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:13,777 INFO L225 Difference]: With dead ends: 1272 [2023-11-28 23:58:13,777 INFO L226 Difference]: Without dead ends: 547 [2023-11-28 23:58:13,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-28 23:58:13,780 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 317 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 326 SdHoareTripleChecker+Valid, 244 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:13,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [326 Valid, 244 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 301 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-28 23:58:13,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2023-11-28 23:58:13,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 525. [2023-11-28 23:58:13,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 525 states, 368 states have (on average 1.236413043478261) internal successors, (455), 396 states have internal predecessors, (455), 82 states have call successors, (82), 62 states have call predecessors, (82), 74 states have return successors, (132), 84 states have call predecessors, (132), 82 states have call successors, (132) [2023-11-28 23:58:13,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 525 states to 525 states and 669 transitions. [2023-11-28 23:58:13,835 INFO L78 Accepts]: Start accepts. Automaton has 525 states and 669 transitions. Word has length 77 [2023-11-28 23:58:13,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:13,835 INFO L495 AbstractCegarLoop]: Abstraction has 525 states and 669 transitions. [2023-11-28 23:58:13,835 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 9.666666666666666) internal successors, (58), 4 states have internal predecessors, (58), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2023-11-28 23:58:13,835 INFO L276 IsEmpty]: Start isEmpty. Operand 525 states and 669 transitions. [2023-11-28 23:58:13,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2023-11-28 23:58:13,837 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:13,837 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:13,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-28 23:58:13,838 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:13,838 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:13,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1255693796, now seen corresponding path program 1 times [2023-11-28 23:58:13,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:13,838 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697540018] [2023-11-28 23:58:13,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:13,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:13,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:13,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-28 23:58:13,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:13,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:13,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:14,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:14,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:14,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-28 23:58:14,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-28 23:58:14,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-28 23:58:14,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:14,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:14,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-28 23:58:14,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,059 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 6 proven. 17 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-28 23:58:14,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:14,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697540018] [2023-11-28 23:58:14,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697540018] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-28 23:58:14,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2126897865] [2023-11-28 23:58:14,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:14,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:14,060 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:14,063 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-28 23:58:14,070 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-28 23:58:14,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:14,176 INFO L262 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-28 23:58:14,184 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:58:14,329 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:14,330 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-28 23:58:14,536 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 15 proven. 8 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-28 23:58:14,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2126897865] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-28 23:58:14,536 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-28 23:58:14,536 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-28 23:58:14,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714819126] [2023-11-28 23:58:14,537 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-28 23:58:14,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-28 23:58:14,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:14,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-28 23:58:14,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-28 23:58:14,539 INFO L87 Difference]: Start difference. First operand 525 states and 669 transitions. Second operand has 15 states, 12 states have (on average 9.75) internal successors, (117), 10 states have internal predecessors, (117), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2023-11-28 23:58:15,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:15,765 INFO L93 Difference]: Finished difference Result 1126 states and 1466 transitions. [2023-11-28 23:58:15,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-28 23:58:15,766 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 9.75) internal successors, (117), 10 states have internal predecessors, (117), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 97 [2023-11-28 23:58:15,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:15,771 INFO L225 Difference]: With dead ends: 1126 [2023-11-28 23:58:15,771 INFO L226 Difference]: Without dead ends: 650 [2023-11-28 23:58:15,773 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 224 SyntacticMatches, 4 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 462 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2023-11-28 23:58:15,774 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 359 mSDsluCounter, 653 mSDsCounter, 0 mSdLazyCounter, 1099 mSolverCounterSat, 162 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 362 SdHoareTripleChecker+Valid, 771 SdHoareTripleChecker+Invalid, 1261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 162 IncrementalHoareTripleChecker+Valid, 1099 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:15,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [362 Valid, 771 Invalid, 1261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [162 Valid, 1099 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-28 23:58:15,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2023-11-28 23:58:15,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 583. [2023-11-28 23:58:15,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 583 states, 405 states have (on average 1.2098765432098766) internal successors, (490), 441 states have internal predecessors, (490), 92 states have call successors, (92), 76 states have call predecessors, (92), 85 states have return successors, (124), 89 states have call predecessors, (124), 92 states have call successors, (124) [2023-11-28 23:58:15,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 583 states to 583 states and 706 transitions. [2023-11-28 23:58:15,813 INFO L78 Accepts]: Start accepts. Automaton has 583 states and 706 transitions. Word has length 97 [2023-11-28 23:58:15,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:15,814 INFO L495 AbstractCegarLoop]: Abstraction has 583 states and 706 transitions. [2023-11-28 23:58:15,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 9.75) internal successors, (117), 10 states have internal predecessors, (117), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2023-11-28 23:58:15,814 INFO L276 IsEmpty]: Start isEmpty. Operand 583 states and 706 transitions. [2023-11-28 23:58:15,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2023-11-28 23:58:15,817 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:15,817 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:15,824 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-28 23:58:16,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:16,018 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:16,019 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:16,019 INFO L85 PathProgramCache]: Analyzing trace with hash 329819068, now seen corresponding path program 1 times [2023-11-28 23:58:16,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:16,019 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590319694] [2023-11-28 23:58:16,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:16,019 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:16,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:16,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-28 23:58:16,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:16,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:16,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:16,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:16,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-28 23:58:16,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:16,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:16,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:16,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:16,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:16,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-28 23:58:16,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:16,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:16,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:16,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2023-11-28 23:58:16,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2023-11-28 23:58:16,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2023-11-28 23:58:16,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:16,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:16,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2023-11-28 23:58:16,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,237 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 67 proven. 1 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2023-11-28 23:58:16,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:16,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590319694] [2023-11-28 23:58:16,237 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590319694] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-28 23:58:16,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [624919283] [2023-11-28 23:58:16,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:16,238 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:16,238 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:16,239 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-28 23:58:16,241 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-28 23:58:16,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,366 INFO L262 TraceCheckSpWp]: Trace formula consists of 563 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-28 23:58:16,374 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:58:16,557 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 135 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2023-11-28 23:58:16,557 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-28 23:58:16,975 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 67 proven. 34 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2023-11-28 23:58:16,975 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [624919283] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-28 23:58:16,976 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-28 23:58:16,976 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 10] total 23 [2023-11-28 23:58:16,976 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200696566] [2023-11-28 23:58:16,976 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-28 23:58:16,977 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-28 23:58:16,977 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:16,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-28 23:58:16,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=406, Unknown=0, NotChecked=0, Total=506 [2023-11-28 23:58:16,979 INFO L87 Difference]: Start difference. First operand 583 states and 706 transitions. Second operand has 23 states, 22 states have (on average 7.590909090909091) internal successors, (167), 18 states have internal predecessors, (167), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) [2023-11-28 23:58:18,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:18,902 INFO L93 Difference]: Finished difference Result 1726 states and 2183 transitions. [2023-11-28 23:58:18,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2023-11-28 23:58:18,903 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 7.590909090909091) internal successors, (167), 18 states have internal predecessors, (167), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) Word has length 174 [2023-11-28 23:58:18,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:18,911 INFO L225 Difference]: With dead ends: 1726 [2023-11-28 23:58:18,911 INFO L226 Difference]: Without dead ends: 1145 [2023-11-28 23:58:18,915 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 458 GetRequests, 389 SyntacticMatches, 3 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1133 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=855, Invalid=3701, Unknown=0, NotChecked=0, Total=4556 [2023-11-28 23:58:18,916 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 1396 mSDsluCounter, 508 mSDsCounter, 0 mSdLazyCounter, 1564 mSolverCounterSat, 723 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1396 SdHoareTripleChecker+Valid, 601 SdHoareTripleChecker+Invalid, 2287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 723 IncrementalHoareTripleChecker+Valid, 1564 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:18,916 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1396 Valid, 601 Invalid, 2287 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [723 Valid, 1564 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-11-28 23:58:18,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1145 states. [2023-11-28 23:58:19,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1145 to 1071. [2023-11-28 23:58:19,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1071 states, 756 states have (on average 1.1375661375661377) internal successors, (860), 806 states have internal predecessors, (860), 166 states have call successors, (166), 143 states have call predecessors, (166), 148 states have return successors, (208), 158 states have call predecessors, (208), 166 states have call successors, (208) [2023-11-28 23:58:19,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1071 states to 1071 states and 1234 transitions. [2023-11-28 23:58:19,027 INFO L78 Accepts]: Start accepts. Automaton has 1071 states and 1234 transitions. Word has length 174 [2023-11-28 23:58:19,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:19,027 INFO L495 AbstractCegarLoop]: Abstraction has 1071 states and 1234 transitions. [2023-11-28 23:58:19,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 7.590909090909091) internal successors, (167), 18 states have internal predecessors, (167), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) [2023-11-28 23:58:19,028 INFO L276 IsEmpty]: Start isEmpty. Operand 1071 states and 1234 transitions. [2023-11-28 23:58:19,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2023-11-28 23:58:19,033 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:19,033 INFO L195 NwaCegarLoop]: trace histogram [7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:19,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-28 23:58:19,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:19,234 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:19,234 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:19,234 INFO L85 PathProgramCache]: Analyzing trace with hash -2061927658, now seen corresponding path program 1 times [2023-11-28 23:58:19,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:19,235 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127089935] [2023-11-28 23:58:19,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:19,235 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:19,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:19,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-28 23:58:19,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:19,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:19,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:19,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:19,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-28 23:58:19,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:19,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:19,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:19,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:19,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:19,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-28 23:58:19,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2023-11-28 23:58:19,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2023-11-28 23:58:19,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:19,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:19,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:19,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-28 23:58:19,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2023-11-28 23:58:19,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 150 [2023-11-28 23:58:19,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2023-11-28 23:58:19,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:19,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2023-11-28 23:58:19,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,625 INFO L134 CoverageAnalysis]: Checked inductivity of 215 backedges. 73 proven. 48 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2023-11-28 23:58:19,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:19,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127089935] [2023-11-28 23:58:19,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127089935] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-28 23:58:19,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1808267920] [2023-11-28 23:58:19,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:19,626 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:19,627 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:19,628 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-28 23:58:19,630 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-28 23:58:19,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:19,779 INFO L262 TraceCheckSpWp]: Trace formula consists of 603 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-28 23:58:19,785 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:58:19,932 INFO L134 CoverageAnalysis]: Checked inductivity of 215 backedges. 166 proven. 9 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2023-11-28 23:58:19,933 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-28 23:58:20,433 INFO L134 CoverageAnalysis]: Checked inductivity of 215 backedges. 87 proven. 50 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2023-11-28 23:58:20,433 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1808267920] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-28 23:58:20,433 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-28 23:58:20,434 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2023-11-28 23:58:20,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472449030] [2023-11-28 23:58:20,434 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-28 23:58:20,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-28 23:58:20,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:20,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-28 23:58:20,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2023-11-28 23:58:20,437 INFO L87 Difference]: Start difference. First operand 1071 states and 1234 transitions. Second operand has 22 states, 19 states have (on average 10.789473684210526) internal successors, (205), 15 states have internal predecessors, (205), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2023-11-28 23:58:21,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:21,848 INFO L93 Difference]: Finished difference Result 2096 states and 2448 transitions. [2023-11-28 23:58:21,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2023-11-28 23:58:21,848 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 19 states have (on average 10.789473684210526) internal successors, (205), 15 states have internal predecessors, (205), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) Word has length 188 [2023-11-28 23:58:21,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:21,854 INFO L225 Difference]: With dead ends: 2096 [2023-11-28 23:58:21,855 INFO L226 Difference]: Without dead ends: 1121 [2023-11-28 23:58:21,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 480 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2023-11-28 23:58:21,860 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 448 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 1846 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 2039 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 1846 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:21,860 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [451 Valid, 298 Invalid, 2039 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 1846 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-28 23:58:21,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1121 states. [2023-11-28 23:58:21,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1121 to 1087. [2023-11-28 23:58:21,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1087 states, 764 states have (on average 1.1295811518324608) internal successors, (863), 814 states have internal predecessors, (863), 166 states have call successors, (166), 151 states have call predecessors, (166), 156 states have return successors, (208), 158 states have call predecessors, (208), 166 states have call successors, (208) [2023-11-28 23:58:21,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1087 states to 1087 states and 1237 transitions. [2023-11-28 23:58:21,969 INFO L78 Accepts]: Start accepts. Automaton has 1087 states and 1237 transitions. Word has length 188 [2023-11-28 23:58:21,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:21,970 INFO L495 AbstractCegarLoop]: Abstraction has 1087 states and 1237 transitions. [2023-11-28 23:58:21,971 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 19 states have (on average 10.789473684210526) internal successors, (205), 15 states have internal predecessors, (205), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2023-11-28 23:58:21,971 INFO L276 IsEmpty]: Start isEmpty. Operand 1087 states and 1237 transitions. [2023-11-28 23:58:21,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2023-11-28 23:58:21,974 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:21,975 INFO L195 NwaCegarLoop]: trace histogram [7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:21,980 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-11-28 23:58:22,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:22,176 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:22,176 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:22,176 INFO L85 PathProgramCache]: Analyzing trace with hash -73825931, now seen corresponding path program 1 times [2023-11-28 23:58:22,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:22,176 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [532048282] [2023-11-28 23:58:22,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:22,177 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:22,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:22,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-28 23:58:22,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:22,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:22,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:22,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:22,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-28 23:58:22,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:22,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:22,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:22,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:22,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:22,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-28 23:58:22,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2023-11-28 23:58:22,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2023-11-28 23:58:22,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:22,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:22,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:22,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-28 23:58:22,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 141 [2023-11-28 23:58:22,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2023-11-28 23:58:22,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2023-11-28 23:58:22,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:22,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:22,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2023-11-28 23:58:22,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,466 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 62 proven. 28 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2023-11-28 23:58:22,466 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:22,466 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [532048282] [2023-11-28 23:58:22,466 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [532048282] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-28 23:58:22,466 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1067938563] [2023-11-28 23:58:22,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:22,466 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:22,467 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:22,468 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-28 23:58:22,470 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-28 23:58:22,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:22,613 INFO L262 TraceCheckSpWp]: Trace formula consists of 603 conjuncts, 18 conjunts are in the unsatisfiable core [2023-11-28 23:58:22,619 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:58:22,847 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 117 proven. 22 refuted. 0 times theorem prover too weak. 77 trivial. 0 not checked. [2023-11-28 23:58:22,847 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-28 23:58:23,401 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 89 proven. 38 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2023-11-28 23:58:23,401 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1067938563] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-28 23:58:23,401 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-28 23:58:23,402 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 13] total 27 [2023-11-28 23:58:23,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883483563] [2023-11-28 23:58:23,402 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-28 23:58:23,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2023-11-28 23:58:23,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:23,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2023-11-28 23:58:23,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=117, Invalid=585, Unknown=0, NotChecked=0, Total=702 [2023-11-28 23:58:23,405 INFO L87 Difference]: Start difference. First operand 1087 states and 1237 transitions. Second operand has 27 states, 26 states have (on average 8.423076923076923) internal successors, (219), 21 states have internal predecessors, (219), 14 states have call successors, (56), 12 states have call predecessors, (56), 15 states have return successors, (57), 16 states have call predecessors, (57), 14 states have call successors, (57) [2023-11-28 23:58:26,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:26,456 INFO L93 Difference]: Finished difference Result 2423 states and 2804 transitions. [2023-11-28 23:58:26,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2023-11-28 23:58:26,457 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 8.423076923076923) internal successors, (219), 21 states have internal predecessors, (219), 14 states have call successors, (56), 12 states have call predecessors, (56), 15 states have return successors, (57), 16 states have call predecessors, (57), 14 states have call successors, (57) Word has length 189 [2023-11-28 23:58:26,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:26,466 INFO L225 Difference]: With dead ends: 2423 [2023-11-28 23:58:26,467 INFO L226 Difference]: Without dead ends: 1436 [2023-11-28 23:58:26,472 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 514 GetRequests, 428 SyntacticMatches, 7 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1732 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=1357, Invalid=5123, Unknown=0, NotChecked=0, Total=6480 [2023-11-28 23:58:26,473 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 2158 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 2935 mSolverCounterSat, 1078 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2158 SdHoareTripleChecker+Valid, 550 SdHoareTripleChecker+Invalid, 4013 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1078 IncrementalHoareTripleChecker+Valid, 2935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:26,473 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2158 Valid, 550 Invalid, 4013 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1078 Valid, 2935 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2023-11-28 23:58:26,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1436 states. [2023-11-28 23:58:26,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1436 to 1296. [2023-11-28 23:58:26,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1296 states, 912 states have (on average 1.1228070175438596) internal successors, (1024), 959 states have internal predecessors, (1024), 202 states have call successors, (202), 185 states have call predecessors, (202), 181 states have return successors, (239), 185 states have call predecessors, (239), 202 states have call successors, (239) [2023-11-28 23:58:26,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1296 states to 1296 states and 1465 transitions. [2023-11-28 23:58:26,655 INFO L78 Accepts]: Start accepts. Automaton has 1296 states and 1465 transitions. Word has length 189 [2023-11-28 23:58:26,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:26,656 INFO L495 AbstractCegarLoop]: Abstraction has 1296 states and 1465 transitions. [2023-11-28 23:58:26,656 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 8.423076923076923) internal successors, (219), 21 states have internal predecessors, (219), 14 states have call successors, (56), 12 states have call predecessors, (56), 15 states have return successors, (57), 16 states have call predecessors, (57), 14 states have call successors, (57) [2023-11-28 23:58:26,656 INFO L276 IsEmpty]: Start isEmpty. Operand 1296 states and 1465 transitions. [2023-11-28 23:58:26,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 242 [2023-11-28 23:58:26,664 INFO L187 NwaCegarLoop]: Found error trace [2023-11-28 23:58:26,664 INFO L195 NwaCegarLoop]: trace histogram [9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:26,670 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-28 23:58:26,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:26,870 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-28 23:58:26,871 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:26,871 INFO L85 PathProgramCache]: Analyzing trace with hash -1491134613, now seen corresponding path program 1 times [2023-11-28 23:58:26,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:26,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042309783] [2023-11-28 23:58:26,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:26,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:26,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:27,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-28 23:58:27,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:27,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:27,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:27,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:27,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-28 23:58:27,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:27,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:27,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:27,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-28 23:58:27,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:27,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-28 23:58:27,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2023-11-28 23:58:27,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2023-11-28 23:58:27,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:27,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-28 23:58:27,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-28 23:58:27,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-28 23:58:27,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 141 [2023-11-28 23:58:27,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2023-11-28 23:58:27,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2023-11-28 23:58:27,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-28 23:58:27,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-28 23:58:27,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:27,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:27,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-28 23:58:27,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 193 [2023-11-28 23:58:27,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2023-11-28 23:58:27,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 210 [2023-11-28 23:58:27,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-28 23:58:27,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-28 23:58:27,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2023-11-28 23:58:27,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,352 INFO L134 CoverageAnalysis]: Checked inductivity of 381 backedges. 111 proven. 74 refuted. 0 times theorem prover too weak. 196 trivial. 0 not checked. [2023-11-28 23:58:27,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:27,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042309783] [2023-11-28 23:58:27,352 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042309783] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-28 23:58:27,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [613481468] [2023-11-28 23:58:27,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:27,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-28 23:58:27,352 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:58:27,353 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-28 23:58:27,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-28 23:58:27,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:27,509 INFO L262 TraceCheckSpWp]: Trace formula consists of 736 conjuncts, 28 conjunts are in the unsatisfiable core [2023-11-28 23:58:27,517 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:58:27,789 INFO L134 CoverageAnalysis]: Checked inductivity of 381 backedges. 136 proven. 75 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2023-11-28 23:58:27,789 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-28 23:58:28,450 INFO L134 CoverageAnalysis]: Checked inductivity of 381 backedges. 90 proven. 114 refuted. 0 times theorem prover too weak. 177 trivial. 0 not checked. [2023-11-28 23:58:28,450 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [613481468] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-28 23:58:28,451 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-28 23:58:28,451 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 15] total 25 [2023-11-28 23:58:28,451 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110430348] [2023-11-28 23:58:28,451 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-28 23:58:28,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-28 23:58:28,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:28,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-28 23:58:28,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=485, Unknown=0, NotChecked=0, Total=600 [2023-11-28 23:58:28,455 INFO L87 Difference]: Start difference. First operand 1296 states and 1465 transitions. Second operand has 25 states, 25 states have (on average 10.16) internal successors, (254), 21 states have internal predecessors, (254), 16 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 16 states have call predecessors, (66), 16 states have call successors, (66) [2023-11-28 23:58:29,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:29,945 INFO L93 Difference]: Finished difference Result 3171 states and 3636 transitions. [2023-11-28 23:58:29,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-11-28 23:58:29,946 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 10.16) internal successors, (254), 21 states have internal predecessors, (254), 16 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 16 states have call predecessors, (66), 16 states have call successors, (66) Word has length 241 [2023-11-28 23:58:29,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-28 23:58:29,947 INFO L225 Difference]: With dead ends: 3171 [2023-11-28 23:58:29,948 INFO L226 Difference]: Without dead ends: 0 [2023-11-28 23:58:29,953 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 596 GetRequests, 535 SyntacticMatches, 13 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 539 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=621, Invalid=1829, Unknown=0, NotChecked=0, Total=2450 [2023-11-28 23:58:29,954 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 742 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 1804 mSolverCounterSat, 412 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 745 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 2216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 412 IncrementalHoareTripleChecker+Valid, 1804 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-28 23:58:29,954 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [745 Valid, 402 Invalid, 2216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [412 Valid, 1804 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-28 23:58:29,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-28 23:58:29,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-28 23:58:29,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:29,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-28 23:58:29,955 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 241 [2023-11-28 23:58:29,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-28 23:58:29,956 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-28 23:58:29,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 10.16) internal successors, (254), 21 states have internal predecessors, (254), 16 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 16 states have call predecessors, (66), 16 states have call successors, (66) [2023-11-28 23:58:29,956 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-28 23:58:29,956 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-28 23:58:29,958 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-28 23:58:29,964 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-11-28 23:58:30,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2023-11-28 23:58:30,165 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-28 23:58:40,936 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2023-11-28 23:58:40,936 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0))))) [2023-11-28 23:58:40,936 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2023-11-28 23:58:40,936 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2023-11-28 23:58:40,936 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse5 (< 1 ~waterLevel~0)) (.cse3 (not (= 2 ~waterLevel~0))) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse6) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse1 .cse2 (< 0 ~waterLevel~0) .cse4))) [2023-11-28 23:58:40,936 INFO L899 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2023-11-28 23:58:40,937 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 562) no Hoare annotation was computed. [2023-11-28 23:58:40,937 INFO L899 garLoopResultBuilder]: For program point L558-2(lines 558 562) no Hoare annotation was computed. [2023-11-28 23:58:40,937 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 390 414) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (< ~switchedOnBeforeTS~0 1)) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= 2 ~waterLevel~0))) (.cse10 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (< 0 ~waterLevel~0)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse6 .cse2 .cse9 .cse7 .cse4 .cse8) (or .cse0 .cse1 .cse2 (< 1 ~waterLevel~0) .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse10) (or .cse5 .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse1 .cse2 .cse9 .cse4))) [2023-11-28 23:58:40,937 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse2 (< 1 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse3))) [2023-11-28 23:58:40,937 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse2 (< 1 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse3))) [2023-11-28 23:58:40,937 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2023-11-28 23:58:40,937 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2023-11-28 23:58:40,937 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 485 493) the Hoare annotation is: true [2023-11-28 23:58:40,938 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 610 621) the Hoare annotation is: (let ((.cse5 (< ~pumpRunning~0 1)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (< 2 ~waterLevel~0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4 (not (= 2 ~waterLevel~0))) (or .cse0 .cse5 .cse1 .cse3 .cse4 (< ~switchedOnBeforeTS~0 1)) (or .cse0 .cse2 .cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (< |old(~methaneLevelCritical~0)| 1)))) [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point L247(lines 222 251) no Hoare annotation was computed. [2023-11-28 23:58:40,938 INFO L899 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2023-11-28 23:58:40,939 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2023-11-28 23:58:40,939 INFO L902 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2023-11-28 23:58:40,939 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 222 251) the Hoare annotation is: true [2023-11-28 23:58:40,939 INFO L902 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2023-11-28 23:58:40,939 INFO L902 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2023-11-28 23:58:40,939 INFO L899 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2023-11-28 23:58:40,939 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-11-28 23:58:40,939 INFO L899 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2023-11-28 23:58:40,939 INFO L899 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2023-11-28 23:58:40,940 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse20 (= ~waterLevel~0 1)) (.cse14 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse15 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse26 (= ~methaneLevelCritical~0 0)) (.cse24 (= 1 ~systemActive~0)) (.cse25 (<= ~waterLevel~0 0)) (.cse16 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse21 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1))) (let ((.cse3 (and .cse10 (<= ~waterLevel~0 1) .cse11 .cse21)) (.cse7 (< 0 |old(~waterLevel~0)|)) (.cse18 (and .cse10 .cse25 .cse11 .cse16 .cse21)) (.cse19 (and (<= 1 ~pumpRunning~0) .cse13 .cse26 .cse24 .cse25 .cse11 .cse16 .cse21)) (.cse2 (not .cse26)) (.cse5 (and .cse10 .cse24 .cse25 .cse11 .cse16 .cse21)) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse17 (and .cse10 .cse14 .cse15 .cse16)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= 0 ~systemActive~0))) (.cse22 (and .cse10 .cse15 .cse20 .cse16)) (.cse1 (not .cse24)) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse9 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse7 .cse8 .cse4 .cse9) (or .cse0 (and .cse10 .cse11) .cse12) (or (< 1 |old(~waterLevel~0)|) (and .cse13 .cse14 .cse15 .cse16) .cse6 .cse1 .cse2 .cse8 .cse17 .cse18 .cse19) (or .cse0 .cse1 .cse3 .cse4 .cse9) (or .cse6 .cse1 .cse7 .cse2 .cse8 .cse18 .cse19) (or (and .cse13 .cse20 .cse16 .cse21) .cse22 .cse1 .cse2 .cse23 .cse8) (or .cse5 .cse6 .cse1 .cse8 .cse4 .cse17 .cse9) (or .cse0 .cse23 .cse12) (or .cse22 .cse1 .cse23 .cse8 .cse9)))) [2023-11-28 23:58:40,940 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2023-11-28 23:58:40,940 INFO L899 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2023-11-28 23:58:40,940 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 594) no Hoare annotation was computed. [2023-11-28 23:58:40,940 INFO L899 garLoopResultBuilder]: For program point L590-2(lines 586 597) no Hoare annotation was computed. [2023-11-28 23:58:40,940 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2023-11-28 23:58:40,941 INFO L895 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse13 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse11 (= 1 ~systemActive~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse5 (and .cse12 .cse15 .cse13 .cse11 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse14)) (.cse4 (< 0 |old(~waterLevel~0)|)) (.cse3 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (not .cse15)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse8 (and .cse12 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse13 .cse14)) (.cse1 (not .cse11)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse9 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse5 .cse2 .cse6) (or .cse0 .cse1 .cse2 .cse7) (or (< 1 |old(~waterLevel~0)|) .cse3 .cse1 .cse5 .cse2 .cse6 .cse8) (or .cse1 .cse7 .cse6 .cse9) (or .cse0 .cse1 .cse4 .cse2) (or .cse3 .cse1 .cse6 .cse10 .cse9) (or .cse1 .cse2 .cse7 .cse6 .cse8) (or .cse0 .cse1 .cse10 .cse9) (or .cse0 (not (= 0 ~systemActive~0)))))) [2023-11-28 23:58:40,941 INFO L895 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= 1 ~systemActive~0)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse9 (and (<= 1 ~pumpRunning~0) .cse11 (<= 1 ~methaneLevelCritical~0) .cse14 .cse12 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse13)) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (< 0 |old(~waterLevel~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse2 (not .cse14)) (.cse7 (< 2 |old(~waterLevel~0)|)) (.cse8 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3) (or .cse1 .cse2 .cse6 .cse4 .cse7 .cse8 .cse9) (or .cse5 .cse2 .cse3 .cse10) (or .cse1 .cse2 (and .cse11 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse12 .cse13) .cse4 .cse7 .cse8 .cse9) (or .cse2 .cse3 .cse10 .cse4) (or .cse1 .cse2 .cse6 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse3) (or .cse2 .cse10 .cse4 (and .cse11 .cse12 (= ~waterLevel~0 1) .cse13) .cse8) (or .cse5 .cse2 .cse7 .cse8) (or .cse5 (not (= 0 ~systemActive~0)))))) [2023-11-28 23:58:40,942 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 329 355) the Hoare annotation is: (let ((.cse12 (= |old(~pumpRunning~0)| 0)) (.cse10 (= 2 ~waterLevel~0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and .cse9 .cse11 .cse15)) (.cse13 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse14 (and .cse16 .cse11 .cse15)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse5 (and .cse16 .cse10 .cse11)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse1 (not .cse12)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse5 .cse6 .cse7) (or .cse1 .cse2 .cse6 .cse8 (and .cse9 .cse10 .cse11 .cse12)) (or .cse13 .cse2 .cse3 .cse7 .cse14 .cse4) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse13 .cse2 .cse7 .cse14 .cse4 .cse8) (or .cse2 .cse5 .cse6 .cse7 .cse8) (or (< 1 |old(~waterLevel~0)|) .cse1 .cse2 (and .cse9 .cse11 .cse12 .cse15) .cse8)))) [2023-11-28 23:58:40,942 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= 1 ~systemActive~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (< 2 |old(~waterLevel~0)|)) (.cse8 (< ~methaneLevelCritical~0 1)) (.cse3 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (and .cse11 .cse13 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse12)) (.cse5 (< 0 |old(~waterLevel~0)|)) (.cse1 (not .cse13)) (.cse10 (and .cse11 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse12)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse9) (or (< 1 |old(~waterLevel~0)|) .cse3 .cse1 .cse4 .cse10 .cse2 .cse6) (or .cse1 (and .cse11 (= ~waterLevel~0 1) .cse12) .cse9 .cse6 .cse8) (or .cse0 .cse1 .cse5 .cse2) (or .cse3 .cse1 .cse4 .cse10 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse7 .cse8) (or .cse3 .cse1 .cse4 .cse5 .cse2 .cse6) (or .cse1 .cse10 .cse2 .cse9 .cse6) (or .cse0 (not (= 0 ~systemActive~0)))))) [2023-11-28 23:58:40,942 INFO L899 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2023-11-28 23:58:40,942 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse12 (= |old(~pumpRunning~0)| 0)) (.cse10 (= 2 ~waterLevel~0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and .cse9 .cse11 .cse15)) (.cse13 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse14 (and .cse16 .cse11 .cse15)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse5 (and .cse16 .cse10 .cse11)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse1 (not .cse12)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse5 .cse6 .cse7) (or .cse1 .cse2 .cse6 .cse8 (and .cse9 .cse10 .cse11 .cse12)) (or .cse13 .cse2 .cse3 .cse7 .cse14 .cse4) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse13 .cse2 .cse7 .cse14 .cse4 .cse8) (or .cse2 .cse5 .cse6 .cse7 .cse8) (or (< 1 |old(~waterLevel~0)|) .cse1 .cse2 (and .cse9 .cse11 .cse12 .cse15) .cse8)))) [2023-11-28 23:58:40,942 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-11-28 23:58:40,942 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L895 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse9 (< 2 |old(~waterLevel~0)|)) (.cse10 (< ~methaneLevelCritical~0 1)) (.cse8 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse11 (< 0 |old(~waterLevel~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse5 .cse4) (or .cse6 .cse0 .cse2 .cse3 (and .cse7 (= ~waterLevel~0 1))) (or .cse6 .cse8 .cse2 .cse9 .cse10) (or .cse1 .cse2 .cse11 .cse3 .cse4) (or .cse2 .cse5 .cse4 .cse10) (or .cse6 .cse2 (and .cse7 (= 2 ~waterLevel~0)) .cse3 .cse5) (or .cse1 .cse2 .cse4 .cse9 .cse10) (or .cse6 .cse8 .cse2 .cse11 .cse3) (or .cse6 (not (= 0 ~systemActive~0)))))) [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L435-1(lines 416 440) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L80-1(lines 72 100) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2023-11-28 23:58:40,943 INFO L899 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L895 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse5 .cse2 .cse7 .cse3 .cse4))) [2023-11-28 23:58:40,944 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse7 (<= ~waterLevel~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~waterLevel~0 1)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 .cse6) (and .cse5 .cse2 .cse3 .cse4 .cse7) (and .cse5 .cse8 .cse1 .cse3 .cse4) (and .cse5 .cse8 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse7 .cse9) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse9))) [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2023-11-28 23:58:40,944 INFO L899 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-28 23:58:40,945 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse6 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2)) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse7) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse7))) [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point L215(lines 154 219) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-28 23:58:40,945 INFO L895 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2023-11-28 23:58:40,946 INFO L895 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse7 (<= ~waterLevel~0 1)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2)) (and .cse0 .cse6 .cse7 .cse3 .cse4 .cse8) (and .cse0 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8))) [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 673) no Hoare annotation was computed. [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L539(lines 539 543) no Hoare annotation was computed. [2023-11-28 23:58:40,946 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (< 1 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not .cse5)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (and (= ~pumpRunning~0 0) .cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)))) (and (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2 (< |old(~pumpRunning~0)| 1)) (or .cse3 .cse0 .cse1 .cse2 .cse4) (or .cse3 .cse0 (not (= 2 ~waterLevel~0)) .cse2 .cse4) (or (< 2 ~waterLevel~0) .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L539-2(lines 539 543) no Hoare annotation was computed. [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2023-11-28 23:58:40,946 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2023-11-28 23:58:40,947 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 364 388) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (< ~switchedOnBeforeTS~0 1)) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= 2 ~waterLevel~0))) (.cse10 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (< 0 ~waterLevel~0)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse6 .cse2 .cse9 .cse7 .cse4 .cse8) (or .cse0 .cse1 .cse2 (< 1 ~waterLevel~0) .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse10) (or .cse5 .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse1 .cse2 .cse9 .cse4))) [2023-11-28 23:58:40,947 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 663 676) no Hoare annotation was computed. [2023-11-28 23:58:40,947 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (< 2 ~waterLevel~0) .cse5 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4) (or .cse5 .cse1 (< 1 ~waterLevel~0) .cse3) (or .cse5 .cse1 (not (= 2 ~waterLevel~0)) .cse3))) [2023-11-28 23:58:40,947 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2023-11-28 23:58:40,947 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2023-11-28 23:58:40,947 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 462) no Hoare annotation was computed. [2023-11-28 23:58:40,947 INFO L895 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (< 1 ~waterLevel~0)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not .cse3) .cse4) (or (< 2 ~waterLevel~0) .cse0 .cse2 (and .cse1 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse2 .cse5 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse2 .cse5 .cse4))) [2023-11-28 23:58:40,948 INFO L899 garLoopResultBuilder]: For program point L456-2(lines 449 465) no Hoare annotation was computed. [2023-11-28 23:58:40,948 INFO L899 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2023-11-28 23:58:40,948 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2023-11-28 23:58:40,948 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 598 609) the Hoare annotation is: (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (< ~pumpRunning~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse7 (= 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 (< ~switchedOnBeforeTS~0 1) .cse3 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse3 .cse4) (or .cse1 .cse7 .cse2 .cse3 .cse8) (or .cse5 .cse2 (< 0 |old(~waterLevel~0)|) .cse4 .cse6) (or .cse5 .cse7 .cse2 .cse3 .cse8) (or .cse5 .cse7 .cse2 .cse8 .cse6))) [2023-11-28 23:58:40,948 INFO L899 garLoopResultBuilder]: For program point L602-1(lines 598 609) no Hoare annotation was computed. [2023-11-28 23:58:40,948 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2023-11-28 23:58:40,949 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 484) the Hoare annotation is: true [2023-11-28 23:58:40,951 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:40,953 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-28 23:58:40,967 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 11:58:40 BoogieIcfgContainer [2023-11-28 23:58:40,967 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-28 23:58:40,967 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-28 23:58:40,968 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-28 23:58:40,968 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-28 23:58:40,968 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:58:09" (3/4) ... [2023-11-28 23:58:40,970 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-28 23:58:40,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-28 23:58:40,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-28 23:58:40,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-28 23:58:40,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-28 23:58:40,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-28 23:58:40,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-28 23:58:40,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-28 23:58:40,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-28 23:58:40,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-28 23:58:40,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-28 23:58:40,983 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 37 nodes and edges [2023-11-28 23:58:40,984 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-28 23:58:40,985 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-28 23:58:40,986 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-28 23:58:40,987 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-28 23:58:41,107 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-28 23:58:41,108 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-28 23:58:41,108 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-28 23:58:41,109 INFO L158 Benchmark]: Toolchain (without parser) took 32277.63ms. Allocated memory was 157.3MB in the beginning and 427.8MB in the end (delta: 270.5MB). Free memory was 117.3MB in the beginning and 209.9MB in the end (delta: -92.6MB). Peak memory consumption was 180.9MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,109 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 157.3MB. Free memory is still 130.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-28 23:58:41,110 INFO L158 Benchmark]: CACSL2BoogieTranslator took 384.79ms. Allocated memory is still 157.3MB. Free memory was 116.8MB in the beginning and 96.8MB in the end (delta: 20.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,110 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.14ms. Allocated memory is still 157.3MB. Free memory was 96.8MB in the beginning and 94.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,110 INFO L158 Benchmark]: Boogie Preprocessor took 50.63ms. Allocated memory is still 157.3MB. Free memory was 94.5MB in the beginning and 92.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,111 INFO L158 Benchmark]: RCFGBuilder took 490.85ms. Allocated memory is still 157.3MB. Free memory was 92.0MB in the beginning and 67.8MB in the end (delta: 24.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,111 INFO L158 Benchmark]: TraceAbstraction took 31152.90ms. Allocated memory was 157.3MB in the beginning and 427.8MB in the end (delta: 270.5MB). Free memory was 67.0MB in the beginning and 218.3MB in the end (delta: -151.2MB). Peak memory consumption was 204.0MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,111 INFO L158 Benchmark]: Witness Printer took 140.81ms. Allocated memory is still 427.8MB. Free memory was 218.3MB in the beginning and 209.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-28 23:58:41,113 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 157.3MB. Free memory is still 130.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 384.79ms. Allocated memory is still 157.3MB. Free memory was 116.8MB in the beginning and 96.8MB in the end (delta: 20.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.14ms. Allocated memory is still 157.3MB. Free memory was 96.8MB in the beginning and 94.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.63ms. Allocated memory is still 157.3MB. Free memory was 94.5MB in the beginning and 92.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 490.85ms. Allocated memory is still 157.3MB. Free memory was 92.0MB in the beginning and 67.8MB in the end (delta: 24.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 31152.90ms. Allocated memory was 157.3MB in the beginning and 427.8MB in the end (delta: 270.5MB). Free memory was 67.0MB in the beginning and 218.3MB in the end (delta: -151.2MB). Peak memory consumption was 204.0MB. Max. memory is 16.1GB. * Witness Printer took 140.81ms. Allocated memory is still 427.8MB. Free memory was 218.3MB in the beginning and 209.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [101] - GenericResultAtLocation [Line: 139]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [139] - GenericResultAtLocation [Line: 148]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [148] - GenericResultAtLocation [Line: 220]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] - GenericResultAtLocation [Line: 318]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [318] - GenericResultAtLocation [Line: 583]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] - GenericResultAtLocation [Line: 686]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [686] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 31.1s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 11.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 6433 SdHoareTripleChecker+Valid, 6.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 6383 mSDsluCounter, 4864 SdHoareTripleChecker+Invalid, 5.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3671 mSDsCounter, 3026 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 10819 IncrementalHoareTripleChecker+Invalid, 13845 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3026 mSolverCounterUnsat, 1193 mSDtfsCounter, 10819 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2476 GetRequests, 2107 SyntacticMatches, 29 SemanticMatches, 340 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4457 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1296occurred in iteration=13, InterpolantAutomatonStates: 263, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 14 MinimizatonAttempts, 552 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 3317 PreInvPairs, 3680 NumberOfFragments, 3389 HoareAnnotationTreeSize, 3317 FomulaSimplifications, 43701 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 31 FomulaSimplificationsInter, 58703 FormulaSimplificationTreeSizeReductionInter, 9.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.7s InterpolantComputationTime, 2155 NumberOfCodeBlocks, 2155 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3020 ConstructedInterpolants, 0 QuantifiedInterpolants, 6737 SizeOfPredicates, 11 NumberOfNonLiveVariables, 2859 ConjunctsInSsa, 78 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 2594/3124 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((((((1 <= pumpRunning) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-28 23:58:41,133 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a35384a3-c7e7-4642-b36c-e2345aa8b31b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE