./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:47:35,689 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:47:35,764 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:47:35,770 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:47:35,771 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:47:35,799 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:47:35,800 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:47:35,801 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:47:35,802 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:47:35,803 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:47:35,804 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:47:35,804 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:47:35,805 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:47:35,805 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:47:35,806 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:47:35,807 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:47:35,807 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:47:35,808 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:47:35,808 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:47:35,809 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:47:35,813 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:47:35,813 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:47:35,814 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:47:35,814 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:47:35,815 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:47:35,815 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:47:35,816 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:47:35,817 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:47:35,818 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:47:35,819 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:47:35,820 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:47:35,821 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:47:35,821 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:47:35,821 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:47:35,822 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:47:35,822 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:47:35,822 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:47:35,823 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:47:35,823 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:47:35,823 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f [2023-11-06 22:47:36,178 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:47:36,210 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:47:36,213 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:47:36,215 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:47:36,216 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:47:36,217 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2023-11-06 22:47:39,374 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:47:39,706 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:47:39,711 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2023-11-06 22:47:39,734 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/data/b41a0760c/b31eeb6c61c74223b4082878875f4cba/FLAGb80cae331 [2023-11-06 22:47:39,750 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/data/b41a0760c/b31eeb6c61c74223b4082878875f4cba [2023-11-06 22:47:39,759 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:47:39,761 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:47:39,768 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:47:39,768 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:47:39,773 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:47:39,774 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:47:39" (1/1) ... [2023-11-06 22:47:39,775 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1dc4eb4a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:39, skipping insertion in model container [2023-11-06 22:47:39,776 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:47:39" (1/1) ... [2023-11-06 22:47:39,843 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:47:40,099 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2023-11-06 22:47:40,154 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:47:40,166 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:47:40,178 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2023-11-06 22:47:40,180 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [153] [2023-11-06 22:47:40,180 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [182] [2023-11-06 22:47:40,180 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [290] [2023-11-06 22:47:40,181 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [325] [2023-11-06 22:47:40,181 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [540] [2023-11-06 22:47:40,181 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [607] [2023-11-06 22:47:40,181 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [616] [2023-11-06 22:47:40,232 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2023-11-06 22:47:40,291 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:47:40,327 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:47:40,327 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40 WrapperNode [2023-11-06 22:47:40,328 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:47:40,329 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:47:40,329 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:47:40,330 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:47:40,339 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,368 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,414 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 207 [2023-11-06 22:47:40,415 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:47:40,416 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:47:40,416 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:47:40,416 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:47:40,427 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,428 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,433 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,433 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,440 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,453 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,455 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,457 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,460 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:47:40,461 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:47:40,461 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:47:40,461 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:47:40,481 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (1/1) ... [2023-11-06 22:47:40,489 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:47:40,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:40,519 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:47:40,570 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:47:40,593 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:47:40,593 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:47:40,593 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:47:40,594 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:47:40,596 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:47:40,597 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:47:40,597 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:47:40,597 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:47:40,598 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:47:40,598 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:47:40,598 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:47:40,598 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:47:40,599 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:47:40,599 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:47:40,599 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:47:40,600 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:47:40,600 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:47:40,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:47:40,722 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:47:40,725 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:47:41,018 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:47:41,026 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:47:41,026 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:47:41,029 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:47:41 BoogieIcfgContainer [2023-11-06 22:47:41,029 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:47:41,032 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:47:41,032 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:47:41,035 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:47:41,035 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:47:39" (1/3) ... [2023-11-06 22:47:41,036 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20bdc9ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:47:41, skipping insertion in model container [2023-11-06 22:47:41,036 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:47:40" (2/3) ... [2023-11-06 22:47:41,037 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20bdc9ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:47:41, skipping insertion in model container [2023-11-06 22:47:41,037 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:47:41" (3/3) ... [2023-11-06 22:47:41,038 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product51.cil.c [2023-11-06 22:47:41,058 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:47:41,059 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:47:41,114 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:47:41,121 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1512811f, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:47:41,122 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:47:41,126 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:47:41,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:47:41,134 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:41,135 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:41,135 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:41,141 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:41,141 INFO L85 PathProgramCache]: Analyzing trace with hash -883530062, now seen corresponding path program 1 times [2023-11-06 22:47:41,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:41,152 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [119174778] [2023-11-06 22:47:41,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:41,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:41,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:41,398 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:41,399 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:41,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [119174778] [2023-11-06 22:47:41,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [119174778] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:41,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:41,400 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:47:41,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964333051] [2023-11-06 22:47:41,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:41,411 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:47:41,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:41,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:47:41,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:47:41,464 INFO L87 Difference]: Start difference. First operand has 89 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:41,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:41,518 INFO L93 Difference]: Finished difference Result 170 states and 233 transitions. [2023-11-06 22:47:41,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:47:41,521 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:47:41,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:41,531 INFO L225 Difference]: With dead ends: 170 [2023-11-06 22:47:41,532 INFO L226 Difference]: Without dead ends: 80 [2023-11-06 22:47:41,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:47:41,541 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:41,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:41,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-06 22:47:41,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2023-11-06 22:47:41,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:47:41,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 104 transitions. [2023-11-06 22:47:41,601 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 104 transitions. Word has length 19 [2023-11-06 22:47:41,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:41,602 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 104 transitions. [2023-11-06 22:47:41,602 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:41,603 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 104 transitions. [2023-11-06 22:47:41,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:47:41,605 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:41,606 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:41,606 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:47:41,606 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:41,607 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:41,607 INFO L85 PathProgramCache]: Analyzing trace with hash -1969487031, now seen corresponding path program 1 times [2023-11-06 22:47:41,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:41,608 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728850088] [2023-11-06 22:47:41,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:41,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:41,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:41,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:41,728 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:41,729 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728850088] [2023-11-06 22:47:41,729 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728850088] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:41,729 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:41,730 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:47:41,730 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [630763109] [2023-11-06 22:47:41,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:41,732 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:47:41,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:41,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:47:41,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:47:41,734 INFO L87 Difference]: Start difference. First operand 80 states and 104 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:41,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:41,756 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2023-11-06 22:47:41,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:47:41,757 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:47:41,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:41,759 INFO L225 Difference]: With dead ends: 122 [2023-11-06 22:47:41,759 INFO L226 Difference]: Without dead ends: 71 [2023-11-06 22:47:41,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:47:41,763 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 16 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:41,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:41,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2023-11-06 22:47:41,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2023-11-06 22:47:41,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:47:41,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 92 transitions. [2023-11-06 22:47:41,780 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 92 transitions. Word has length 20 [2023-11-06 22:47:41,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:41,780 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 92 transitions. [2023-11-06 22:47:41,781 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:41,781 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 92 transitions. [2023-11-06 22:47:41,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:47:41,783 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:41,783 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:41,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:47:41,783 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:41,784 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:41,784 INFO L85 PathProgramCache]: Analyzing trace with hash 389175485, now seen corresponding path program 1 times [2023-11-06 22:47:41,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:41,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [163344137] [2023-11-06 22:47:41,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:41,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:41,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:41,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:41,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:41,999 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [163344137] [2023-11-06 22:47:42,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [163344137] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:42,000 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:42,000 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:47:42,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140541398] [2023-11-06 22:47:42,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:42,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:47:42,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:42,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:47:42,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:47:42,004 INFO L87 Difference]: Start difference. First operand 71 states and 92 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:42,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:42,264 INFO L93 Difference]: Finished difference Result 236 states and 313 transitions. [2023-11-06 22:47:42,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:47:42,265 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-06 22:47:42,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:42,268 INFO L225 Difference]: With dead ends: 236 [2023-11-06 22:47:42,268 INFO L226 Difference]: Without dead ends: 172 [2023-11-06 22:47:42,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:47:42,271 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 245 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:42,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [245 Valid, 397 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:47:42,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2023-11-06 22:47:42,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 166. [2023-11-06 22:47:42,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2023-11-06 22:47:42,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 220 transitions. [2023-11-06 22:47:42,312 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 220 transitions. Word has length 24 [2023-11-06 22:47:42,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:42,312 INFO L495 AbstractCegarLoop]: Abstraction has 166 states and 220 transitions. [2023-11-06 22:47:42,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:42,313 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 220 transitions. [2023-11-06 22:47:42,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 22:47:42,315 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:42,315 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:42,315 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:47:42,316 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:42,316 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:42,316 INFO L85 PathProgramCache]: Analyzing trace with hash 1254129459, now seen corresponding path program 1 times [2023-11-06 22:47:42,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:42,317 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [530716245] [2023-11-06 22:47:42,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:42,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:42,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:42,601 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:42,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:42,601 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [530716245] [2023-11-06 22:47:42,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [530716245] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:42,602 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:42,602 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:47:42,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58997137] [2023-11-06 22:47:42,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:42,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:47:42,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:42,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:47:42,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:47:42,605 INFO L87 Difference]: Start difference. First operand 166 states and 220 transitions. Second operand has 8 states, 8 states have (on average 3.375) internal successors, (27), 7 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:42,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:42,893 INFO L93 Difference]: Finished difference Result 621 states and 878 transitions. [2023-11-06 22:47:42,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:47:42,894 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.375) internal successors, (27), 7 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-11-06 22:47:42,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:42,902 INFO L225 Difference]: With dead ends: 621 [2023-11-06 22:47:42,902 INFO L226 Difference]: Without dead ends: 462 [2023-11-06 22:47:42,906 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=131, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:47:42,907 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 182 mSDsluCounter, 476 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 558 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:42,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 558 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:47:42,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 462 states. [2023-11-06 22:47:42,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 462 to 453. [2023-11-06 22:47:42,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 453 states, 344 states have (on average 1.3517441860465116) internal successors, (465), 393 states have internal predecessors, (465), 63 states have call successors, (63), 45 states have call predecessors, (63), 45 states have return successors, (87), 39 states have call predecessors, (87), 63 states have call successors, (87) [2023-11-06 22:47:42,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 453 states to 453 states and 615 transitions. [2023-11-06 22:47:42,994 INFO L78 Accepts]: Start accepts. Automaton has 453 states and 615 transitions. Word has length 28 [2023-11-06 22:47:42,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:42,995 INFO L495 AbstractCegarLoop]: Abstraction has 453 states and 615 transitions. [2023-11-06 22:47:42,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.375) internal successors, (27), 7 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:42,995 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 615 transitions. [2023-11-06 22:47:42,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:47:42,999 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:42,999 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:43,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:47:43,000 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:43,001 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:43,001 INFO L85 PathProgramCache]: Analyzing trace with hash 183678264, now seen corresponding path program 1 times [2023-11-06 22:47:43,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:43,002 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346384907] [2023-11-06 22:47:43,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:43,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:43,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,094 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:43,095 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:43,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346384907] [2023-11-06 22:47:43,096 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [346384907] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:43,096 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:43,096 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:47:43,097 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462440281] [2023-11-06 22:47:43,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:43,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:47:43,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:43,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:47:43,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:47:43,101 INFO L87 Difference]: Start difference. First operand 453 states and 615 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:43,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:43,211 INFO L93 Difference]: Finished difference Result 1062 states and 1501 transitions. [2023-11-06 22:47:43,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:47:43,212 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-06 22:47:43,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:43,221 INFO L225 Difference]: With dead ends: 1062 [2023-11-06 22:47:43,221 INFO L226 Difference]: Without dead ends: 616 [2023-11-06 22:47:43,225 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:47:43,230 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 51 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:43,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 148 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:43,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2023-11-06 22:47:43,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 603. [2023-11-06 22:47:43,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 466 states have (on average 1.3004291845493563) internal successors, (606), 505 states have internal predecessors, (606), 69 states have call successors, (69), 65 states have call predecessors, (69), 67 states have return successors, (132), 65 states have call predecessors, (132), 69 states have call successors, (132) [2023-11-06 22:47:43,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 807 transitions. [2023-11-06 22:47:43,333 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 807 transitions. Word has length 30 [2023-11-06 22:47:43,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:43,334 INFO L495 AbstractCegarLoop]: Abstraction has 603 states and 807 transitions. [2023-11-06 22:47:43,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:43,334 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 807 transitions. [2023-11-06 22:47:43,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-06 22:47:43,347 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:43,347 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:43,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:47:43,348 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:43,350 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:43,350 INFO L85 PathProgramCache]: Analyzing trace with hash -1087568588, now seen corresponding path program 1 times [2023-11-06 22:47:43,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:43,351 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087529975] [2023-11-06 22:47:43,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:43,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:43,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:47:43,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:47:43,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-06 22:47:43,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,609 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-06 22:47:43,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:43,611 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087529975] [2023-11-06 22:47:43,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087529975] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:43,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [641116955] [2023-11-06 22:47:43,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:43,620 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:43,620 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:43,628 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:43,660 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:47:43,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:43,751 INFO L262 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:47:43,764 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:43,947 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:47:43,947 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:47:44,256 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:44,257 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [641116955] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:47:44,257 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:47:44,257 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 15 [2023-11-06 22:47:44,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181535744] [2023-11-06 22:47:44,258 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:47:44,259 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-06 22:47:44,259 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:44,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-06 22:47:44,260 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2023-11-06 22:47:44,261 INFO L87 Difference]: Start difference. First operand 603 states and 807 transitions. Second operand has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:47:46,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:46,520 INFO L93 Difference]: Finished difference Result 1664 states and 2299 transitions. [2023-11-06 22:47:46,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2023-11-06 22:47:46,521 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 53 [2023-11-06 22:47:46,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:46,531 INFO L225 Difference]: With dead ends: 1664 [2023-11-06 22:47:46,532 INFO L226 Difference]: Without dead ends: 1236 [2023-11-06 22:47:46,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 101 SyntacticMatches, 4 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 998 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=713, Invalid=2947, Unknown=0, NotChecked=0, Total=3660 [2023-11-06 22:47:46,542 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 567 mSDsluCounter, 1058 mSDsCounter, 0 mSdLazyCounter, 1263 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 576 SdHoareTripleChecker+Valid, 1223 SdHoareTripleChecker+Invalid, 1409 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 1263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:46,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [576 Valid, 1223 Invalid, 1409 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 1263 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-11-06 22:47:46,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1236 states. [2023-11-06 22:47:46,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1236 to 1099. [2023-11-06 22:47:46,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1099 states, 850 states have (on average 1.275294117647059) internal successors, (1084), 919 states have internal predecessors, (1084), 115 states have call successors, (115), 107 states have call predecessors, (115), 133 states have return successors, (257), 114 states have call predecessors, (257), 115 states have call successors, (257) [2023-11-06 22:47:46,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1099 states to 1099 states and 1456 transitions. [2023-11-06 22:47:46,716 INFO L78 Accepts]: Start accepts. Automaton has 1099 states and 1456 transitions. Word has length 53 [2023-11-06 22:47:46,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:46,718 INFO L495 AbstractCegarLoop]: Abstraction has 1099 states and 1456 transitions. [2023-11-06 22:47:46,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:47:46,719 INFO L276 IsEmpty]: Start isEmpty. Operand 1099 states and 1456 transitions. [2023-11-06 22:47:46,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2023-11-06 22:47:46,722 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:46,723 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:46,733 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:46,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2023-11-06 22:47:46,931 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:46,931 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:46,931 INFO L85 PathProgramCache]: Analyzing trace with hash -1883090513, now seen corresponding path program 1 times [2023-11-06 22:47:46,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:46,932 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105234098] [2023-11-06 22:47:46,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:46,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:46,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:47,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:47:47,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:47,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:47,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:47,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:47:47,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:47,188 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:47:47,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:47,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105234098] [2023-11-06 22:47:47,189 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [105234098] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:47,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1654656176] [2023-11-06 22:47:47,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:47,192 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:47,192 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:47,193 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:47,208 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:47:47,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:47,314 INFO L262 TraceCheckSpWp]: Trace formula consists of 269 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-06 22:47:47,318 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:47,354 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-06 22:47:47,354 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:47:47,354 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1654656176] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:47,354 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:47:47,354 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2023-11-06 22:47:47,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568117127] [2023-11-06 22:47:47,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:47,355 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:47:47,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:47,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:47:47,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:47:47,356 INFO L87 Difference]: Start difference. First operand 1099 states and 1456 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:47:47,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:47,553 INFO L93 Difference]: Finished difference Result 2125 states and 2843 transitions. [2023-11-06 22:47:47,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:47:47,554 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 71 [2023-11-06 22:47:47,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:47,563 INFO L225 Difference]: With dead ends: 2125 [2023-11-06 22:47:47,563 INFO L226 Difference]: Without dead ends: 1033 [2023-11-06 22:47:47,568 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:47:47,570 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 58 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:47,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 187 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:47,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1033 states. [2023-11-06 22:47:47,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1033 to 1029. [2023-11-06 22:47:47,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1029 states, 800 states have (on average 1.25375) internal successors, (1003), 861 states have internal predecessors, (1003), 105 states have call successors, (105), 101 states have call predecessors, (105), 123 states have return successors, (171), 108 states have call predecessors, (171), 105 states have call successors, (171) [2023-11-06 22:47:47,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1029 states to 1029 states and 1279 transitions. [2023-11-06 22:47:47,694 INFO L78 Accepts]: Start accepts. Automaton has 1029 states and 1279 transitions. Word has length 71 [2023-11-06 22:47:47,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:47,694 INFO L495 AbstractCegarLoop]: Abstraction has 1029 states and 1279 transitions. [2023-11-06 22:47:47,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:47:47,695 INFO L276 IsEmpty]: Start isEmpty. Operand 1029 states and 1279 transitions. [2023-11-06 22:47:47,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-06 22:47:47,699 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:47,699 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:47,711 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:47,911 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:47,911 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:47,912 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:47,912 INFO L85 PathProgramCache]: Analyzing trace with hash 1355372799, now seen corresponding path program 1 times [2023-11-06 22:47:47,912 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:47,912 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168966276] [2023-11-06 22:47:47,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:47,912 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:47,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:47:48,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:48,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-06 22:47:48,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:48,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,108 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-06 22:47:48,108 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:48,108 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168966276] [2023-11-06 22:47:48,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168966276] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:48,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [62999895] [2023-11-06 22:47:48,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:48,111 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:48,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:48,112 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:48,132 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:47:48,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,223 INFO L262 TraceCheckSpWp]: Trace formula consists of 268 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-06 22:47:48,228 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:48,244 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-06 22:47:48,244 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:47:48,244 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [62999895] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:48,245 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:47:48,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 8 [2023-11-06 22:47:48,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1363459856] [2023-11-06 22:47:48,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:48,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:47:48,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:48,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:47:48,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:47:48,248 INFO L87 Difference]: Start difference. First operand 1029 states and 1279 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:47:48,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:48,380 INFO L93 Difference]: Finished difference Result 2051 states and 2581 transitions. [2023-11-06 22:47:48,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 22:47:48,381 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 72 [2023-11-06 22:47:48,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:48,388 INFO L225 Difference]: With dead ends: 2051 [2023-11-06 22:47:48,389 INFO L226 Difference]: Without dead ends: 1029 [2023-11-06 22:47:48,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:47:48,393 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 10 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:48,393 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 265 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:48,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1029 states. [2023-11-06 22:47:48,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1029 to 1029. [2023-11-06 22:47:48,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1029 states, 800 states have (on average 1.24625) internal successors, (997), 861 states have internal predecessors, (997), 105 states have call successors, (105), 101 states have call predecessors, (105), 123 states have return successors, (171), 108 states have call predecessors, (171), 105 states have call successors, (171) [2023-11-06 22:47:48,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1029 states to 1029 states and 1273 transitions. [2023-11-06 22:47:48,495 INFO L78 Accepts]: Start accepts. Automaton has 1029 states and 1273 transitions. Word has length 72 [2023-11-06 22:47:48,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:48,496 INFO L495 AbstractCegarLoop]: Abstraction has 1029 states and 1273 transitions. [2023-11-06 22:47:48,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:47:48,496 INFO L276 IsEmpty]: Start isEmpty. Operand 1029 states and 1273 transitions. [2023-11-06 22:47:48,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-06 22:47:48,498 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:48,499 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:48,510 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:48,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:48,705 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:48,706 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:48,706 INFO L85 PathProgramCache]: Analyzing trace with hash -583789247, now seen corresponding path program 1 times [2023-11-06 22:47:48,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:48,706 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [568929706] [2023-11-06 22:47:48,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:48,706 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:48,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:47:48,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:48,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-06 22:47:48,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:48,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,857 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-06 22:47:48,857 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:48,857 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [568929706] [2023-11-06 22:47:48,857 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [568929706] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:48,858 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1037745701] [2023-11-06 22:47:48,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:48,858 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:48,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:48,859 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:48,880 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-06 22:47:48,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:48,972 INFO L262 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:47:48,983 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:49,000 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-06 22:47:49,001 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:47:49,001 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1037745701] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:49,002 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:47:49,002 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 7 [2023-11-06 22:47:49,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428815270] [2023-11-06 22:47:49,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:49,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:47:49,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:49,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:47:49,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:47:49,005 INFO L87 Difference]: Start difference. First operand 1029 states and 1273 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:47:49,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:49,139 INFO L93 Difference]: Finished difference Result 1914 states and 2412 transitions. [2023-11-06 22:47:49,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:47:49,140 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 72 [2023-11-06 22:47:49,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:49,146 INFO L225 Difference]: With dead ends: 1914 [2023-11-06 22:47:49,146 INFO L226 Difference]: Without dead ends: 934 [2023-11-06 22:47:49,150 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:47:49,153 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 7 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:49,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 351 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:47:49,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 934 states. [2023-11-06 22:47:49,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 934 to 928. [2023-11-06 22:47:49,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 928 states, 721 states have (on average 1.2399445214979194) internal successors, (894), 773 states have internal predecessors, (894), 100 states have call successors, (100), 96 states have call predecessors, (100), 106 states have return successors, (151), 97 states have call predecessors, (151), 100 states have call successors, (151) [2023-11-06 22:47:49,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 928 states to 928 states and 1145 transitions. [2023-11-06 22:47:49,256 INFO L78 Accepts]: Start accepts. Automaton has 928 states and 1145 transitions. Word has length 72 [2023-11-06 22:47:49,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:49,256 INFO L495 AbstractCegarLoop]: Abstraction has 928 states and 1145 transitions. [2023-11-06 22:47:49,256 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:47:49,256 INFO L276 IsEmpty]: Start isEmpty. Operand 928 states and 1145 transitions. [2023-11-06 22:47:49,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2023-11-06 22:47:49,258 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:49,259 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:49,265 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:49,465 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:49,465 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:49,465 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:49,466 INFO L85 PathProgramCache]: Analyzing trace with hash -547601245, now seen corresponding path program 1 times [2023-11-06 22:47:49,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:49,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1075231138] [2023-11-06 22:47:49,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:49,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:49,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:47:49,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:47:49,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:49,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-06 22:47:49,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:49,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,696 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 11 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-06 22:47:49,696 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:49,696 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1075231138] [2023-11-06 22:47:49,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1075231138] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:49,697 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1245917849] [2023-11-06 22:47:49,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:49,697 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:49,697 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:49,698 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:49,726 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-06 22:47:49,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:49,816 INFO L262 TraceCheckSpWp]: Trace formula consists of 277 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:47:49,822 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:49,905 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:47:49,906 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:47:50,027 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-06 22:47:50,028 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1245917849] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:47:50,028 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:47:50,028 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2023-11-06 22:47:50,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1817151869] [2023-11-06 22:47:50,029 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:47:50,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:47:50,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:50,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:47:50,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:47:50,031 INFO L87 Difference]: Start difference. First operand 928 states and 1145 transitions. Second operand has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:47:50,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:50,774 INFO L93 Difference]: Finished difference Result 1722 states and 2145 transitions. [2023-11-06 22:47:50,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-06 22:47:50,775 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 76 [2023-11-06 22:47:50,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:50,782 INFO L225 Difference]: With dead ends: 1722 [2023-11-06 22:47:50,782 INFO L226 Difference]: Without dead ends: 914 [2023-11-06 22:47:50,785 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 159 SyntacticMatches, 7 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 137 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=176, Invalid=424, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:47:50,786 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 246 mSDsluCounter, 453 mSDsCounter, 0 mSdLazyCounter, 394 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 252 SdHoareTripleChecker+Valid, 545 SdHoareTripleChecker+Invalid, 444 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 394 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:50,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [252 Valid, 545 Invalid, 444 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 394 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:47:50,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 914 states. [2023-11-06 22:47:50,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 914 to 846. [2023-11-06 22:47:50,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 846 states, 653 states have (on average 1.215926493108729) internal successors, (794), 703 states have internal predecessors, (794), 93 states have call successors, (93), 89 states have call predecessors, (93), 99 states have return successors, (142), 85 states have call predecessors, (142), 93 states have call successors, (142) [2023-11-06 22:47:50,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 846 states to 846 states and 1029 transitions. [2023-11-06 22:47:50,881 INFO L78 Accepts]: Start accepts. Automaton has 846 states and 1029 transitions. Word has length 76 [2023-11-06 22:47:50,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:50,881 INFO L495 AbstractCegarLoop]: Abstraction has 846 states and 1029 transitions. [2023-11-06 22:47:50,881 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:47:50,882 INFO L276 IsEmpty]: Start isEmpty. Operand 846 states and 1029 transitions. [2023-11-06 22:47:50,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-06 22:47:50,885 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:50,885 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:50,898 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:51,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:47:51,092 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:51,092 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:51,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1199368341, now seen corresponding path program 2 times [2023-11-06 22:47:51,092 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:51,093 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [888648248] [2023-11-06 22:47:51,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:51,093 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:51,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:47:51,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:47:51,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:51,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:47:51,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:47:51,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:51,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-06 22:47:51,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:51,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:51,431 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:47:51,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:51,432 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [888648248] [2023-11-06 22:47:51,432 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [888648248] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:47:51,432 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [960063487] [2023-11-06 22:47:51,432 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2023-11-06 22:47:51,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:47:51,432 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:47:51,433 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:47:51,442 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-11-06 22:47:51,567 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2023-11-06 22:47:51,567 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-06 22:47:51,569 INFO L262 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 10 conjunts are in the unsatisfiable core [2023-11-06 22:47:51,572 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:47:51,712 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:47:51,712 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:47:51,712 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [960063487] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:51,712 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:47:51,713 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-06 22:47:51,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889982657] [2023-11-06 22:47:51,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:51,714 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:47:51,714 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:51,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:47:51,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:47:51,715 INFO L87 Difference]: Start difference. First operand 846 states and 1029 transitions. Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:47:52,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:52,109 INFO L93 Difference]: Finished difference Result 2235 states and 2810 transitions. [2023-11-06 22:47:52,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:47:52,110 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 110 [2023-11-06 22:47:52,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:52,121 INFO L225 Difference]: With dead ends: 2235 [2023-11-06 22:47:52,121 INFO L226 Difference]: Without dead ends: 1503 [2023-11-06 22:47:52,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 122 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:47:52,126 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 205 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:52,126 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 503 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:47:52,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1503 states. [2023-11-06 22:47:52,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1503 to 1377. [2023-11-06 22:47:52,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1377 states, 1064 states have (on average 1.2067669172932332) internal successors, (1284), 1137 states have internal predecessors, (1284), 156 states have call successors, (156), 148 states have call predecessors, (156), 156 states have return successors, (231), 137 states have call predecessors, (231), 156 states have call successors, (231) [2023-11-06 22:47:52,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1377 states to 1377 states and 1671 transitions. [2023-11-06 22:47:52,308 INFO L78 Accepts]: Start accepts. Automaton has 1377 states and 1671 transitions. Word has length 110 [2023-11-06 22:47:52,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:52,308 INFO L495 AbstractCegarLoop]: Abstraction has 1377 states and 1671 transitions. [2023-11-06 22:47:52,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:47:52,309 INFO L276 IsEmpty]: Start isEmpty. Operand 1377 states and 1671 transitions. [2023-11-06 22:47:52,312 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-06 22:47:52,312 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:47:52,313 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:52,324 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2023-11-06 22:47:52,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:47:52,519 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:47:52,519 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:47:52,520 INFO L85 PathProgramCache]: Analyzing trace with hash -755467667, now seen corresponding path program 1 times [2023-11-06 22:47:52,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:47:52,520 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [113833008] [2023-11-06 22:47:52,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:47:52,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:47:52,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:47:52,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:47:52,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:47:52,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:47:52,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:47:52,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:52,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-06 22:47:52,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:47:52,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:47:52,712 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-06 22:47:52,712 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:47:52,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [113833008] [2023-11-06 22:47:52,712 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [113833008] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:47:52,712 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:47:52,713 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:47:52,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458666398] [2023-11-06 22:47:52,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:47:52,714 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:47:52,714 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:47:52,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:47:52,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:47:52,715 INFO L87 Difference]: Start difference. First operand 1377 states and 1671 transitions. Second operand has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:47:53,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:47:53,019 INFO L93 Difference]: Finished difference Result 1915 states and 2312 transitions. [2023-11-06 22:47:53,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:47:53,020 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 110 [2023-11-06 22:47:53,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:47:53,022 INFO L225 Difference]: With dead ends: 1915 [2023-11-06 22:47:53,022 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:47:53,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:47:53,028 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 97 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 222 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 222 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:47:53,028 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 303 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 222 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:47:53,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:47:53,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:47:53,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:47:53,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:47:53,030 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2023-11-06 22:47:53,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:47:53,030 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:47:53,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:47:53,031 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:47:53,031 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:47:53,034 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:47:53,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-06 22:47:53,036 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:47:56,243 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 423 430) no Hoare annotation was computed. [2023-11-06 22:47:56,244 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 423 430) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~waterLevel~0 1) (= |old(~pumpRunning~0)| 0) (= 0 ~systemActive~0)) [2023-11-06 22:47:56,244 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 423 430) no Hoare annotation was computed. [2023-11-06 22:47:56,244 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2023-11-06 22:47:56,244 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2023-11-06 22:47:56,244 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 214 225) the Hoare annotation is: true [2023-11-06 22:47:56,244 INFO L899 garLoopResultBuilder]: For program point L218-1(lines 214 225) no Hoare annotation was computed. [2023-11-06 22:47:56,245 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 214 225) no Hoare annotation was computed. [2023-11-06 22:47:56,245 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 281 289) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,245 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 332 355) no Hoare annotation was computed. [2023-11-06 22:47:56,245 INFO L899 garLoopResultBuilder]: For program point L515(lines 515 519) no Hoare annotation was computed. [2023-11-06 22:47:56,245 INFO L899 garLoopResultBuilder]: For program point L515-2(lines 515 519) no Hoare annotation was computed. [2023-11-06 22:47:56,246 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 258 266) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not .cse0) (< |old(~waterLevel~0)| 1) (and .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse2 .cse3 (not .cse4)))) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) .cse2) .cse4))) [2023-11-06 22:47:56,246 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,246 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,246 INFO L899 garLoopResultBuilder]: For program point L169(lines 169 175) no Hoare annotation was computed. [2023-11-06 22:47:56,246 INFO L899 garLoopResultBuilder]: For program point L165(lines 165 178) no Hoare annotation was computed. [2023-11-06 22:47:56,247 INFO L895 garLoopResultBuilder]: At program point L165-1(lines 157 181) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|))) (and (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not .cse0) (< |old(~waterLevel~0)| 1) (and .cse1 .cse2 .cse3 .cse4) (and (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 (not .cse5)))) (or (< |old(~waterLevel~0)| 2) .cse0 .cse5 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse2 (<= 1 ~waterLevel~0) .cse3)))) [2023-11-06 22:47:56,247 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 198) no Hoare annotation was computed. [2023-11-06 22:47:56,247 INFO L895 garLoopResultBuilder]: At program point L194-2(lines 190 201) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,247 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1) (or (not .cse0) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1))))) [2023-11-06 22:47:56,247 INFO L895 garLoopResultBuilder]: At program point L409-1(lines 390 414) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse5 (not .cse2)) (.cse4 (not .cse3)) (.cse1 (< |old(~waterLevel~0)| 2))) (and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) .cse1 .cse2 .cse3) (or (and .cse0 (= ~waterLevel~0 1) .cse4) .cse5 (not (= |old(~waterLevel~0)| 1))) (or .cse5 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse1)))) [2023-11-06 22:47:56,247 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2023-11-06 22:47:56,248 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 608 615) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,248 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 332 355) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) .cse0)) (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0)))) [2023-11-06 22:47:56,248 INFO L899 garLoopResultBuilder]: For program point L612(line 612) no Hoare annotation was computed. [2023-11-06 22:47:56,248 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 506 524) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1) (or .cse1 (= 0 ~systemActive~0) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0))) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,248 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 335 354) no Hoare annotation was computed. [2023-11-06 22:47:56,248 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 332 355) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 442 450) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:47:56,249 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 612) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-11-06 22:47:56,249 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2023-11-06 22:47:56,249 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-11-06 22:47:56,250 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-11-06 22:47:56,250 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-11-06 22:47:56,250 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2023-11-06 22:47:56,250 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-11-06 22:47:56,250 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-11-06 22:47:56,250 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-11-06 22:47:56,250 INFO L895 garLoopResultBuilder]: At program point L531(line 531) the Hoare annotation is: (and (not (= ~pumpRunning~0 0)) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:47:56,250 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 117 126) the Hoare annotation is: true [2023-11-06 22:47:56,251 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 302 308) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:47:56,251 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 130 152) the Hoare annotation is: true [2023-11-06 22:47:56,251 INFO L899 garLoopResultBuilder]: For program point L552(lines 551 598) no Hoare annotation was computed. [2023-11-06 22:47:56,251 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2023-11-06 22:47:56,251 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:47:56,251 INFO L895 garLoopResultBuilder]: At program point L573(line 573) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:47:56,251 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:47:56,251 INFO L902 garLoopResultBuilder]: At program point L602(lines 541 606) the Hoare annotation is: true [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L561(lines 561 567) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L561-1(lines 561 567) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L553(lines 553 557) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:47:56,252 INFO L895 garLoopResultBuilder]: At program point L599(lines 550 600) the Hoare annotation is: false [2023-11-06 22:47:56,252 INFO L899 garLoopResultBuilder]: For program point L529(lines 529 535) no Hoare annotation was computed. [2023-11-06 22:47:56,253 INFO L899 garLoopResultBuilder]: For program point L529-1(lines 529 535) no Hoare annotation was computed. [2023-11-06 22:47:56,253 INFO L899 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2023-11-06 22:47:56,253 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:47:56,253 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 309 315) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:47:56,253 INFO L895 garLoopResultBuilder]: At program point L587-2(lines 581 594) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:47:56,253 INFO L899 garLoopResultBuilder]: For program point L571(lines 571 577) no Hoare annotation was computed. [2023-11-06 22:47:56,253 INFO L899 garLoopResultBuilder]: For program point L571-1(lines 571 577) no Hoare annotation was computed. [2023-11-06 22:47:56,254 INFO L895 garLoopResultBuilder]: At program point L596(lines 551 598) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:47:56,254 INFO L895 garLoopResultBuilder]: At program point L563(line 563) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:47:56,254 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 525 539) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0)) [2023-11-06 22:47:56,254 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 316 324) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:47:56,255 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 415 422) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~pumpRunning~0 0)) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-11-06 22:47:56,255 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (= 0 ~systemActive~0))) [2023-11-06 22:47:56,255 INFO L899 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2023-11-06 22:47:56,255 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2023-11-06 22:47:56,255 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 500) no Hoare annotation was computed. [2023-11-06 22:47:56,255 INFO L899 garLoopResultBuilder]: For program point L271(lines 271 277) no Hoare annotation was computed. [2023-11-06 22:47:56,256 INFO L899 garLoopResultBuilder]: For program point L496-2(lines 496 500) no Hoare annotation was computed. [2023-11-06 22:47:56,256 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 364 388) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-06 22:47:56,256 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 267 280) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2023-11-06 22:47:56,256 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-06 22:47:56,256 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2023-11-06 22:47:56,257 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 487 505) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2023-11-06 22:47:56,257 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2023-11-06 22:47:56,257 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 202 213) no Hoare annotation was computed. [2023-11-06 22:47:56,257 INFO L899 garLoopResultBuilder]: For program point L206-1(lines 202 213) no Hoare annotation was computed. [2023-11-06 22:47:56,257 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 202 213) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)) (or .cse1 .cse2 (= 0 ~systemActive~0)))) [2023-11-06 22:47:56,260 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:47:56,263 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:47:56,291 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:47:56 BoogieIcfgContainer [2023-11-06 22:47:56,291 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:47:56,292 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:47:56,292 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:47:56,292 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:47:56,293 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:47:41" (3/4) ... [2023-11-06 22:47:56,295 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:47:56,300 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:47:56,300 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:47:56,300 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:47:56,300 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:47:56,300 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:47:56,301 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:47:56,301 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:47:56,311 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:47:56,311 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:47:56,312 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:47:56,313 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:47:56,314 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:47:56,345 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:47:56,345 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:47:56,346 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,347 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) == 0)) || (0 == systemActive)) && (((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (\old(waterLevel) < 2))) [2023-11-06 22:47:56,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || ((((2 <= waterLevel) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result))) || (0 == systemActive))) [2023-11-06 22:47:56,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (((((2 <= waterLevel) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (0 == systemActive)) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= waterLevel)) && (1 <= \result)))) [2023-11-06 22:47:56,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) [2023-11-06 22:47:56,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0)))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (1 <= tmp)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:47:56,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((pumpRunning == 0))) || (waterLevel < 2)) || (0 == systemActive)) && ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive))) [2023-11-06 22:47:56,388 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:47:56,388 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:47:56,389 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,390 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) == 0)) || (0 == systemActive)) && (((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (\old(waterLevel) < 2))) [2023-11-06 22:47:56,390 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || ((((2 <= waterLevel) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result))) || (0 == systemActive))) [2023-11-06 22:47:56,390 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,391 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (((((2 <= waterLevel) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (0 == systemActive)) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= waterLevel)) && (1 <= \result)))) [2023-11-06 22:47:56,391 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) [2023-11-06 22:47:56,391 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,392 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0)))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,392 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (1 <= tmp)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:47:56,392 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:47:56,392 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((pumpRunning == 0))) || (waterLevel < 2)) || (0 == systemActive)) && ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive))) [2023-11-06 22:47:56,411 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:47:56,412 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:47:56,412 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:47:56,413 INFO L158 Benchmark]: Toolchain (without parser) took 16652.00ms. Allocated memory was 136.3MB in the beginning and 314.6MB in the end (delta: 178.3MB). Free memory was 89.4MB in the beginning and 176.1MB in the end (delta: -86.8MB). Peak memory consumption was 93.6MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,413 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 136.3MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:47:56,413 INFO L158 Benchmark]: CACSL2BoogieTranslator took 560.58ms. Allocated memory is still 136.3MB. Free memory was 89.2MB in the beginning and 69.6MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,414 INFO L158 Benchmark]: Boogie Procedure Inliner took 85.74ms. Allocated memory is still 136.3MB. Free memory was 69.6MB in the beginning and 67.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,414 INFO L158 Benchmark]: Boogie Preprocessor took 44.41ms. Allocated memory is still 136.3MB. Free memory was 67.5MB in the beginning and 65.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,415 INFO L158 Benchmark]: RCFGBuilder took 568.31ms. Allocated memory was 136.3MB in the beginning and 180.4MB in the end (delta: 44.0MB). Free memory was 65.9MB in the beginning and 140.3MB in the end (delta: -74.4MB). Peak memory consumption was 8.8MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,415 INFO L158 Benchmark]: TraceAbstraction took 15259.69ms. Allocated memory was 180.4MB in the beginning and 314.6MB in the end (delta: 134.2MB). Free memory was 139.3MB in the beginning and 183.5MB in the end (delta: -44.2MB). Peak memory consumption was 147.7MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,416 INFO L158 Benchmark]: Witness Printer took 120.24ms. Allocated memory is still 314.6MB. Free memory was 183.5MB in the beginning and 176.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:47:56,418 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 136.3MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 560.58ms. Allocated memory is still 136.3MB. Free memory was 89.2MB in the beginning and 69.6MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 85.74ms. Allocated memory is still 136.3MB. Free memory was 69.6MB in the beginning and 67.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.41ms. Allocated memory is still 136.3MB. Free memory was 67.5MB in the beginning and 65.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 568.31ms. Allocated memory was 136.3MB in the beginning and 180.4MB in the end (delta: 44.0MB). Free memory was 65.9MB in the beginning and 140.3MB in the end (delta: -74.4MB). Peak memory consumption was 8.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15259.69ms. Allocated memory was 180.4MB in the beginning and 314.6MB in the end (delta: 134.2MB). Free memory was 139.3MB in the beginning and 183.5MB in the end (delta: -44.2MB). Peak memory consumption was 147.7MB. Max. memory is 16.1GB. * Witness Printer took 120.24ms. Allocated memory is still 314.6MB. Free memory was 183.5MB in the beginning and 176.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 153]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [153] - GenericResultAtLocation [Line: 182]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [182] - GenericResultAtLocation [Line: 290]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [290] - GenericResultAtLocation [Line: 325]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [325] - GenericResultAtLocation [Line: 540]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [540] - GenericResultAtLocation [Line: 607]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [607] - GenericResultAtLocation [Line: 616]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [616] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 612]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1709 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1684 mSDsluCounter, 4754 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3515 mSDsCounter, 305 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2276 IncrementalHoareTripleChecker+Invalid, 2581 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 305 mSolverCounterUnsat, 1239 mSDtfsCounter, 2276 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 811 GetRequests, 648 SyntacticMatches, 13 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1220 ImplicationChecksByTransitivity, 1.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1377occurred in iteration=11, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 12 MinimizatonAttempts, 369 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 3293 PreInvPairs, 3519 NumberOfFragments, 843 HoareAnnotationTreeSize, 3293 FomulaSimplifications, 4954 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 8745 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.1s InterpolantComputationTime, 1139 NumberOfCodeBlocks, 1139 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 1248 ConstructedInterpolants, 0 QuantifiedInterpolants, 2285 SizeOfPredicates, 13 NumberOfNonLiveVariables, 1660 ConjunctsInSsa, 43 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 424/472 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 190]: Loop Invariant Derived loop invariant: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (splverifierCounter == 0)) && (1 <= waterLevel)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 608]: Loop Invariant Derived loop invariant: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 302]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 415]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((pumpRunning == 0))) || (waterLevel < 2)) || (0 == systemActive)) && ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive))) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || ((((2 <= waterLevel) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result))) || (0 == systemActive))) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) == 0)) || (0 == systemActive)) && (((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (\old(waterLevel) < 2))) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0)))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (1 <= waterLevel)) || (((2 <= waterLevel) && (splverifierCounter == 0)) && !((0 == systemActive)))) - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (1 <= tmp)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (((((2 <= waterLevel) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || (0 == systemActive)) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= waterLevel)) && (1 <= \result)))) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:47:56,458 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bfe64d2-69a0-4f30-88e9-54b508df1cdc/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE