./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 07:48:30,852 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 07:48:30,977 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-19 07:48:30,981 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 07:48:30,982 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 07:48:31,028 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 07:48:31,028 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 07:48:31,029 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 07:48:31,030 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 07:48:31,035 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 07:48:31,037 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 07:48:31,038 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 07:48:31,038 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 07:48:31,040 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 07:48:31,040 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 07:48:31,041 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 07:48:31,041 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 07:48:31,041 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 07:48:31,042 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 07:48:31,042 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 07:48:31,043 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 07:48:31,043 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 07:48:31,043 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 07:48:31,044 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 07:48:31,044 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 07:48:31,045 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 07:48:31,045 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 07:48:31,046 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 07:48:31,046 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:48:31,047 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 07:48:31,048 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 07:48:31,048 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 07:48:31,048 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 07:48:31,048 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 07:48:31,049 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-19 07:48:31,049 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 07:48:31,049 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-19 07:48:31,049 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 07:48:31,049 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-19 07:48:31,050 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 [2023-11-19 07:48:31,374 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 07:48:31,405 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 07:48:31,408 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 07:48:31,409 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 07:48:31,410 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 07:48:31,411 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2023-11-19 07:48:34,592 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 07:48:34,862 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 07:48:34,862 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2023-11-19 07:48:34,889 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/data/27c6b4db9/63ab7f9abca244fcb39b7f8cf6e9eefa/FLAG3c64fd431 [2023-11-19 07:48:34,906 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/data/27c6b4db9/63ab7f9abca244fcb39b7f8cf6e9eefa [2023-11-19 07:48:34,909 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 07:48:34,911 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 07:48:34,912 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 07:48:34,912 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 07:48:34,918 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 07:48:34,919 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:48:34" (1/1) ... [2023-11-19 07:48:34,920 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@368634e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:34, skipping insertion in model container [2023-11-19 07:48:34,920 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:48:34" (1/1) ... [2023-11-19 07:48:34,968 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 07:48:35,350 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2023-11-19 07:48:35,366 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:48:35,383 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 07:48:35,396 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-19 07:48:35,397 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [277] [2023-11-19 07:48:35,398 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] [2023-11-19 07:48:35,398 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [448] [2023-11-19 07:48:35,398 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [483] [2023-11-19 07:48:35,399 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [849] [2023-11-19 07:48:35,399 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [953] [2023-11-19 07:48:35,400 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [962] [2023-11-19 07:48:35,490 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2023-11-19 07:48:35,504 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:48:35,526 INFO L206 MainTranslator]: Completed translation [2023-11-19 07:48:35,526 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35 WrapperNode [2023-11-19 07:48:35,526 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 07:48:35,532 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 07:48:35,533 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 07:48:35,533 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 07:48:35,541 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,557 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,587 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 212 [2023-11-19 07:48:35,587 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 07:48:35,588 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 07:48:35,588 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 07:48:35,589 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 07:48:35,602 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,602 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,605 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,605 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,613 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,624 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,626 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,628 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,631 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 07:48:35,632 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 07:48:35,632 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 07:48:35,632 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 07:48:35,633 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (1/1) ... [2023-11-19 07:48:35,647 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:48:35,660 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:48:35,685 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 07:48:35,705 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 07:48:35,728 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 07:48:35,729 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 07:48:35,729 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 07:48:35,729 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 07:48:35,731 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 07:48:35,732 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 07:48:35,732 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 07:48:35,732 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:48:35,733 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:48:35,733 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 07:48:35,733 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 07:48:35,733 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-19 07:48:35,733 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-19 07:48:35,734 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 07:48:35,734 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 07:48:35,734 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 07:48:35,735 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 07:48:35,735 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 07:48:35,735 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 07:48:35,735 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 07:48:35,849 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 07:48:35,852 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 07:48:36,219 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 07:48:36,228 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 07:48:36,229 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 07:48:36,234 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:48:36 BoogieIcfgContainer [2023-11-19 07:48:36,235 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 07:48:36,237 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 07:48:36,238 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 07:48:36,241 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 07:48:36,241 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:48:34" (1/3) ... [2023-11-19 07:48:36,242 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26ac4be5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:48:36, skipping insertion in model container [2023-11-19 07:48:36,242 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:48:35" (2/3) ... [2023-11-19 07:48:36,242 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26ac4be5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:48:36, skipping insertion in model container [2023-11-19 07:48:36,243 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:48:36" (3/3) ... [2023-11-19 07:48:36,244 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.c [2023-11-19 07:48:36,258 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 07:48:36,258 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 07:48:36,309 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 07:48:36,316 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@61390cdd, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-19 07:48:36,316 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 07:48:36,321 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-19 07:48:36,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-19 07:48:36,332 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:36,332 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:36,333 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:36,338 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:36,338 INFO L85 PathProgramCache]: Analyzing trace with hash 764297473, now seen corresponding path program 1 times [2023-11-19 07:48:36,348 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:36,348 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044133766] [2023-11-19 07:48:36,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:36,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:36,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:36,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-19 07:48:36,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:36,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-19 07:48:36,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:36,586 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:36,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:36,587 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044133766] [2023-11-19 07:48:36,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044133766] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:36,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:36,589 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 07:48:36,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1950519970] [2023-11-19 07:48:36,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:36,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 07:48:36,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:36,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 07:48:36,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:48:36,627 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-19 07:48:36,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:36,664 INFO L93 Difference]: Finished difference Result 189 states and 256 transitions. [2023-11-19 07:48:36,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 07:48:36,666 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-19 07:48:36,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:36,676 INFO L225 Difference]: With dead ends: 189 [2023-11-19 07:48:36,676 INFO L226 Difference]: Without dead ends: 90 [2023-11-19 07:48:36,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:48:36,684 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:36,685 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:48:36,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2023-11-19 07:48:36,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2023-11-19 07:48:36,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-19 07:48:36,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2023-11-19 07:48:36,728 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 32 [2023-11-19 07:48:36,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:36,728 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2023-11-19 07:48:36,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-19 07:48:36,729 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2023-11-19 07:48:36,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-19 07:48:36,733 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:36,733 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:36,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 07:48:36,734 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:36,735 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:36,735 INFO L85 PathProgramCache]: Analyzing trace with hash -297054839, now seen corresponding path program 1 times [2023-11-19 07:48:36,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:36,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354657272] [2023-11-19 07:48:36,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:36,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:36,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:48:37,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-19 07:48:37,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,066 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:37,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:37,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354657272] [2023-11-19 07:48:37,067 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354657272] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:37,067 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:37,067 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:48:37,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004863599] [2023-11-19 07:48:37,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:37,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:48:37,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:37,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:48:37,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:48:37,071 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:48:37,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:37,344 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2023-11-19 07:48:37,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 07:48:37,345 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2023-11-19 07:48:37,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:37,350 INFO L225 Difference]: With dead ends: 309 [2023-11-19 07:48:37,350 INFO L226 Difference]: Without dead ends: 227 [2023-11-19 07:48:37,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:48:37,354 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 297 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 297 SdHoareTripleChecker+Valid, 500 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:37,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [297 Valid, 500 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:48:37,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2023-11-19 07:48:37,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 221. [2023-11-19 07:48:37,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 164 states have (on average 1.329268292682927) internal successors, (218), 182 states have internal predecessors, (218), 37 states have call successors, (37), 22 states have call predecessors, (37), 19 states have return successors, (37), 26 states have call predecessors, (37), 34 states have call successors, (37) [2023-11-19 07:48:37,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 292 transitions. [2023-11-19 07:48:37,405 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 292 transitions. Word has length 37 [2023-11-19 07:48:37,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:37,408 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 292 transitions. [2023-11-19 07:48:37,409 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:48:37,409 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 292 transitions. [2023-11-19 07:48:37,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-19 07:48:37,412 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:37,413 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:37,413 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 07:48:37,413 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:37,414 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:37,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1073897828, now seen corresponding path program 1 times [2023-11-19 07:48:37,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:37,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029965917] [2023-11-19 07:48:37,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:37,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:37,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:48:37,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:48:37,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:48:37,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-19 07:48:37,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:37,641 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:37,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:37,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029965917] [2023-11-19 07:48:37,642 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029965917] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:37,643 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:37,644 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:48:37,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424769417] [2023-11-19 07:48:37,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:37,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:48:37,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:37,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:48:37,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:48:37,648 INFO L87 Difference]: Start difference. First operand 221 states and 292 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 07:48:38,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:38,009 INFO L93 Difference]: Finished difference Result 658 states and 915 transitions. [2023-11-19 07:48:38,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:48:38,010 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2023-11-19 07:48:38,011 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:38,016 INFO L225 Difference]: With dead ends: 658 [2023-11-19 07:48:38,017 INFO L226 Difference]: Without dead ends: 445 [2023-11-19 07:48:38,020 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:48:38,022 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 243 mSDsluCounter, 233 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:38,023 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [248 Valid, 392 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:48:38,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2023-11-19 07:48:38,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 400. [2023-11-19 07:48:38,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 400 states, 301 states have (on average 1.2591362126245846) internal successors, (379), 313 states have internal predecessors, (379), 59 states have call successors, (59), 40 states have call predecessors, (59), 39 states have return successors, (88), 58 states have call predecessors, (88), 54 states have call successors, (88) [2023-11-19 07:48:38,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 400 states to 400 states and 526 transitions. [2023-11-19 07:48:38,105 INFO L78 Accepts]: Start accepts. Automaton has 400 states and 526 transitions. Word has length 47 [2023-11-19 07:48:38,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:38,105 INFO L495 AbstractCegarLoop]: Abstraction has 400 states and 526 transitions. [2023-11-19 07:48:38,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 07:48:38,106 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 526 transitions. [2023-11-19 07:48:38,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-19 07:48:38,114 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:38,114 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:38,115 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 07:48:38,115 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:38,115 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:38,115 INFO L85 PathProgramCache]: Analyzing trace with hash 1125311, now seen corresponding path program 1 times [2023-11-19 07:48:38,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:38,116 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037629896] [2023-11-19 07:48:38,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:38,116 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:38,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-19 07:48:38,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-19 07:48:38,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,290 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-19 07:48:38,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:38,291 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037629896] [2023-11-19 07:48:38,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037629896] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:38,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:38,292 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:48:38,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [832594411] [2023-11-19 07:48:38,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:38,292 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:48:38,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:38,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:48:38,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:48:38,294 INFO L87 Difference]: Start difference. First operand 400 states and 526 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:48:38,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:38,462 INFO L93 Difference]: Finished difference Result 796 states and 1069 transitions. [2023-11-19 07:48:38,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:48:38,463 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2023-11-19 07:48:38,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:38,471 INFO L225 Difference]: With dead ends: 796 [2023-11-19 07:48:38,471 INFO L226 Difference]: Without dead ends: 404 [2023-11-19 07:48:38,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-19 07:48:38,486 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 83 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 531 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:38,488 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 531 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:48:38,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2023-11-19 07:48:38,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 395. [2023-11-19 07:48:38,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 395 states, 296 states have (on average 1.2297297297297298) internal successors, (364), 308 states have internal predecessors, (364), 59 states have call successors, (59), 40 states have call predecessors, (59), 39 states have return successors, (88), 58 states have call predecessors, (88), 54 states have call successors, (88) [2023-11-19 07:48:38,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 395 states to 395 states and 511 transitions. [2023-11-19 07:48:38,564 INFO L78 Accepts]: Start accepts. Automaton has 395 states and 511 transitions. Word has length 41 [2023-11-19 07:48:38,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:38,565 INFO L495 AbstractCegarLoop]: Abstraction has 395 states and 511 transitions. [2023-11-19 07:48:38,565 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:48:38,565 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 511 transitions. [2023-11-19 07:48:38,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-19 07:48:38,567 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:38,568 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:38,568 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 07:48:38,568 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:38,569 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:38,569 INFO L85 PathProgramCache]: Analyzing trace with hash -132367797, now seen corresponding path program 1 times [2023-11-19 07:48:38,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:38,570 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1034841419] [2023-11-19 07:48:38,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:38,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:38,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-19 07:48:38,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-19 07:48:38,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-19 07:48:38,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:38,674 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:38,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:38,675 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1034841419] [2023-11-19 07:48:38,675 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1034841419] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:38,675 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:38,675 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 07:48:38,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [129778129] [2023-11-19 07:48:38,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:38,676 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-19 07:48:38,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:38,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 07:48:38,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:48:38,678 INFO L87 Difference]: Start difference. First operand 395 states and 511 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 07:48:38,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:38,895 INFO L93 Difference]: Finished difference Result 729 states and 935 transitions. [2023-11-19 07:48:38,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:48:38,896 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2023-11-19 07:48:38,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:38,900 INFO L225 Difference]: With dead ends: 729 [2023-11-19 07:48:38,900 INFO L226 Difference]: Without dead ends: 342 [2023-11-19 07:48:38,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2023-11-19 07:48:38,904 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 79 mSDsluCounter, 362 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:38,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 452 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:48:38,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2023-11-19 07:48:38,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 334. [2023-11-19 07:48:38,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 254 states have (on average 1.2480314960629921) internal successors, (317), 270 states have internal predecessors, (317), 40 states have call successors, (40), 33 states have call predecessors, (40), 39 states have return successors, (52), 42 states have call predecessors, (52), 40 states have call successors, (52) [2023-11-19 07:48:38,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 409 transitions. [2023-11-19 07:48:38,940 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 409 transitions. Word has length 47 [2023-11-19 07:48:38,940 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:38,941 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 409 transitions. [2023-11-19 07:48:38,941 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 07:48:38,941 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 409 transitions. [2023-11-19 07:48:38,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-19 07:48:38,943 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:38,943 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:38,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 07:48:38,943 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:38,944 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:38,944 INFO L85 PathProgramCache]: Analyzing trace with hash 95677295, now seen corresponding path program 1 times [2023-11-19 07:48:38,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:38,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945673261] [2023-11-19 07:48:38,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:38,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:38,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:48:39,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:48:39,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-19 07:48:39,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,077 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:39,077 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:39,077 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945673261] [2023-11-19 07:48:39,077 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [945673261] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:39,077 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:39,078 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 07:48:39,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1094169857] [2023-11-19 07:48:39,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:39,078 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-19 07:48:39,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:39,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 07:48:39,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:48:39,080 INFO L87 Difference]: Start difference. First operand 334 states and 409 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:48:39,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:39,296 INFO L93 Difference]: Finished difference Result 678 states and 845 transitions. [2023-11-19 07:48:39,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:48:39,297 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2023-11-19 07:48:39,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:39,300 INFO L225 Difference]: With dead ends: 678 [2023-11-19 07:48:39,300 INFO L226 Difference]: Without dead ends: 352 [2023-11-19 07:48:39,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2023-11-19 07:48:39,303 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 111 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:39,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 423 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:48:39,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2023-11-19 07:48:39,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 338. [2023-11-19 07:48:39,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 258 states have (on average 1.244186046511628) internal successors, (321), 274 states have internal predecessors, (321), 40 states have call successors, (40), 33 states have call predecessors, (40), 39 states have return successors, (52), 42 states have call predecessors, (52), 40 states have call successors, (52) [2023-11-19 07:48:39,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 413 transitions. [2023-11-19 07:48:39,336 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 413 transitions. Word has length 51 [2023-11-19 07:48:39,336 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:39,337 INFO L495 AbstractCegarLoop]: Abstraction has 338 states and 413 transitions. [2023-11-19 07:48:39,337 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:48:39,337 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 413 transitions. [2023-11-19 07:48:39,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-19 07:48:39,338 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:39,338 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:39,339 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 07:48:39,339 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:39,339 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:39,339 INFO L85 PathProgramCache]: Analyzing trace with hash 518379121, now seen corresponding path program 1 times [2023-11-19 07:48:39,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:39,340 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675605986] [2023-11-19 07:48:39,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:39,340 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:39,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:48:39,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:48:39,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-19 07:48:39,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:39,460 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:39,460 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:39,460 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675605986] [2023-11-19 07:48:39,460 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675605986] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:39,461 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:39,461 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:48:39,461 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304574503] [2023-11-19 07:48:39,461 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:39,463 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:48:39,463 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:39,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:48:39,464 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:48:39,464 INFO L87 Difference]: Start difference. First operand 338 states and 413 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:48:39,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:39,736 INFO L93 Difference]: Finished difference Result 1005 states and 1284 transitions. [2023-11-19 07:48:39,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:48:39,736 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2023-11-19 07:48:39,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:39,742 INFO L225 Difference]: With dead ends: 1005 [2023-11-19 07:48:39,743 INFO L226 Difference]: Without dead ends: 675 [2023-11-19 07:48:39,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:48:39,745 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 223 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:39,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 319 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:48:39,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 675 states. [2023-11-19 07:48:39,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 675 to 673. [2023-11-19 07:48:39,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 673 states, 510 states have (on average 1.223529411764706) internal successors, (624), 538 states have internal predecessors, (624), 87 states have call successors, (87), 74 states have call predecessors, (87), 75 states have return successors, (124), 86 states have call predecessors, (124), 87 states have call successors, (124) [2023-11-19 07:48:39,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 673 states to 673 states and 835 transitions. [2023-11-19 07:48:39,841 INFO L78 Accepts]: Start accepts. Automaton has 673 states and 835 transitions. Word has length 51 [2023-11-19 07:48:39,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:39,841 INFO L495 AbstractCegarLoop]: Abstraction has 673 states and 835 transitions. [2023-11-19 07:48:39,842 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:48:39,842 INFO L276 IsEmpty]: Start isEmpty. Operand 673 states and 835 transitions. [2023-11-19 07:48:39,843 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-19 07:48:39,843 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:39,844 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:39,844 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 07:48:39,844 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:39,844 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:39,844 INFO L85 PathProgramCache]: Analyzing trace with hash -1241994025, now seen corresponding path program 1 times [2023-11-19 07:48:39,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:39,845 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [87220550] [2023-11-19 07:48:39,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:39,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:39,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:40,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:48:40,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:40,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-19 07:48:40,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:40,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-19 07:48:40,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:40,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 07:48:40,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:40,105 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:48:40,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:40,106 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [87220550] [2023-11-19 07:48:40,106 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [87220550] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:40,106 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:40,106 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-19 07:48:40,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [810739990] [2023-11-19 07:48:40,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:40,107 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-19 07:48:40,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:40,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-19 07:48:40,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-19 07:48:40,108 INFO L87 Difference]: Start difference. First operand 673 states and 835 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:48:40,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:40,880 INFO L93 Difference]: Finished difference Result 1935 states and 2463 transitions. [2023-11-19 07:48:40,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-19 07:48:40,881 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2023-11-19 07:48:40,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:40,891 INFO L225 Difference]: With dead ends: 1935 [2023-11-19 07:48:40,891 INFO L226 Difference]: Without dead ends: 1407 [2023-11-19 07:48:40,897 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2023-11-19 07:48:40,898 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 430 mSDsluCounter, 539 mSDsCounter, 0 mSdLazyCounter, 490 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 437 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 611 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 490 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:40,899 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [437 Valid, 651 Invalid, 611 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 490 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-19 07:48:40,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1407 states. [2023-11-19 07:48:41,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1407 to 1236. [2023-11-19 07:48:41,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1236 states, 939 states have (on average 1.2161874334398297) internal successors, (1142), 995 states have internal predecessors, (1142), 155 states have call successors, (155), 129 states have call predecessors, (155), 141 states have return successors, (213), 154 states have call predecessors, (213), 155 states have call successors, (213) [2023-11-19 07:48:41,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1236 states to 1236 states and 1510 transitions. [2023-11-19 07:48:41,035 INFO L78 Accepts]: Start accepts. Automaton has 1236 states and 1510 transitions. Word has length 55 [2023-11-19 07:48:41,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:41,035 INFO L495 AbstractCegarLoop]: Abstraction has 1236 states and 1510 transitions. [2023-11-19 07:48:41,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:48:41,036 INFO L276 IsEmpty]: Start isEmpty. Operand 1236 states and 1510 transitions. [2023-11-19 07:48:41,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-11-19 07:48:41,040 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:41,040 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:41,040 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-19 07:48:41,041 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:41,041 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:41,041 INFO L85 PathProgramCache]: Analyzing trace with hash 311034572, now seen corresponding path program 1 times [2023-11-19 07:48:41,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:41,042 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [313807904] [2023-11-19 07:48:41,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:41,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:41,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:48:41,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:48:41,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:41,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-19 07:48:41,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-19 07:48:41,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-19 07:48:41,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:48:41,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-19 07:48:41,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,329 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-19 07:48:41,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:41,329 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [313807904] [2023-11-19 07:48:41,329 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [313807904] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 07:48:41,329 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [965353267] [2023-11-19 07:48:41,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:41,330 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:48:41,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:48:41,335 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 07:48:41,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 07:48:41,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:41,454 INFO L262 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-19 07:48:41,470 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 07:48:41,697 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:48:41,697 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 07:48:41,935 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-19 07:48:41,935 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [965353267] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 07:48:41,935 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 07:48:41,935 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2023-11-19 07:48:41,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871184279] [2023-11-19 07:48:41,936 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 07:48:41,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-19 07:48:41,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:41,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-19 07:48:41,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-19 07:48:41,940 INFO L87 Difference]: Start difference. First operand 1236 states and 1510 transitions. Second operand has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-19 07:48:43,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:43,435 INFO L93 Difference]: Finished difference Result 2812 states and 3565 transitions. [2023-11-19 07:48:43,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2023-11-19 07:48:43,436 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2023-11-19 07:48:43,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:43,448 INFO L225 Difference]: With dead ends: 2812 [2023-11-19 07:48:43,449 INFO L226 Difference]: Without dead ends: 1715 [2023-11-19 07:48:43,454 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 214 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 685 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2023-11-19 07:48:43,455 INFO L413 NwaCegarLoop]: 188 mSDtfsCounter, 521 mSDsluCounter, 1409 mSDsCounter, 0 mSdLazyCounter, 1196 mSolverCounterSat, 189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 522 SdHoareTripleChecker+Valid, 1597 SdHoareTripleChecker+Invalid, 1385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 189 IncrementalHoareTripleChecker+Valid, 1196 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:43,456 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [522 Valid, 1597 Invalid, 1385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [189 Valid, 1196 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-19 07:48:43,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1715 states. [2023-11-19 07:48:43,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1715 to 1424. [2023-11-19 07:48:43,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1424 states, 1068 states have (on average 1.2106741573033708) internal successors, (1293), 1146 states have internal predecessors, (1293), 186 states have call successors, (186), 160 states have call predecessors, (186), 169 states have return successors, (254), 173 states have call predecessors, (254), 186 states have call successors, (254) [2023-11-19 07:48:43,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1424 states to 1424 states and 1733 transitions. [2023-11-19 07:48:43,641 INFO L78 Accepts]: Start accepts. Automaton has 1424 states and 1733 transitions. Word has length 96 [2023-11-19 07:48:43,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:43,641 INFO L495 AbstractCegarLoop]: Abstraction has 1424 states and 1733 transitions. [2023-11-19 07:48:43,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-19 07:48:43,642 INFO L276 IsEmpty]: Start isEmpty. Operand 1424 states and 1733 transitions. [2023-11-19 07:48:43,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 172 [2023-11-19 07:48:43,648 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:43,649 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:43,670 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 07:48:43,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:48:43,870 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:43,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:43,870 INFO L85 PathProgramCache]: Analyzing trace with hash 1437579353, now seen corresponding path program 1 times [2023-11-19 07:48:43,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:43,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556893148] [2023-11-19 07:48:43,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:43,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:43,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:43,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:48:43,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:43,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:48:43,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:44,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-19 07:48:44,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-19 07:48:44,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:44,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-19 07:48:44,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:48:44,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-19 07:48:44,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:44,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-19 07:48:44,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2023-11-19 07:48:44,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2023-11-19 07:48:44,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2023-11-19 07:48:44,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:44,078 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 74 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2023-11-19 07:48:44,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:44,078 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556893148] [2023-11-19 07:48:44,078 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556893148] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:48:44,079 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:48:44,079 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-19 07:48:44,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834029416] [2023-11-19 07:48:44,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:48:44,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-19 07:48:44,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:44,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 07:48:44,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:48:44,081 INFO L87 Difference]: Start difference. First operand 1424 states and 1733 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 5 states have internal predecessors, (85), 2 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-19 07:48:44,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:44,588 INFO L93 Difference]: Finished difference Result 2799 states and 3438 transitions. [2023-11-19 07:48:44,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-19 07:48:44,589 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 5 states have internal predecessors, (85), 2 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 171 [2023-11-19 07:48:44,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:44,600 INFO L225 Difference]: With dead ends: 2799 [2023-11-19 07:48:44,600 INFO L226 Difference]: Without dead ends: 1514 [2023-11-19 07:48:44,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=91, Invalid=251, Unknown=0, NotChecked=0, Total=342 [2023-11-19 07:48:44,606 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 127 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 351 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:44,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 516 Invalid, 351 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 327 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-19 07:48:44,609 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1514 states. [2023-11-19 07:48:44,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1514 to 1442. [2023-11-19 07:48:44,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1442 states, 1086 states have (on average 1.207182320441989) internal successors, (1311), 1164 states have internal predecessors, (1311), 186 states have call successors, (186), 160 states have call predecessors, (186), 169 states have return successors, (254), 173 states have call predecessors, (254), 186 states have call successors, (254) [2023-11-19 07:48:44,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1442 states to 1442 states and 1751 transitions. [2023-11-19 07:48:44,792 INFO L78 Accepts]: Start accepts. Automaton has 1442 states and 1751 transitions. Word has length 171 [2023-11-19 07:48:44,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:44,793 INFO L495 AbstractCegarLoop]: Abstraction has 1442 states and 1751 transitions. [2023-11-19 07:48:44,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 5 states have internal predecessors, (85), 2 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-19 07:48:44,794 INFO L276 IsEmpty]: Start isEmpty. Operand 1442 states and 1751 transitions. [2023-11-19 07:48:44,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 172 [2023-11-19 07:48:44,802 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:48:44,802 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:44,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-19 07:48:44,803 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:48:44,803 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:48:44,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1871308439, now seen corresponding path program 1 times [2023-11-19 07:48:44,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:48:44,804 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169867651] [2023-11-19 07:48:44,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:44,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:48:44,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:48:45,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:48:45,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:45,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-19 07:48:45,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-19 07:48:45,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:45,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-19 07:48:45,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:48:45,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-19 07:48:45,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:48:45,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-19 07:48:45,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2023-11-19 07:48:45,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2023-11-19 07:48:45,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2023-11-19 07:48:45,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,342 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 87 proven. 30 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2023-11-19 07:48:45,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:48:45,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169867651] [2023-11-19 07:48:45,343 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169867651] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 07:48:45,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951623761] [2023-11-19 07:48:45,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:48:45,344 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:48:45,344 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:48:45,345 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 07:48:45,371 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-19 07:48:45,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:48:45,502 INFO L262 TraceCheckSpWp]: Trace formula consists of 530 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-19 07:48:45,521 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 07:48:45,778 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 136 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2023-11-19 07:48:45,778 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 07:48:46,319 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 77 proven. 41 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2023-11-19 07:48:46,319 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951623761] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 07:48:46,320 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 07:48:46,320 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 11] total 25 [2023-11-19 07:48:46,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570174040] [2023-11-19 07:48:46,320 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 07:48:46,321 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-19 07:48:46,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:48:46,323 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-19 07:48:46,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2023-11-19 07:48:46,324 INFO L87 Difference]: Start difference. First operand 1442 states and 1751 transitions. Second operand has 25 states, 25 states have (on average 8.28) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) [2023-11-19 07:48:47,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:48:47,642 INFO L93 Difference]: Finished difference Result 3083 states and 3881 transitions. [2023-11-19 07:48:47,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-11-19 07:48:47,643 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.28) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) Word has length 171 [2023-11-19 07:48:47,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:48:47,645 INFO L225 Difference]: With dead ends: 3083 [2023-11-19 07:48:47,646 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 07:48:47,654 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 415 GetRequests, 362 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 530 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=542, Invalid=2008, Unknown=0, NotChecked=0, Total=2550 [2023-11-19 07:48:47,655 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 642 mSDsluCounter, 689 mSDsCounter, 0 mSdLazyCounter, 1002 mSolverCounterSat, 203 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 648 SdHoareTripleChecker+Valid, 800 SdHoareTripleChecker+Invalid, 1205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 203 IncrementalHoareTripleChecker+Valid, 1002 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-19 07:48:47,656 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [648 Valid, 800 Invalid, 1205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [203 Valid, 1002 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-19 07:48:47,656 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 07:48:47,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 07:48:47,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:48:47,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 07:48:47,657 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 171 [2023-11-19 07:48:47,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:48:47,658 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 07:48:47,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.28) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) [2023-11-19 07:48:47,658 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 07:48:47,659 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 07:48:47,661 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 07:48:47,688 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-19 07:48:47,877 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-19 07:48:47,879 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 07:48:54,037 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 160 167) no Hoare annotation was computed. [2023-11-19 07:48:54,037 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 160 167) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse1 .cse2))) [2023-11-19 07:48:54,038 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 160 167) no Hoare annotation was computed. [2023-11-19 07:48:54,038 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2023-11-19 07:48:54,038 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2023-11-19 07:48:54,038 INFO L899 garLoopResultBuilder]: For program point L881-1(lines 877 888) no Hoare annotation was computed. [2023-11-19 07:48:54,038 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 877 888) the Hoare annotation is: true [2023-11-19 07:48:54,038 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 877 888) no Hoare annotation was computed. [2023-11-19 07:48:54,038 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 279 308) no Hoare annotation was computed. [2023-11-19 07:48:54,038 INFO L902 garLoopResultBuilder]: At program point L289-2(lines 289 303) the Hoare annotation is: true [2023-11-19 07:48:54,038 INFO L902 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: true [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L285-1(line 285) no Hoare annotation was computed. [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L304(lines 279 308) no Hoare annotation was computed. [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2023-11-19 07:48:54,039 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 279 308) the Hoare annotation is: true [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L293(lines 293 297) no Hoare annotation was computed. [2023-11-19 07:48:54,039 INFO L902 garLoopResultBuilder]: At program point L293-1(lines 293 297) the Hoare annotation is: true [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L290(line 290) no Hoare annotation was computed. [2023-11-19 07:48:54,039 INFO L899 garLoopResultBuilder]: For program point L857(lines 857 861) no Hoare annotation was computed. [2023-11-19 07:48:54,040 INFO L899 garLoopResultBuilder]: For program point L857-2(lines 853 864) no Hoare annotation was computed. [2023-11-19 07:48:54,040 INFO L895 garLoopResultBuilder]: At program point L977(line 977) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-19 07:48:54,040 INFO L899 garLoopResultBuilder]: For program point L977-1(line 977) no Hoare annotation was computed. [2023-11-19 07:48:54,040 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 944 952) no Hoare annotation was computed. [2023-11-19 07:48:54,040 INFO L899 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 66 92) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L994(lines 994 1004) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L990(lines 990 1007) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L990-1(lines 982 1010) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 921 929) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2023-11-19 07:48:54,041 INFO L899 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2023-11-19 07:48:54,042 INFO L899 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2023-11-19 07:48:54,042 INFO L899 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2023-11-19 07:48:54,042 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse1 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not .cse9))) (let ((.cse0 (and .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5 .cse6)) (.cse7 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse8 (< |old(~pumpRunning~0)| 1))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse1 .cse2 .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5 .cse6) .cse7 .cse8 .cse9) (or .cse3 (< 2 |old(~waterLevel~0)|)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 .cse8 .cse9) (or (and .cse2 .cse4 (= ~waterLevel~0 1) .cse5) (not (= |old(~waterLevel~0)| 2)) .cse8 .cse9))))) [2023-11-19 07:48:54,042 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 954 961) no Hoare annotation was computed. [2023-11-19 07:48:54,043 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 66 92) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-19 07:48:54,043 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse5 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1 (not .cse3))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse4 .cse5 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse2 .cse3)))) [2023-11-19 07:48:54,044 INFO L895 garLoopResultBuilder]: At program point L992(line 992) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~pumpRunning~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (not .cse3))) (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (and .cse13 .cse14 .cse5 .cse7 .cse8 .cse17 .cse9 .cse12 .cse15)) (.cse11 (< 2 |old(~waterLevel~0)|)) (.cse4 (and .cse5 .cse6 .cse7 .cse8 .cse17 .cse9 .cse12 .cse15)) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10) .cse11) (or (and .cse6 .cse7 .cse9 .cse10 .cse12) .cse0 (and .cse13 .cse14 .cse5 .cse7 .cse9 .cse10 .cse12 .cse15) .cse1 .cse2 .cse3 .cse11 .cse4) (let ((.cse16 (= ~waterLevel~0 1))) (or (and .cse14 .cse7 .cse9 .cse16 .cse12) (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3 (and .cse6 .cse16 .cse12 (= |timeShift_getWaterLevel_#res#1| 1) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 1)))))))) [2023-11-19 07:48:54,044 INFO L899 garLoopResultBuilder]: For program point L992-1(line 992) no Hoare annotation was computed. [2023-11-19 07:48:54,044 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 243 261) no Hoare annotation was computed. [2023-11-19 07:48:54,044 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1)) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1))) [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 972 981) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 127 151) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L895 garLoopResultBuilder]: At program point L440(lines 391 441) the Hoare annotation is: false [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 344 354) no Hoare annotation was computed. [2023-11-19 07:48:54,045 INFO L899 garLoopResultBuilder]: For program point L428(lines 428 434) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L895 garLoopResultBuilder]: At program point L428-2(lines 422 435) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4 .cse7) (and .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse4))) [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 460 466) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 358 380) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2023-11-19 07:48:54,046 INFO L899 garLoopResultBuilder]: For program point L412-1(lines 412 418) no Hoare annotation was computed. [2023-11-19 07:48:54,047 INFO L895 garLoopResultBuilder]: At program point L437(lines 392 439) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4 .cse7) (and .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse4))) [2023-11-19 07:48:54,047 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4 .cse7) (and .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse4))) [2023-11-19 07:48:54,047 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2023-11-19 07:48:54,047 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 335 341) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 964 971) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 375) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point L368-2(lines 368 375) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 467 473) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point L393(lines 392 439) no Hoare annotation was computed. [2023-11-19 07:48:54,048 INFO L899 garLoopResultBuilder]: For program point L422(lines 422 435) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L895 garLoopResultBuilder]: At program point L414(line 414) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4 .cse7) (and .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse4))) [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point L443(lines 382 447) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 262 276) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point L402-1(lines 402 408) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 474 482) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 398) no Hoare annotation was computed. [2023-11-19 07:48:54,049 INFO L899 garLoopResultBuilder]: For program point L266(lines 266 272) no Hoare annotation was computed. [2023-11-19 07:48:54,050 INFO L899 garLoopResultBuilder]: For program point L266-1(lines 266 272) no Hoare annotation was computed. [2023-11-19 07:48:54,050 INFO L899 garLoopResultBuilder]: For program point activatePump_returnLabel#1(lines 152 159) no Hoare annotation was computed. [2023-11-19 07:48:54,050 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-19 07:48:54,050 INFO L899 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2023-11-19 07:48:54,050 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 101 125) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-19 07:48:54,050 INFO L899 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 930 943) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 224 242) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (< 1 ~waterLevel~0)) (.cse0 (not .cse4)) (.cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) .cse4 (not .cse3)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse3) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse3)))) [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2023-11-19 07:48:54,051 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L899 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 865 876) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 865 876) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< 1 |old(~waterLevel~0)|)) (.cse5 (< ~pumpRunning~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4) (or .cse5 .cse1 .cse2 .cse6) (or .cse3 .cse5 (< ~switchedOnBeforeTS~0 1) .cse4 .cse6))) [2023-11-19 07:48:54,052 INFO L899 garLoopResultBuilder]: For program point L869-1(lines 865 876) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 179 187) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 179 187) no Hoare annotation was computed. [2023-11-19 07:48:54,052 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 179 187) the Hoare annotation is: true [2023-11-19 07:48:54,055 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:48:54,058 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 07:48:54,072 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:48:54 BoogieIcfgContainer [2023-11-19 07:48:54,073 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 07:48:54,073 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 07:48:54,073 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 07:48:54,074 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 07:48:54,074 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:48:36" (3/4) ... [2023-11-19 07:48:54,077 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 07:48:54,081 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 07:48:54,082 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 07:48:54,082 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 07:48:54,082 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 07:48:54,082 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 07:48:54,083 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:48:54,083 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 07:48:54,083 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-19 07:48:54,091 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2023-11-19 07:48:54,092 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-19 07:48:54,092 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 07:48:54,093 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:48:54,094 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:48:54,124 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-19 07:48:54,159 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-19 07:48:54,211 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml [2023-11-19 07:48:54,212 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/witness.yml [2023-11-19 07:48:54,212 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 07:48:54,213 INFO L158 Benchmark]: Toolchain (without parser) took 19302.09ms. Allocated memory was 159.4MB in the beginning and 287.3MB in the end (delta: 127.9MB). Free memory was 119.2MB in the beginning and 222.4MB in the end (delta: -103.3MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,213 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 107.0MB. Free memory is still 56.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 07:48:54,213 INFO L158 Benchmark]: CACSL2BoogieTranslator took 619.04ms. Allocated memory is still 159.4MB. Free memory was 118.9MB in the beginning and 99.1MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,214 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.28ms. Allocated memory is still 159.4MB. Free memory was 99.1MB in the beginning and 97.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,214 INFO L158 Benchmark]: Boogie Preprocessor took 42.91ms. Allocated memory is still 159.4MB. Free memory was 97.0MB in the beginning and 95.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,215 INFO L158 Benchmark]: RCFGBuilder took 603.43ms. Allocated memory is still 159.4MB. Free memory was 95.4MB in the beginning and 122.1MB in the end (delta: -26.7MB). Peak memory consumption was 13.9MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,215 INFO L158 Benchmark]: TraceAbstraction took 17835.35ms. Allocated memory was 159.4MB in the beginning and 287.3MB in the end (delta: 127.9MB). Free memory was 121.7MB in the beginning and 229.8MB in the end (delta: -108.0MB). Peak memory consumption was 168.2MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,216 INFO L158 Benchmark]: Witness Printer took 138.74ms. Allocated memory is still 287.3MB. Free memory was 229.8MB in the beginning and 222.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-19 07:48:54,218 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 107.0MB. Free memory is still 56.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 619.04ms. Allocated memory is still 159.4MB. Free memory was 118.9MB in the beginning and 99.1MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.28ms. Allocated memory is still 159.4MB. Free memory was 99.1MB in the beginning and 97.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.91ms. Allocated memory is still 159.4MB. Free memory was 97.0MB in the beginning and 95.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 603.43ms. Allocated memory is still 159.4MB. Free memory was 95.4MB in the beginning and 122.1MB in the end (delta: -26.7MB). Peak memory consumption was 13.9MB. Max. memory is 16.1GB. * TraceAbstraction took 17835.35ms. Allocated memory was 159.4MB in the beginning and 287.3MB in the end (delta: 127.9MB). Free memory was 121.7MB in the beginning and 229.8MB in the end (delta: -108.0MB). Peak memory consumption was 168.2MB. Max. memory is 16.1GB. * Witness Printer took 138.74ms. Allocated memory is still 287.3MB. Free memory was 229.8MB in the beginning and 222.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 277]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [277] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] - GenericResultAtLocation [Line: 448]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [448] - GenericResultAtLocation [Line: 483]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [483] - GenericResultAtLocation [Line: 849]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [849] - GenericResultAtLocation [Line: 953]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [953] - GenericResultAtLocation [Line: 962]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [962] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.8s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2801 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2756 mSDsluCounter, 6306 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4947 mSDsCounter, 768 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3771 IncrementalHoareTripleChecker+Invalid, 4539 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 768 mSolverCounterUnsat, 1359 mSDtfsCounter, 3771 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 863 GetRequests, 673 SyntacticMatches, 8 SemanticMatches, 182 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1437 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1442occurred in iteration=10, InterpolantAutomatonStates: 160, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 11 MinimizatonAttempts, 618 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 2249 PreInvPairs, 2525 NumberOfFragments, 1313 HoareAnnotationTreeSize, 2249 FomulaSimplifications, 10584 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 24 FomulaSimplificationsInter, 20670 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.5s InterpolantComputationTime, 1066 NumberOfCodeBlocks, 1066 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1318 ConstructedInterpolants, 0 QuantifiedInterpolants, 2585 SizeOfPredicates, 6 NumberOfNonLiveVariables, 859 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 766/867 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-19 07:48:54,258 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4427fb83-9b3c-4d06-aaf6-229b1b2285a2/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE