./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e3065d54459a1af9237785e443ea1bc130aed8710eaae31e283e0fdf62db72d --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 07:42:26,175 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 07:42:26,286 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-19 07:42:26,298 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 07:42:26,299 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 07:42:26,338 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 07:42:26,341 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 07:42:26,342 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 07:42:26,344 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 07:42:26,349 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 07:42:26,351 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 07:42:26,351 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 07:42:26,352 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 07:42:26,354 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 07:42:26,354 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 07:42:26,355 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 07:42:26,355 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 07:42:26,356 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 07:42:26,356 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 07:42:26,357 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 07:42:26,357 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 07:42:26,358 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 07:42:26,358 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 07:42:26,359 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 07:42:26,359 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 07:42:26,360 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 07:42:26,361 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 07:42:26,361 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 07:42:26,362 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:42:26,362 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 07:42:26,364 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 07:42:26,364 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 07:42:26,364 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 07:42:26,381 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 07:42:26,381 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-19 07:42:26,382 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 07:42:26,382 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-19 07:42:26,382 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 07:42:26,383 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-19 07:42:26,383 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e3065d54459a1af9237785e443ea1bc130aed8710eaae31e283e0fdf62db72d [2023-11-19 07:42:26,733 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 07:42:26,768 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 07:42:26,771 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 07:42:26,773 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 07:42:26,774 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 07:42:26,775 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c [2023-11-19 07:42:30,046 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 07:42:30,345 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 07:42:30,345 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c [2023-11-19 07:42:30,362 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/data/b23a17b7d/42869cf12c604e4494956ac9d804c9e6/FLAG283a2179d [2023-11-19 07:42:30,377 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/data/b23a17b7d/42869cf12c604e4494956ac9d804c9e6 [2023-11-19 07:42:30,380 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 07:42:30,381 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 07:42:30,383 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 07:42:30,383 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 07:42:30,389 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 07:42:30,390 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:30,391 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@532ed400 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30, skipping insertion in model container [2023-11-19 07:42:30,391 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:30,443 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 07:42:30,756 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c[13371,13384] [2023-11-19 07:42:30,827 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:42:30,853 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 07:42:30,864 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49] [2023-11-19 07:42:30,866 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [91] [2023-11-19 07:42:30,867 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [196] [2023-11-19 07:42:30,867 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [562] [2023-11-19 07:42:30,867 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [571] [2023-11-19 07:42:30,868 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [606] [2023-11-19 07:42:30,868 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [671] [2023-11-19 07:42:30,869 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [779] [2023-11-19 07:42:30,937 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c[13371,13384] [2023-11-19 07:42:30,952 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:42:30,974 INFO L206 MainTranslator]: Completed translation [2023-11-19 07:42:30,975 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30 WrapperNode [2023-11-19 07:42:30,975 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 07:42:30,977 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 07:42:30,977 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 07:42:30,977 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 07:42:30,986 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,015 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,045 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 223 [2023-11-19 07:42:31,045 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 07:42:31,046 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 07:42:31,046 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 07:42:31,046 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 07:42:31,057 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,058 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,061 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,061 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,068 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,073 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,075 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,077 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,080 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 07:42:31,081 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 07:42:31,082 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 07:42:31,082 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 07:42:31,083 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (1/1) ... [2023-11-19 07:42:31,089 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:42:31,106 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:42:31,129 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 07:42:31,151 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 07:42:31,180 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 07:42:31,181 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 07:42:31,181 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 07:42:31,182 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 07:42:31,184 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 07:42:31,184 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 07:42:31,185 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 07:42:31,185 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-19 07:42:31,185 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-19 07:42:31,186 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:42:31,186 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:42:31,186 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 07:42:31,186 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 07:42:31,186 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:42:31,186 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:42:31,187 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-19 07:42:31,187 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-19 07:42:31,188 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 07:42:31,188 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 07:42:31,188 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 07:42:31,188 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 07:42:31,188 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 07:42:31,190 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 07:42:31,191 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 07:42:31,286 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 07:42:31,289 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 07:42:31,692 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 07:42:31,703 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 07:42:31,704 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 07:42:31,709 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:42:31 BoogieIcfgContainer [2023-11-19 07:42:31,709 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 07:42:31,712 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 07:42:31,712 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 07:42:31,716 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 07:42:31,716 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:42:30" (1/3) ... [2023-11-19 07:42:31,717 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18918c5a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:42:31, skipping insertion in model container [2023-11-19 07:42:31,717 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:42:30" (2/3) ... [2023-11-19 07:42:31,718 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18918c5a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:42:31, skipping insertion in model container [2023-11-19 07:42:31,718 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:42:31" (3/3) ... [2023-11-19 07:42:31,719 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product61.cil.c [2023-11-19 07:42:31,740 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 07:42:31,740 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 07:42:31,797 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 07:42:31,805 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@69a1c4b9, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-19 07:42:31,805 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 07:42:31,810 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-19 07:42:31,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-19 07:42:31,822 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:31,823 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:31,824 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:31,829 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:31,830 INFO L85 PathProgramCache]: Analyzing trace with hash 614135748, now seen corresponding path program 1 times [2023-11-19 07:42:31,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:31,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659160540] [2023-11-19 07:42:31,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:31,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:31,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-19 07:42:32,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:42:32,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:32,062 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659160540] [2023-11-19 07:42:32,063 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659160540] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:32,063 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:32,063 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 07:42:32,065 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747016149] [2023-11-19 07:42:32,066 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:32,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 07:42:32,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:32,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 07:42:32,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:42:32,112 INFO L87 Difference]: Start difference. First operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:32,154 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2023-11-19 07:42:32,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 07:42:32,156 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-19 07:42:32,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:32,172 INFO L225 Difference]: With dead ends: 211 [2023-11-19 07:42:32,172 INFO L226 Difference]: Without dead ends: 101 [2023-11-19 07:42:32,179 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:42:32,184 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:32,186 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:42:32,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2023-11-19 07:42:32,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2023-11-19 07:42:32,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 82 states have internal predecessors, (96), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-19 07:42:32,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2023-11-19 07:42:32,252 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 25 [2023-11-19 07:42:32,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:32,252 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2023-11-19 07:42:32,253 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,253 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2023-11-19 07:42:32,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-19 07:42:32,256 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:32,256 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:32,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 07:42:32,257 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:32,258 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:32,258 INFO L85 PathProgramCache]: Analyzing trace with hash 1570881816, now seen corresponding path program 1 times [2023-11-19 07:42:32,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:32,259 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1752732660] [2023-11-19 07:42:32,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:32,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:32,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-19 07:42:32,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:42:32,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:32,485 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1752732660] [2023-11-19 07:42:32,485 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1752732660] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:32,485 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:32,485 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 07:42:32,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182246679] [2023-11-19 07:42:32,486 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:32,487 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 07:42:32,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:32,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 07:42:32,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:42:32,489 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:32,513 INFO L93 Difference]: Finished difference Result 167 states and 217 transitions. [2023-11-19 07:42:32,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 07:42:32,514 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-19 07:42:32,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:32,516 INFO L225 Difference]: With dead ends: 167 [2023-11-19 07:42:32,517 INFO L226 Difference]: Without dead ends: 92 [2023-11-19 07:42:32,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:42:32,520 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 12 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:32,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 220 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:42:32,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-19 07:42:32,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-19 07:42:32,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.328358208955224) internal successors, (89), 76 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-19 07:42:32,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2023-11-19 07:42:32,536 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 26 [2023-11-19 07:42:32,536 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:32,536 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2023-11-19 07:42:32,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,537 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2023-11-19 07:42:32,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-19 07:42:32,539 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:32,539 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:32,539 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 07:42:32,540 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:32,540 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:32,540 INFO L85 PathProgramCache]: Analyzing trace with hash 2142316214, now seen corresponding path program 1 times [2023-11-19 07:42:32,541 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:32,541 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629217252] [2023-11-19 07:42:32,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:32,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:32,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:32,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:42:32,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:32,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629217252] [2023-11-19 07:42:32,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629217252] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:32,658 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:32,658 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 07:42:32,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209063385] [2023-11-19 07:42:32,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:32,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 07:42:32,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:32,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 07:42:32,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:42:32,661 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:32,684 INFO L93 Difference]: Finished difference Result 176 states and 231 transitions. [2023-11-19 07:42:32,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 07:42:32,685 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-19 07:42:32,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:32,687 INFO L225 Difference]: With dead ends: 176 [2023-11-19 07:42:32,687 INFO L226 Difference]: Without dead ends: 92 [2023-11-19 07:42:32,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:42:32,691 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 100 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:32,691 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 117 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:42:32,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-19 07:42:32,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-19 07:42:32,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 76 states have internal predecessors, (88), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-19 07:42:32,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 118 transitions. [2023-11-19 07:42:32,710 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 118 transitions. Word has length 30 [2023-11-19 07:42:32,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:32,710 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 118 transitions. [2023-11-19 07:42:32,711 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:42:32,711 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 118 transitions. [2023-11-19 07:42:32,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-19 07:42:32,714 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:32,714 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:32,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 07:42:32,714 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:32,715 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:32,715 INFO L85 PathProgramCache]: Analyzing trace with hash -92443095, now seen corresponding path program 1 times [2023-11-19 07:42:32,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:32,716 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630120331] [2023-11-19 07:42:32,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:32,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:32,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:32,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:32,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:32,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-19 07:42:32,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:32,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:42:32,905 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:32,905 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630120331] [2023-11-19 07:42:32,905 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630120331] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:32,906 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:32,906 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:42:32,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599896505] [2023-11-19 07:42:32,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:32,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:42:32,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:32,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:42:32,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:42:32,909 INFO L87 Difference]: Start difference. First operand 92 states and 118 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:42:33,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:33,260 INFO L93 Difference]: Finished difference Result 264 states and 338 transitions. [2023-11-19 07:42:33,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:42:33,262 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 45 [2023-11-19 07:42:33,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:33,272 INFO L225 Difference]: With dead ends: 264 [2023-11-19 07:42:33,272 INFO L226 Difference]: Without dead ends: 180 [2023-11-19 07:42:33,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:42:33,280 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 226 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:33,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 311 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:42:33,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2023-11-19 07:42:33,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 174. [2023-11-19 07:42:33,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2578125) internal successors, (161), 137 states have internal predecessors, (161), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-19 07:42:33,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 212 transitions. [2023-11-19 07:42:33,337 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 212 transitions. Word has length 45 [2023-11-19 07:42:33,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:33,338 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 212 transitions. [2023-11-19 07:42:33,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:42:33,339 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 212 transitions. [2023-11-19 07:42:33,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-19 07:42:33,345 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:33,346 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:33,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 07:42:33,346 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:33,347 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:33,347 INFO L85 PathProgramCache]: Analyzing trace with hash 440823665, now seen corresponding path program 1 times [2023-11-19 07:42:33,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:33,348 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978116668] [2023-11-19 07:42:33,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:33,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:33,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:33,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:33,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:33,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:33,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:33,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:33,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:33,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-19 07:42:33,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:33,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:42:33,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:33,636 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978116668] [2023-11-19 07:42:33,636 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978116668] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:33,636 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:33,637 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:42:33,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2109341789] [2023-11-19 07:42:33,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:33,638 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:42:33,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:33,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:42:33,639 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:42:33,639 INFO L87 Difference]: Start difference. First operand 174 states and 212 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 07:42:33,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:33,976 INFO L93 Difference]: Finished difference Result 348 states and 425 transitions. [2023-11-19 07:42:33,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-19 07:42:33,977 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2023-11-19 07:42:33,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:33,984 INFO L225 Difference]: With dead ends: 348 [2023-11-19 07:42:33,985 INFO L226 Difference]: Without dead ends: 182 [2023-11-19 07:42:33,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-19 07:42:33,992 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 161 mSDsluCounter, 299 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:33,993 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 397 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:42:33,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-19 07:42:34,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 172. [2023-11-19 07:42:34,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 126 states have (on average 1.2301587301587302) internal successors, (155), 135 states have internal predecessors, (155), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-19 07:42:34,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 206 transitions. [2023-11-19 07:42:34,051 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 206 transitions. Word has length 51 [2023-11-19 07:42:34,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:34,054 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 206 transitions. [2023-11-19 07:42:34,054 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 07:42:34,054 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 206 transitions. [2023-11-19 07:42:34,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-19 07:42:34,058 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:34,059 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:34,059 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 07:42:34,060 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:34,060 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:34,060 INFO L85 PathProgramCache]: Analyzing trace with hash 296938365, now seen corresponding path program 1 times [2023-11-19 07:42:34,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:34,061 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [962397872] [2023-11-19 07:42:34,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:34,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:34,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:34,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:34,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:34,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:34,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-19 07:42:34,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,319 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:42:34,319 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:34,320 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [962397872] [2023-11-19 07:42:34,320 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [962397872] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:34,320 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:34,320 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:42:34,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470867680] [2023-11-19 07:42:34,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:34,321 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:42:34,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:34,323 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:42:34,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:42:34,323 INFO L87 Difference]: Start difference. First operand 172 states and 206 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 07:42:34,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:34,551 INFO L93 Difference]: Finished difference Result 346 states and 423 transitions. [2023-11-19 07:42:34,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:42:34,552 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-19 07:42:34,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:34,554 INFO L225 Difference]: With dead ends: 346 [2023-11-19 07:42:34,554 INFO L226 Difference]: Without dead ends: 182 [2023-11-19 07:42:34,555 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-19 07:42:34,562 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 76 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:34,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 410 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:42:34,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-19 07:42:34,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 175. [2023-11-19 07:42:34,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 129 states have (on average 1.2248062015503876) internal successors, (158), 138 states have internal predecessors, (158), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-19 07:42:34,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 209 transitions. [2023-11-19 07:42:34,596 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 209 transitions. Word has length 61 [2023-11-19 07:42:34,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:34,597 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 209 transitions. [2023-11-19 07:42:34,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 07:42:34,597 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 209 transitions. [2023-11-19 07:42:34,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-19 07:42:34,602 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:34,603 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:34,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 07:42:34,603 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:34,603 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:34,604 INFO L85 PathProgramCache]: Analyzing trace with hash 224551807, now seen corresponding path program 1 times [2023-11-19 07:42:34,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:34,604 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36722698] [2023-11-19 07:42:34,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:34,604 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:34,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:34,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:34,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:34,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:34,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-19 07:42:34,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:34,778 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:42:34,778 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:34,778 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36722698] [2023-11-19 07:42:34,778 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36722698] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:34,778 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:34,778 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:42:34,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552032488] [2023-11-19 07:42:34,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:34,780 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:42:34,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:34,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:42:34,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:42:34,782 INFO L87 Difference]: Start difference. First operand 175 states and 209 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 07:42:34,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:34,981 INFO L93 Difference]: Finished difference Result 352 states and 429 transitions. [2023-11-19 07:42:34,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-19 07:42:34,982 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-19 07:42:34,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:34,986 INFO L225 Difference]: With dead ends: 352 [2023-11-19 07:42:34,986 INFO L226 Difference]: Without dead ends: 185 [2023-11-19 07:42:34,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:42:34,991 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 78 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:34,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 320 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:42:34,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2023-11-19 07:42:35,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 177. [2023-11-19 07:42:35,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.2213740458015268) internal successors, (160), 140 states have internal predecessors, (160), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-19 07:42:35,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 211 transitions. [2023-11-19 07:42:35,012 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 211 transitions. Word has length 61 [2023-11-19 07:42:35,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:35,013 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 211 transitions. [2023-11-19 07:42:35,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 07:42:35,013 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 211 transitions. [2023-11-19 07:42:35,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-19 07:42:35,014 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:35,014 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:35,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 07:42:35,015 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:35,015 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:35,015 INFO L85 PathProgramCache]: Analyzing trace with hash -619453695, now seen corresponding path program 1 times [2023-11-19 07:42:35,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:35,015 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725271475] [2023-11-19 07:42:35,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:35,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:35,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:35,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:35,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:35,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:35,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-19 07:42:35,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,142 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:42:35,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:35,143 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725271475] [2023-11-19 07:42:35,143 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725271475] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:35,143 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:35,143 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:42:35,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939408369] [2023-11-19 07:42:35,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:35,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:42:35,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:35,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:42:35,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:42:35,145 INFO L87 Difference]: Start difference. First operand 177 states and 211 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-19 07:42:35,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:35,410 INFO L93 Difference]: Finished difference Result 470 states and 590 transitions. [2023-11-19 07:42:35,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:42:35,410 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2023-11-19 07:42:35,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:35,413 INFO L225 Difference]: With dead ends: 470 [2023-11-19 07:42:35,414 INFO L226 Difference]: Without dead ends: 301 [2023-11-19 07:42:35,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:42:35,415 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 224 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:35,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 327 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:42:35,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 301 states. [2023-11-19 07:42:35,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 299. [2023-11-19 07:42:35,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 221 states have (on average 1.2126696832579185) internal successors, (268), 234 states have internal predecessors, (268), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2023-11-19 07:42:35,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 365 transitions. [2023-11-19 07:42:35,446 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 365 transitions. Word has length 61 [2023-11-19 07:42:35,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:35,446 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 365 transitions. [2023-11-19 07:42:35,447 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-19 07:42:35,447 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 365 transitions. [2023-11-19 07:42:35,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-19 07:42:35,448 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:35,448 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:35,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-19 07:42:35,449 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:35,449 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:35,449 INFO L85 PathProgramCache]: Analyzing trace with hash -96720153, now seen corresponding path program 1 times [2023-11-19 07:42:35,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:35,450 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683846330] [2023-11-19 07:42:35,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:35,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:35,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:42:35,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-19 07:42:35,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:35,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:35,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:35,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-19 07:42:35,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:35,754 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:42:35,755 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:35,755 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683846330] [2023-11-19 07:42:35,755 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683846330] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:35,755 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:42:35,756 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-19 07:42:35,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272415070] [2023-11-19 07:42:35,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:35,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-19 07:42:35,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:35,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-19 07:42:35,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-19 07:42:35,758 INFO L87 Difference]: Start difference. First operand 299 states and 365 transitions. Second operand has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-19 07:42:36,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:36,736 INFO L93 Difference]: Finished difference Result 905 states and 1144 transitions. [2023-11-19 07:42:36,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-19 07:42:36,737 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2023-11-19 07:42:36,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:36,742 INFO L225 Difference]: With dead ends: 905 [2023-11-19 07:42:36,743 INFO L226 Difference]: Without dead ends: 614 [2023-11-19 07:42:36,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-19 07:42:36,746 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 525 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 717 mSolverCounterSat, 216 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 532 SdHoareTripleChecker+Valid, 467 SdHoareTripleChecker+Invalid, 933 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 216 IncrementalHoareTripleChecker+Valid, 717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:36,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [532 Valid, 467 Invalid, 933 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [216 Valid, 717 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-19 07:42:36,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2023-11-19 07:42:36,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 605. [2023-11-19 07:42:36,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 605 states, 440 states have (on average 1.184090909090909) internal successors, (521), 470 states have internal predecessors, (521), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2023-11-19 07:42:36,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 605 states to 605 states and 742 transitions. [2023-11-19 07:42:36,817 INFO L78 Accepts]: Start accepts. Automaton has 605 states and 742 transitions. Word has length 65 [2023-11-19 07:42:36,817 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:36,817 INFO L495 AbstractCegarLoop]: Abstraction has 605 states and 742 transitions. [2023-11-19 07:42:36,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-19 07:42:36,818 INFO L276 IsEmpty]: Start isEmpty. Operand 605 states and 742 transitions. [2023-11-19 07:42:36,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2023-11-19 07:42:36,821 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:42:36,821 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:36,822 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-19 07:42:36,822 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:42:36,822 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:42:36,823 INFO L85 PathProgramCache]: Analyzing trace with hash 1036545062, now seen corresponding path program 1 times [2023-11-19 07:42:36,823 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:42:36,823 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269768085] [2023-11-19 07:42:36,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:36,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:42:36,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:42:37,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:42:37,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-19 07:42:37,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:37,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 07:42:37,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:37,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-19 07:42:37,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-19 07:42:37,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-19 07:42:37,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:42:37,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2023-11-19 07:42:37,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-19 07:42:37,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:42:37,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2023-11-19 07:42:37,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,253 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-19 07:42:37,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:42:37,254 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269768085] [2023-11-19 07:42:37,254 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269768085] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 07:42:37,254 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [651270604] [2023-11-19 07:42:37,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:42:37,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:42:37,255 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:42:37,261 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 07:42:37,280 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 07:42:37,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:42:37,389 INFO L262 TraceCheckSpWp]: Trace formula consists of 394 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-19 07:42:37,399 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 07:42:37,627 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-19 07:42:37,628 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-19 07:42:37,628 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [651270604] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:42:37,628 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-19 07:42:37,628 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-19 07:42:37,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474684409] [2023-11-19 07:42:37,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:42:37,629 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-19 07:42:37,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:42:37,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 07:42:37,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-11-19 07:42:37,631 INFO L87 Difference]: Start difference. First operand 605 states and 742 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-19 07:42:37,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:42:37,846 INFO L93 Difference]: Finished difference Result 1305 states and 1599 transitions. [2023-11-19 07:42:37,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:42:37,847 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2023-11-19 07:42:37,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:42:37,848 INFO L225 Difference]: With dead ends: 1305 [2023-11-19 07:42:37,848 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 07:42:37,852 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 141 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-19 07:42:37,852 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 65 mSDsluCounter, 655 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 846 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:42:37,853 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 846 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:42:37,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 07:42:37,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 07:42:37,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:42:37,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 07:42:37,855 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2023-11-19 07:42:37,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:42:37,855 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 07:42:37,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-19 07:42:37,855 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 07:42:37,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 07:42:37,858 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 07:42:37,886 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 07:42:38,079 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-19 07:42:38,081 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 07:42:40,142 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 919 926) no Hoare annotation was computed. [2023-11-19 07:42:40,142 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 919 926) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,143 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 919 926) no Hoare annotation was computed. [2023-11-19 07:42:40,143 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 809 815) no Hoare annotation was computed. [2023-11-19 07:42:40,143 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 809 815) the Hoare annotation is: true [2023-11-19 07:42:40,143 INFO L895 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-19 07:42:40,143 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-19 07:42:40,143 INFO L899 garLoopResultBuilder]: For program point L851(lines 851 859) no Hoare annotation was computed. [2023-11-19 07:42:40,144 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2023-11-19 07:42:40,144 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 770 778) no Hoare annotation was computed. [2023-11-19 07:42:40,144 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 843 867) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,144 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 1002 1020) no Hoare annotation was computed. [2023-11-19 07:42:40,144 INFO L895 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse3 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse3 .cse0 .cse2))) [2023-11-19 07:42:40,144 INFO L899 garLoopResultBuilder]: For program point L862-1(lines 843 867) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point L1011(lines 1011 1015) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point L1011-2(lines 1011 1015) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 843 867) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 703 714) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) .cse0 (< |old(~methaneLevelCritical~0)| 1)) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 703 714) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point L707-1(lines 703 714) no Hoare annotation was computed. [2023-11-19 07:42:40,145 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 785 808) no Hoare annotation was computed. [2023-11-19 07:42:40,146 INFO L899 garLoopResultBuilder]: For program point L796-1(lines 796 802) no Hoare annotation was computed. [2023-11-19 07:42:40,146 INFO L895 garLoopResultBuilder]: At program point L883(line 883) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,146 INFO L895 garLoopResultBuilder]: At program point L879(line 879) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (and .cse0 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) .cse1 (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-19 07:42:40,149 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-19 07:42:40,149 INFO L899 garLoopResultBuilder]: For program point L875-1(line 875) no Hoare annotation was computed. [2023-11-19 07:42:40,149 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2023-11-19 07:42:40,149 INFO L899 garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed. [2023-11-19 07:42:40,149 INFO L899 garLoopResultBuilder]: For program point L70-1(lines 62 90) no Hoare annotation was computed. [2023-11-19 07:42:40,149 INFO L895 garLoopResultBuilder]: At program point L888(line 888) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 869 893) no Hoare annotation was computed. [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point L789-1(lines 788 807) no Hoare annotation was computed. [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 563 570) no Hoare annotation was computed. [2023-11-19 07:42:40,150 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 785 808) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point L567(line 567) no Hoare annotation was computed. [2023-11-19 07:42:40,150 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 885) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 687) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 785 808) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point L683-2(lines 679 690) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 890) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 938 946) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 567) no Hoare annotation was computed. [2023-11-19 07:42:40,151 INFO L895 garLoopResultBuilder]: At program point L68(line 68) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse5 .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (and .cse2 .cse5))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3 (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4)) (or .cse0 .cse1 .cse3 (< ~methaneLevelCritical~0 1))))) [2023-11-19 07:42:40,152 INFO L899 garLoopResultBuilder]: For program point L68-1(line 68) no Hoare annotation was computed. [2023-11-19 07:42:40,152 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 94 123) no Hoare annotation was computed. [2023-11-19 07:42:40,152 INFO L899 garLoopResultBuilder]: For program point L119(lines 94 123) no Hoare annotation was computed. [2023-11-19 07:42:40,152 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2023-11-19 07:42:40,152 INFO L899 garLoopResultBuilder]: For program point L108(lines 108 112) no Hoare annotation was computed. [2023-11-19 07:42:40,153 INFO L902 garLoopResultBuilder]: At program point L108-1(lines 108 112) the Hoare annotation is: true [2023-11-19 07:42:40,153 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 94 123) the Hoare annotation is: true [2023-11-19 07:42:40,153 INFO L899 garLoopResultBuilder]: For program point L105(line 105) no Hoare annotation was computed. [2023-11-19 07:42:40,153 INFO L902 garLoopResultBuilder]: At program point L104-2(lines 104 118) the Hoare annotation is: true [2023-11-19 07:42:40,153 INFO L902 garLoopResultBuilder]: At program point L100(line 100) the Hoare annotation is: true [2023-11-19 07:42:40,153 INFO L899 garLoopResultBuilder]: For program point L100-1(line 100) no Hoare annotation was computed. [2023-11-19 07:42:40,154 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 715 723) the Hoare annotation is: true [2023-11-19 07:42:40,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 715 723) no Hoare annotation was computed. [2023-11-19 07:42:40,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 715 723) no Hoare annotation was computed. [2023-11-19 07:42:40,154 INFO L895 garLoopResultBuilder]: At program point L663(lines 616 664) the Hoare annotation is: false [2023-11-19 07:42:40,154 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 159 169) no Hoare annotation was computed. [2023-11-19 07:42:40,154 INFO L899 garLoopResultBuilder]: For program point L618(lines 617 662) no Hoare annotation was computed. [2023-11-19 07:42:40,155 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 583 589) no Hoare annotation was computed. [2023-11-19 07:42:40,156 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 173 195) no Hoare annotation was computed. [2023-11-19 07:42:40,156 INFO L899 garLoopResultBuilder]: For program point L647(lines 647 658) no Hoare annotation was computed. [2023-11-19 07:42:40,156 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-19 07:42:40,156 INFO L895 garLoopResultBuilder]: At program point L639(line 639) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-19 07:42:40,156 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L895 garLoopResultBuilder]: At program point L660(lines 617 662) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point L619(lines 619 623) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 151 157) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 657) no Hoare annotation was computed. [2023-11-19 07:42:40,157 INFO L895 garLoopResultBuilder]: At program point L653-2(lines 647 658) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 590 596) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 54 61) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point L637(lines 637 643) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point L637-1(lines 637 643) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point L666(lines 607 670) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L899 garLoopResultBuilder]: For program point L183(lines 183 190) no Hoare annotation was computed. [2023-11-19 07:42:40,158 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-19 07:42:40,159 INFO L899 garLoopResultBuilder]: For program point L183-2(lines 183 190) no Hoare annotation was computed. [2023-11-19 07:42:40,159 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 597 605) no Hoare annotation was computed. [2023-11-19 07:42:40,159 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 766) no Hoare annotation was computed. [2023-11-19 07:42:40,159 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 915) no Hoare annotation was computed. [2023-11-19 07:42:40,159 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-19 07:42:40,160 INFO L899 garLoopResultBuilder]: For program point L909-2(lines 902 918) no Hoare annotation was computed. [2023-11-19 07:42:40,160 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2023-11-19 07:42:40,160 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 817 841) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,160 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 756 769) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point L992(lines 992 996) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L895 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse3)) (.cse1 (and (= ~pumpRunning~0 0) .cse3 .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse2) .cse0 (< ~methaneLevelCritical~0 1) .cse1)))) [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point L992-2(lines 992 996) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 983 1001) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 817 841) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 833) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 838) no Hoare annotation was computed. [2023-11-19 07:42:40,161 INFO L899 garLoopResultBuilder]: For program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 894 901) no Hoare annotation was computed. [2023-11-19 07:42:40,162 INFO L895 garLoopResultBuilder]: At program point L836(line 836) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-19 07:42:40,162 INFO L899 garLoopResultBuilder]: For program point L836-1(lines 817 841) no Hoare annotation was computed. [2023-11-19 07:42:40,162 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 691 702) no Hoare annotation was computed. [2023-11-19 07:42:40,162 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 691 702) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-19 07:42:40,162 INFO L899 garLoopResultBuilder]: For program point L695-1(lines 691 702) no Hoare annotation was computed. [2023-11-19 07:42:40,162 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 927 937) no Hoare annotation was computed. [2023-11-19 07:42:40,162 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 927 937) the Hoare annotation is: true [2023-11-19 07:42:40,163 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 927 937) no Hoare annotation was computed. [2023-11-19 07:42:40,163 INFO L902 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: true [2023-11-19 07:42:40,163 INFO L899 garLoopResultBuilder]: For program point L932-1(line 932) no Hoare annotation was computed. [2023-11-19 07:42:40,165 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:42:40,168 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 07:42:40,181 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:42:40 BoogieIcfgContainer [2023-11-19 07:42:40,182 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 07:42:40,182 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 07:42:40,182 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 07:42:40,182 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 07:42:40,184 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:42:31" (3/4) ... [2023-11-19 07:42:40,186 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 07:42:40,190 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-19 07:42:40,191 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:42:40,191 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 07:42:40,191 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:42:40,191 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-19 07:42:40,203 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2023-11-19 07:42:40,204 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-19 07:42:40,205 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 07:42:40,206 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:42:40,206 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:42:40,324 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml [2023-11-19 07:42:40,325 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/witness.yml [2023-11-19 07:42:40,325 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 07:42:40,326 INFO L158 Benchmark]: Toolchain (without parser) took 9944.75ms. Allocated memory was 138.4MB in the beginning and 226.5MB in the end (delta: 88.1MB). Free memory was 94.9MB in the beginning and 133.5MB in the end (delta: -38.7MB). Peak memory consumption was 51.9MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,326 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 138.4MB. Free memory is still 110.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 07:42:40,327 INFO L158 Benchmark]: CACSL2BoogieTranslator took 593.05ms. Allocated memory is still 138.4MB. Free memory was 94.4MB in the beginning and 74.9MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,327 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.73ms. Allocated memory is still 138.4MB. Free memory was 74.9MB in the beginning and 72.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,328 INFO L158 Benchmark]: Boogie Preprocessor took 34.64ms. Allocated memory is still 138.4MB. Free memory was 72.8MB in the beginning and 70.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,328 INFO L158 Benchmark]: RCFGBuilder took 627.94ms. Allocated memory is still 138.4MB. Free memory was 70.7MB in the beginning and 106.7MB in the end (delta: -36.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,328 INFO L158 Benchmark]: TraceAbstraction took 8469.75ms. Allocated memory was 138.4MB in the beginning and 226.5MB in the end (delta: 88.1MB). Free memory was 105.4MB in the beginning and 140.9MB in the end (delta: -35.5MB). Peak memory consumption was 124.0MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,329 INFO L158 Benchmark]: Witness Printer took 143.23ms. Allocated memory is still 226.5MB. Free memory was 140.9MB in the beginning and 133.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-19 07:42:40,331 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 138.4MB. Free memory is still 110.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 593.05ms. Allocated memory is still 138.4MB. Free memory was 94.4MB in the beginning and 74.9MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.73ms. Allocated memory is still 138.4MB. Free memory was 74.9MB in the beginning and 72.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.64ms. Allocated memory is still 138.4MB. Free memory was 72.8MB in the beginning and 70.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 627.94ms. Allocated memory is still 138.4MB. Free memory was 70.7MB in the beginning and 106.7MB in the end (delta: -36.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 8469.75ms. Allocated memory was 138.4MB in the beginning and 226.5MB in the end (delta: 88.1MB). Free memory was 105.4MB in the beginning and 140.9MB in the end (delta: -35.5MB). Peak memory consumption was 124.0MB. Max. memory is 16.1GB. * Witness Printer took 143.23ms. Allocated memory is still 226.5MB. Free memory was 140.9MB in the beginning and 133.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49] - GenericResultAtLocation [Line: 91]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [91] - GenericResultAtLocation [Line: 196]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [196] - GenericResultAtLocation [Line: 562]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [562] - GenericResultAtLocation [Line: 571]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [571] - GenericResultAtLocation [Line: 606]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [606] - GenericResultAtLocation [Line: 671]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [671] - GenericResultAtLocation [Line: 779]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [779] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 567]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.4s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1507 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1467 mSDsluCounter, 3555 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2373 mSDsCounter, 450 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1596 IncrementalHoareTripleChecker+Invalid, 2046 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 450 mSolverCounterUnsat, 1182 mSDtfsCounter, 1596 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 322 GetRequests, 233 SyntacticMatches, 1 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 320 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=605occurred in iteration=9, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 42 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 865 PreInvPairs, 997 NumberOfFragments, 748 HoareAnnotationTreeSize, 865 FomulaSimplifications, 1898 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 30 FomulaSimplificationsInter, 5300 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 671 NumberOfCodeBlocks, 671 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 660 ConstructedInterpolants, 0 QuantifiedInterpolants, 1092 SizeOfPredicates, 3 NumberOfNonLiveVariables, 394 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 96/108 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 617]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-19 07:42:40,368 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f31578a8-0109-4b13-ae35-14020cb62608/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE