./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:53:00,051 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:53:00,123 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:53:00,130 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:53:00,130 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:53:00,158 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:53:00,159 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:53:00,160 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:53:00,163 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:53:00,164 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:53:00,165 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:53:00,166 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:53:00,167 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:53:00,171 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:53:00,171 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:53:00,172 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:53:00,173 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:53:00,180 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:53:00,180 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:53:00,181 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:53:00,181 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:53:00,182 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:53:00,182 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:53:00,183 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:53:00,183 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:53:00,184 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:53:00,184 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:53:00,185 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:53:00,185 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:53:00,186 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:53:00,187 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:53:00,188 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:53:00,188 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:53:00,189 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:53:00,189 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:53:00,189 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:53:00,189 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:53:00,190 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:53:00,190 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:53:00,190 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:53:00,190 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:53:00,191 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:53:00,191 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 [2023-11-26 11:53:00,474 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:53:00,513 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:53:00,534 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:53:00,535 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:53:00,536 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:53:00,537 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2023-11-26 11:53:03,758 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:53:04,131 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:53:04,132 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2023-11-26 11:53:04,147 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/data/c11fa74b7/3ea0e3c00fb242e9b443d13916333903/FLAG2b14343ac [2023-11-26 11:53:04,164 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/data/c11fa74b7/3ea0e3c00fb242e9b443d13916333903 [2023-11-26 11:53:04,166 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:53:04,168 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:53:04,170 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:53:04,170 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:53:04,177 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:53:04,178 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,179 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@14578486 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04, skipping insertion in model container [2023-11-26 11:53:04,179 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,248 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:53:04,424 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2023-11-26 11:53:04,559 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:53:04,572 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:53:04,591 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-26 11:53:04,593 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2023-11-26 11:53:04,594 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] [2023-11-26 11:53:04,594 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] [2023-11-26 11:53:04,594 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] [2023-11-26 11:53:04,595 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] [2023-11-26 11:53:04,595 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] [2023-11-26 11:53:04,595 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] [2023-11-26 11:53:04,616 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2023-11-26 11:53:04,706 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:53:04,728 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:53:04,728 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04 WrapperNode [2023-11-26 11:53:04,728 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:53:04,730 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:53:04,730 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:53:04,730 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:53:04,738 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,762 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,809 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 223 [2023-11-26 11:53:04,809 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:53:04,810 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:53:04,811 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:53:04,811 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:53:04,824 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,824 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,836 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,868 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:53:04,868 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,869 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,891 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,916 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,918 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,920 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,922 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:53:04,931 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:53:04,931 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:53:04,931 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:53:04,932 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (1/1) ... [2023-11-26 11:53:04,950 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:53:04,996 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:53:05,020 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:53:05,025 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:53:05,062 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:53:05,062 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:53:05,063 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:53:05,063 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:53:05,063 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:53:05,063 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:53:05,063 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:53:05,063 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-26 11:53:05,064 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-26 11:53:05,064 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:53:05,064 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:53:05,064 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:53:05,064 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:53:05,064 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:53:05,064 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:53:05,064 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-26 11:53:05,065 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-26 11:53:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:53:05,065 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:53:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:53:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:53:05,065 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:53:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:53:05,065 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:53:05,161 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:53:05,164 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:53:05,452 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:53:05,555 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:53:05,558 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:53:05,559 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:05 BoogieIcfgContainer [2023-11-26 11:53:05,559 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:53:05,562 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:53:05,563 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:53:05,567 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:53:05,568 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:53:04" (1/3) ... [2023-11-26 11:53:05,569 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66f25624 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:53:05, skipping insertion in model container [2023-11-26 11:53:05,569 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:04" (2/3) ... [2023-11-26 11:53:05,570 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66f25624 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:53:05, skipping insertion in model container [2023-11-26 11:53:05,570 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:05" (3/3) ... [2023-11-26 11:53:05,571 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product64.cil.c [2023-11-26 11:53:05,594 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:53:05,594 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:53:05,664 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:53:05,672 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3c9dea14, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:53:05,672 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:53:05,677 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 60 states have (on average 1.5) internal successors, (90), 71 states have internal predecessors, (90), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-26 11:53:05,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-26 11:53:05,689 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:05,690 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:05,690 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:05,696 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:05,697 INFO L85 PathProgramCache]: Analyzing trace with hash 781034755, now seen corresponding path program 1 times [2023-11-26 11:53:05,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:05,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291193936] [2023-11-26 11:53:05,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:05,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:05,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:05,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-26 11:53:05,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:05,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:05,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:05,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291193936] [2023-11-26 11:53:05,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291193936] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:05,960 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:05,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:53:05,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1709038286] [2023-11-26 11:53:05,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:05,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:53:05,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:06,015 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:53:06,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:53:06,019 INFO L87 Difference]: Start difference. First operand has 91 states, 60 states have (on average 1.5) internal successors, (90), 71 states have internal predecessors, (90), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:06,094 INFO L93 Difference]: Finished difference Result 180 states and 257 transitions. [2023-11-26 11:53:06,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:53:06,097 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-26 11:53:06,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:06,108 INFO L225 Difference]: With dead ends: 180 [2023-11-26 11:53:06,108 INFO L226 Difference]: Without dead ends: 86 [2023-11-26 11:53:06,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:53:06,116 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:06,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 106 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:53:06,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2023-11-26 11:53:06,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2023-11-26 11:53:06,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 57 states have (on average 1.4035087719298245) internal successors, (80), 67 states have internal predecessors, (80), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-26 11:53:06,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 117 transitions. [2023-11-26 11:53:06,172 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 117 transitions. Word has length 16 [2023-11-26 11:53:06,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:06,173 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 117 transitions. [2023-11-26 11:53:06,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,173 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 117 transitions. [2023-11-26 11:53:06,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-26 11:53:06,176 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:06,176 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:06,177 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:53:06,177 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:06,178 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:06,178 INFO L85 PathProgramCache]: Analyzing trace with hash 780605561, now seen corresponding path program 1 times [2023-11-26 11:53:06,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:06,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [918845486] [2023-11-26 11:53:06,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:06,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:06,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-26 11:53:06,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,319 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:06,319 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:06,320 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [918845486] [2023-11-26 11:53:06,320 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [918845486] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:06,320 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:06,320 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:53:06,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338660225] [2023-11-26 11:53:06,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:06,322 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:53:06,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:06,323 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:53:06,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:06,324 INFO L87 Difference]: Start difference. First operand 86 states and 117 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:06,376 INFO L93 Difference]: Finished difference Result 142 states and 192 transitions. [2023-11-26 11:53:06,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:53:06,377 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-26 11:53:06,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:06,414 INFO L225 Difference]: With dead ends: 142 [2023-11-26 11:53:06,414 INFO L226 Difference]: Without dead ends: 78 [2023-11-26 11:53:06,416 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:06,417 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 14 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:06,418 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 168 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:53:06,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-26 11:53:06,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-26 11:53:06,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 52 states have (on average 1.4230769230769231) internal successors, (74), 62 states have internal predecessors, (74), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-26 11:53:06,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 106 transitions. [2023-11-26 11:53:06,439 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 106 transitions. Word has length 17 [2023-11-26 11:53:06,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:06,440 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 106 transitions. [2023-11-26 11:53:06,440 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,440 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 106 transitions. [2023-11-26 11:53:06,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-26 11:53:06,455 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:06,455 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:06,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:53:06,455 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:06,456 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:06,456 INFO L85 PathProgramCache]: Analyzing trace with hash -1406408527, now seen corresponding path program 1 times [2023-11-26 11:53:06,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:06,457 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558530608] [2023-11-26 11:53:06,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:06,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:06,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:06,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:06,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:06,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558530608] [2023-11-26 11:53:06,576 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558530608] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:06,576 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:06,576 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-26 11:53:06,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198441766] [2023-11-26 11:53:06,577 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:06,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 11:53:06,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:06,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 11:53:06,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 11:53:06,579 INFO L87 Difference]: Start difference. First operand 78 states and 106 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:06,692 INFO L93 Difference]: Finished difference Result 191 states and 260 transitions. [2023-11-26 11:53:06,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:53:06,693 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-26 11:53:06,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:06,695 INFO L225 Difference]: With dead ends: 191 [2023-11-26 11:53:06,695 INFO L226 Difference]: Without dead ends: 115 [2023-11-26 11:53:06,697 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:53:06,699 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 129 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:06,699 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [133 Valid, 218 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:53:06,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2023-11-26 11:53:06,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 112. [2023-11-26 11:53:06,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 76 states have (on average 1.4342105263157894) internal successors, (109), 89 states have internal predecessors, (109), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2023-11-26 11:53:06,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 152 transitions. [2023-11-26 11:53:06,728 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 152 transitions. Word has length 20 [2023-11-26 11:53:06,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:06,729 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 152 transitions. [2023-11-26 11:53:06,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:06,729 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 152 transitions. [2023-11-26 11:53:06,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-26 11:53:06,731 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:06,731 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:06,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:53:06,732 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:06,733 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:06,733 INFO L85 PathProgramCache]: Analyzing trace with hash -1693407605, now seen corresponding path program 1 times [2023-11-26 11:53:06,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:06,733 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177696188] [2023-11-26 11:53:06,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:06,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:06,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:53:06,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:06,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:06,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:06,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177696188] [2023-11-26 11:53:06,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177696188] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:06,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:06,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-26 11:53:06,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336186663] [2023-11-26 11:53:06,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:06,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 11:53:06,920 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:06,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 11:53:06,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 11:53:06,922 INFO L87 Difference]: Start difference. First operand 112 states and 152 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:07,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:07,085 INFO L93 Difference]: Finished difference Result 266 states and 369 transitions. [2023-11-26 11:53:07,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:53:07,085 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-26 11:53:07,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:07,095 INFO L225 Difference]: With dead ends: 266 [2023-11-26 11:53:07,095 INFO L226 Difference]: Without dead ends: 156 [2023-11-26 11:53:07,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:53:07,106 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 61 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:07,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 238 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:53:07,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2023-11-26 11:53:07,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 152. [2023-11-26 11:53:07,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 105 states have (on average 1.3428571428571427) internal successors, (141), 117 states have internal predecessors, (141), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2023-11-26 11:53:07,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 199 transitions. [2023-11-26 11:53:07,149 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 199 transitions. Word has length 23 [2023-11-26 11:53:07,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:07,150 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 199 transitions. [2023-11-26 11:53:07,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:07,150 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 199 transitions. [2023-11-26 11:53:07,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-26 11:53:07,153 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:07,153 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:07,153 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:53:07,154 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:07,154 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:07,154 INFO L85 PathProgramCache]: Analyzing trace with hash 336715601, now seen corresponding path program 1 times [2023-11-26 11:53:07,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:07,155 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1821119945] [2023-11-26 11:53:07,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:07,155 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:07,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:53:07,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:07,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:07,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:07,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-26 11:53:07,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,348 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:53:07,349 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:07,349 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1821119945] [2023-11-26 11:53:07,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1821119945] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:07,351 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:07,351 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:53:07,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2101664190] [2023-11-26 11:53:07,351 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:07,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:53:07,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:07,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:53:07,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:53:07,354 INFO L87 Difference]: Start difference. First operand 152 states and 199 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:07,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:07,701 INFO L93 Difference]: Finished difference Result 343 states and 460 transitions. [2023-11-26 11:53:07,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-26 11:53:07,703 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 50 [2023-11-26 11:53:07,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:07,709 INFO L225 Difference]: With dead ends: 343 [2023-11-26 11:53:07,709 INFO L226 Difference]: Without dead ends: 193 [2023-11-26 11:53:07,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:53:07,715 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 112 mSDsluCounter, 251 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 333 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:07,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 333 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:53:07,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2023-11-26 11:53:07,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 176. [2023-11-26 11:53:07,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 122 states have (on average 1.3114754098360655) internal successors, (160), 134 states have internal predecessors, (160), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2023-11-26 11:53:07,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 225 transitions. [2023-11-26 11:53:07,772 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 225 transitions. Word has length 50 [2023-11-26 11:53:07,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:07,772 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 225 transitions. [2023-11-26 11:53:07,772 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:07,773 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 225 transitions. [2023-11-26 11:53:07,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:53:07,777 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:07,777 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:07,777 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 11:53:07,778 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:07,783 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:07,783 INFO L85 PathProgramCache]: Analyzing trace with hash -793306199, now seen corresponding path program 1 times [2023-11-26 11:53:07,783 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:07,784 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1348657942] [2023-11-26 11:53:07,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:07,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:07,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:07,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:07,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:07,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:07,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:53:07,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:07,945 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:53:07,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:07,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1348657942] [2023-11-26 11:53:07,945 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1348657942] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:07,946 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:07,946 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:53:07,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1941438426] [2023-11-26 11:53:07,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:07,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:53:07,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:07,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:53:07,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:53:07,948 INFO L87 Difference]: Start difference. First operand 176 states and 225 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:53:08,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:08,401 INFO L93 Difference]: Finished difference Result 602 states and 829 transitions. [2023-11-26 11:53:08,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 11:53:08,402 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 47 [2023-11-26 11:53:08,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:08,405 INFO L225 Difference]: With dead ends: 602 [2023-11-26 11:53:08,406 INFO L226 Difference]: Without dead ends: 428 [2023-11-26 11:53:08,407 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:53:08,408 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 247 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 282 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 375 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 282 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:08,409 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 305 Invalid, 375 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 282 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-26 11:53:08,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 428 states. [2023-11-26 11:53:08,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 428 to 422. [2023-11-26 11:53:08,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 294 states have (on average 1.3027210884353742) internal successors, (383), 319 states have internal predecessors, (383), 67 states have call successors, (67), 57 states have call predecessors, (67), 60 states have return successors, (114), 66 states have call predecessors, (114), 67 states have call successors, (114) [2023-11-26 11:53:08,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 564 transitions. [2023-11-26 11:53:08,464 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 564 transitions. Word has length 47 [2023-11-26 11:53:08,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:08,465 INFO L495 AbstractCegarLoop]: Abstraction has 422 states and 564 transitions. [2023-11-26 11:53:08,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:53:08,465 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 564 transitions. [2023-11-26 11:53:08,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:53:08,468 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:08,468 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:08,468 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 11:53:08,469 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:08,469 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:08,469 INFO L85 PathProgramCache]: Analyzing trace with hash -345872723, now seen corresponding path program 1 times [2023-11-26 11:53:08,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:08,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602708373] [2023-11-26 11:53:08,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:08,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:08,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:08,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:08,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:08,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:08,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:53:08,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,593 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:53:08,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:08,593 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602708373] [2023-11-26 11:53:08,593 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602708373] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:08,593 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:08,594 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:53:08,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [277483186] [2023-11-26 11:53:08,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:08,594 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:53:08,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:08,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:53:08,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:53:08,596 INFO L87 Difference]: Start difference. First operand 422 states and 564 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:08,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:08,810 INFO L93 Difference]: Finished difference Result 850 states and 1165 transitions. [2023-11-26 11:53:08,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:53:08,811 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 47 [2023-11-26 11:53:08,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:08,817 INFO L225 Difference]: With dead ends: 850 [2023-11-26 11:53:08,818 INFO L226 Difference]: Without dead ends: 430 [2023-11-26 11:53:08,820 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:53:08,824 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 61 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:08,824 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 214 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:53:08,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 430 states. [2023-11-26 11:53:08,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 430 to 424. [2023-11-26 11:53:08,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 424 states, 296 states have (on average 1.3006756756756757) internal successors, (385), 321 states have internal predecessors, (385), 67 states have call successors, (67), 57 states have call predecessors, (67), 60 states have return successors, (114), 66 states have call predecessors, (114), 67 states have call successors, (114) [2023-11-26 11:53:08,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 424 states to 424 states and 566 transitions. [2023-11-26 11:53:08,888 INFO L78 Accepts]: Start accepts. Automaton has 424 states and 566 transitions. Word has length 47 [2023-11-26 11:53:08,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:08,889 INFO L495 AbstractCegarLoop]: Abstraction has 424 states and 566 transitions. [2023-11-26 11:53:08,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:08,889 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 566 transitions. [2023-11-26 11:53:08,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:53:08,892 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:08,892 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:08,893 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 11:53:08,897 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:08,898 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:08,899 INFO L85 PathProgramCache]: Analyzing trace with hash -283833109, now seen corresponding path program 1 times [2023-11-26 11:53:08,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:08,899 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901724543] [2023-11-26 11:53:08,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:08,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:08,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:08,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:08,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:09,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:09,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:09,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:53:09,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,061 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:53:09,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:09,061 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901724543] [2023-11-26 11:53:09,061 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901724543] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:09,062 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:09,062 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:53:09,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1241858195] [2023-11-26 11:53:09,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:09,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:53:09,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:09,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:53:09,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:53:09,065 INFO L87 Difference]: Start difference. First operand 424 states and 566 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:09,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:09,300 INFO L93 Difference]: Finished difference Result 825 states and 1118 transitions. [2023-11-26 11:53:09,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-26 11:53:09,301 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 47 [2023-11-26 11:53:09,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:09,305 INFO L225 Difference]: With dead ends: 825 [2023-11-26 11:53:09,305 INFO L226 Difference]: Without dead ends: 403 [2023-11-26 11:53:09,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-26 11:53:09,309 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 82 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 262 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:09,309 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 262 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:53:09,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 403 states. [2023-11-26 11:53:09,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 403 to 401. [2023-11-26 11:53:09,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 401 states, 280 states have (on average 1.3) internal successors, (364), 303 states have internal predecessors, (364), 64 states have call successors, (64), 56 states have call predecessors, (64), 56 states have return successors, (98), 61 states have call predecessors, (98), 64 states have call successors, (98) [2023-11-26 11:53:09,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 401 states to 401 states and 526 transitions. [2023-11-26 11:53:09,358 INFO L78 Accepts]: Start accepts. Automaton has 401 states and 526 transitions. Word has length 47 [2023-11-26 11:53:09,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:09,358 INFO L495 AbstractCegarLoop]: Abstraction has 401 states and 526 transitions. [2023-11-26 11:53:09,358 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:53:09,359 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states and 526 transitions. [2023-11-26 11:53:09,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-26 11:53:09,360 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:09,360 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:09,361 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 11:53:09,361 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:09,361 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:09,362 INFO L85 PathProgramCache]: Analyzing trace with hash 2134048515, now seen corresponding path program 1 times [2023-11-26 11:53:09,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:09,362 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1657678197] [2023-11-26 11:53:09,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:09,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:09,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:53:09,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-26 11:53:09,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:09,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:09,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:09,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-26 11:53:09,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:09,674 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:53:09,675 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:09,675 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1657678197] [2023-11-26 11:53:09,675 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1657678197] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:09,675 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:09,675 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-26 11:53:09,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476856209] [2023-11-26 11:53:09,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:09,676 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-26 11:53:09,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:09,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-26 11:53:09,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-26 11:53:09,677 INFO L87 Difference]: Start difference. First operand 401 states and 526 transitions. Second operand has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 11:53:10,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:10,758 INFO L93 Difference]: Finished difference Result 1269 states and 1734 transitions. [2023-11-26 11:53:10,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-26 11:53:10,763 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 51 [2023-11-26 11:53:10,764 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:10,771 INFO L225 Difference]: With dead ends: 1269 [2023-11-26 11:53:10,772 INFO L226 Difference]: Without dead ends: 870 [2023-11-26 11:53:10,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-26 11:53:10,777 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 461 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 724 mSolverCounterSat, 243 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 469 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 967 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 243 IncrementalHoareTripleChecker+Valid, 724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:10,777 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [469 Valid, 343 Invalid, 967 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [243 Valid, 724 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-26 11:53:10,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 870 states. [2023-11-26 11:53:10,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 870 to 855. [2023-11-26 11:53:10,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 855 states, 592 states have (on average 1.2567567567567568) internal successors, (744), 644 states have internal predecessors, (744), 145 states have call successors, (145), 110 states have call predecessors, (145), 117 states have return successors, (246), 138 states have call predecessors, (246), 145 states have call successors, (246) [2023-11-26 11:53:10,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 855 states to 855 states and 1135 transitions. [2023-11-26 11:53:10,887 INFO L78 Accepts]: Start accepts. Automaton has 855 states and 1135 transitions. Word has length 51 [2023-11-26 11:53:10,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:10,887 INFO L495 AbstractCegarLoop]: Abstraction has 855 states and 1135 transitions. [2023-11-26 11:53:10,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 11:53:10,888 INFO L276 IsEmpty]: Start isEmpty. Operand 855 states and 1135 transitions. [2023-11-26 11:53:10,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-26 11:53:10,892 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:10,893 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:10,893 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-26 11:53:10,893 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:10,893 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:10,894 INFO L85 PathProgramCache]: Analyzing trace with hash -1800780571, now seen corresponding path program 1 times [2023-11-26 11:53:10,894 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:10,894 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [471042808] [2023-11-26 11:53:10,894 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:10,894 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:10,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:53:11,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:11,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 11:53:11,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:11,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:53:11,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:11,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-26 11:53:11,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-26 11:53:11,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-26 11:53:11,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:53:11,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-26 11:53:11,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:53:11,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:53:11,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-26 11:53:11,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,249 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-26 11:53:11,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:11,250 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [471042808] [2023-11-26 11:53:11,250 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [471042808] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:53:11,250 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [368755897] [2023-11-26 11:53:11,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:11,250 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:53:11,251 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:53:11,254 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:53:11,283 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 11:53:11,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,377 INFO L262 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 11:53:11,389 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:53:11,594 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-26 11:53:11,594 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 11:53:11,595 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [368755897] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:11,595 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 11:53:11,595 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-26 11:53:11,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [123066250] [2023-11-26 11:53:11,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:11,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-26 11:53:11,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:11,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-26 11:53:11,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-11-26 11:53:11,597 INFO L87 Difference]: Start difference. First operand 855 states and 1135 transitions. Second operand has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-26 11:53:11,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:11,866 INFO L93 Difference]: Finished difference Result 1892 states and 2498 transitions. [2023-11-26 11:53:11,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-26 11:53:11,867 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 102 [2023-11-26 11:53:11,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:11,868 INFO L225 Difference]: With dead ends: 1892 [2023-11-26 11:53:11,868 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:53:11,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-26 11:53:11,875 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 65 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 214 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 696 SdHoareTripleChecker+Invalid, 217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 214 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:11,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 696 Invalid, 217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 214 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:53:11,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:53:11,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:53:11,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:53:11,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:53:11,876 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102 [2023-11-26 11:53:11,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:11,877 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:53:11,877 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-26 11:53:11,877 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:53:11,877 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:53:11,880 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:53:11,892 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-26 11:53:12,087 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:53:12,089 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:53:15,756 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 737 744) no Hoare annotation was computed. [2023-11-26 11:53:15,756 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 737 744) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:53:15,756 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 627 633) no Hoare annotation was computed. [2023-11-26 11:53:15,757 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 627 633) the Hoare annotation is: true [2023-11-26 11:53:15,757 INFO L895 garLoopResultBuilder]: At program point L671(line 671) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-26 11:53:15,757 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 677) no Hoare annotation was computed. [2023-11-26 11:53:15,757 INFO L899 garLoopResultBuilder]: For program point L665(lines 665 682) no Hoare annotation was computed. [2023-11-26 11:53:15,757 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 661 685) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-26 11:53:15,757 INFO L895 garLoopResultBuilder]: At program point L680(line 680) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (and .cse1 .cse0)))) [2023-11-26 11:53:15,757 INFO L899 garLoopResultBuilder]: For program point L680-1(lines 661 685) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point L829(lines 829 833) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point L829-2(lines 829 833) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 661 685) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L895 garLoopResultBuilder]: At program point L675(line 675) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point L894-1(lines 890 901) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 890 901) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (< |old(~methaneLevelCritical~0)| 1)))) [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 890 901) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point L870(lines 870 874) no Hoare annotation was computed. [2023-11-26 11:53:15,758 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 614 620) no Hoare annotation was computed. [2023-11-26 11:53:15,759 INFO L899 garLoopResultBuilder]: For program point L870-2(lines 866 877) no Hoare annotation was computed. [2023-11-26 11:53:15,759 INFO L895 garLoopResultBuilder]: At program point L701(line 701) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1) .cse1 .cse2) (or .cse0 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-26 11:53:15,759 INFO L895 garLoopResultBuilder]: At program point L697(line 697) the Hoare annotation is: (let ((.cse5 (< 1 |old(~waterLevel~0)|)) (.cse6 (<= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2) (or .cse3 .cse4) (or .cse5 .cse6 .cse4 .cse0) (or .cse5 .cse6 .cse0 .cse2) (or .cse3 .cse2) (or .cse1 .cse4 .cse0))) [2023-11-26 11:53:15,759 INFO L895 garLoopResultBuilder]: At program point L693(line 693) the Hoare annotation is: (let ((.cse2 (< 1 |old(~waterLevel~0)|)) (.cse3 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse1 .cse4) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse5) (or .cse6 .cse1 .cse4) (or .cse6 .cse4 .cse5))) [2023-11-26 11:53:15,759 INFO L899 garLoopResultBuilder]: For program point L693-1(line 693) no Hoare annotation was computed. [2023-11-26 11:53:15,759 INFO L899 garLoopResultBuilder]: For program point L111(lines 111 117) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L107(lines 107 120) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L107-1(lines 99 123) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L895 garLoopResultBuilder]: At program point L706(line 706) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= ~pumpRunning~0 0) .cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not .cse6)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse4 (not .cse2))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse2 .cse5) (or .cse3 .cse5 .cse4)))) [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L706-1(lines 687 711) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 606 625) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-26 11:53:15,760 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 603 626) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse5) (or .cse3 .cse4 .cse0)))) [2023-11-26 11:53:15,760 INFO L899 garLoopResultBuilder]: For program point L695(lines 695 703) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point L691(lines 691 708) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 603 626) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L895 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse7 .cse8)) (.cse4 (< 1 |old(~waterLevel~0)|)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse4 .cse5 .cse2 .cse3) (or .cse0 .cse1 .cse6) (or .cse4 .cse5 .cse3 .cse6) (or .cse7 .cse3 .cse6) (or .cse0 .cse2 .cse8) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 (<= 2 ~waterLevel~0) .cse2 .cse3)))) [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point L105-1(line 105) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 493 522) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 511) no Hoare annotation was computed. [2023-11-26 11:53:15,761 INFO L902 garLoopResultBuilder]: At program point L507-1(lines 507 511) the Hoare annotation is: true [2023-11-26 11:53:15,762 INFO L902 garLoopResultBuilder]: At program point L503-2(lines 503 517) the Hoare annotation is: true [2023-11-26 11:53:15,762 INFO L902 garLoopResultBuilder]: At program point L499(line 499) the Hoare annotation is: true [2023-11-26 11:53:15,762 INFO L899 garLoopResultBuilder]: For program point L499-1(line 499) no Hoare annotation was computed. [2023-11-26 11:53:15,762 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 493 522) the Hoare annotation is: true [2023-11-26 11:53:15,762 INFO L899 garLoopResultBuilder]: For program point L518(lines 493 522) no Hoare annotation was computed. [2023-11-26 11:53:15,762 INFO L899 garLoopResultBuilder]: For program point L514(line 514) no Hoare annotation was computed. [2023-11-26 11:53:15,762 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 902 910) the Hoare annotation is: true [2023-11-26 11:53:15,762 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 902 910) no Hoare annotation was computed. [2023-11-26 11:53:15,762 INFO L895 garLoopResultBuilder]: At program point L989(line 989) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2023-11-26 11:53:15,768 INFO L895 garLoopResultBuilder]: At program point L845(line 845) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-11-26 11:53:15,768 INFO L895 garLoopResultBuilder]: At program point L1027(lines 976 1028) the Hoare annotation is: false [2023-11-26 11:53:15,768 INFO L899 garLoopResultBuilder]: For program point L1015(lines 1015 1021) no Hoare annotation was computed. [2023-11-26 11:53:15,768 INFO L895 garLoopResultBuilder]: At program point L1015-2(lines 1007 1022) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse1 .cse2 .cse3 .cse5) (and .cse4 .cse2 .cse3 .cse5))) [2023-11-26 11:53:15,769 INFO L899 garLoopResultBuilder]: For program point L978(lines 977 1026) no Hoare annotation was computed. [2023-11-26 11:53:15,769 INFO L899 garLoopResultBuilder]: For program point L1007(lines 1007 1022) no Hoare annotation was computed. [2023-11-26 11:53:15,769 INFO L895 garLoopResultBuilder]: At program point L999(line 999) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2023-11-26 11:53:15,769 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 585) no Hoare annotation was computed. [2023-11-26 11:53:15,769 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:53:15,769 INFO L895 garLoopResultBuilder]: At program point L1024(lines 977 1026) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2023-11-26 11:53:15,770 INFO L899 garLoopResultBuilder]: For program point L578-2(lines 578 585) no Hoare annotation was computed. [2023-11-26 11:53:15,771 INFO L899 garLoopResultBuilder]: For program point L987(lines 987 993) no Hoare annotation was computed. [2023-11-26 11:53:15,771 INFO L899 garLoopResultBuilder]: For program point L987-1(lines 987 993) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 849) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L843-1(lines 843 849) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L1030(lines 967 1034) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L997-1(lines 997 1003) no Hoare annotation was computed. [2023-11-26 11:53:15,772 INFO L899 garLoopResultBuilder]: For program point L727(lines 727 733) no Hoare annotation was computed. [2023-11-26 11:53:15,773 INFO L895 garLoopResultBuilder]: At program point L725(line 725) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse2 (not .cse1)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse2) .cse0 .cse1 (< ~methaneLevelCritical~0 1))))) [2023-11-26 11:53:15,773 INFO L899 garLoopResultBuilder]: For program point L727-2(lines 720 736) no Hoare annotation was computed. [2023-11-26 11:53:15,773 INFO L899 garLoopResultBuilder]: For program point L725-1(line 725) no Hoare annotation was computed. [2023-11-26 11:53:15,773 INFO L899 garLoopResultBuilder]: For program point L810(lines 810 814) no Hoare annotation was computed. [2023-11-26 11:53:15,773 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 635 659) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-26 11:53:15,774 INFO L895 garLoopResultBuilder]: At program point L649(line 649) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse1 (and .cse2 .cse3 (<= 2 ~waterLevel~0) .cse0)) (.cse5 (= 0 ~systemActive~0))) (and (or (not .cse0) .cse1 (and .cse2 .cse3 .cse4) .cse5 (< ~methaneLevelCritical~0 1)) (or (and .cse2 .cse3 .cse4 .cse0) (not (= ~methaneLevelCritical~0 0)) .cse1 .cse5)))) [2023-11-26 11:53:15,774 INFO L899 garLoopResultBuilder]: For program point L810-2(lines 810 814) no Hoare annotation was computed. [2023-11-26 11:53:15,774 INFO L899 garLoopResultBuilder]: For program point L643(lines 643 651) no Hoare annotation was computed. [2023-11-26 11:53:15,774 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 943 956) no Hoare annotation was computed. [2023-11-26 11:53:15,774 INFO L899 garLoopResultBuilder]: For program point L639(lines 639 656) no Hoare annotation was computed. [2023-11-26 11:53:15,774 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 635 659) no Hoare annotation was computed. [2023-11-26 11:53:15,775 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2023-11-26 11:53:15,775 INFO L895 garLoopResultBuilder]: At program point L654(line 654) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-26 11:53:15,775 INFO L899 garLoopResultBuilder]: For program point L654-1(lines 635 659) no Hoare annotation was computed. [2023-11-26 11:53:15,776 INFO L899 garLoopResultBuilder]: For program point L882-1(lines 878 889) no Hoare annotation was computed. [2023-11-26 11:53:15,776 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 878 889) no Hoare annotation was computed. [2023-11-26 11:53:15,776 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 878 889) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1))) [2023-11-26 11:53:15,776 INFO L902 garLoopResultBuilder]: At program point L750(line 750) the Hoare annotation is: true [2023-11-26 11:53:15,777 INFO L899 garLoopResultBuilder]: For program point L750-1(line 750) no Hoare annotation was computed. [2023-11-26 11:53:15,777 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 745 755) no Hoare annotation was computed. [2023-11-26 11:53:15,777 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 745 755) the Hoare annotation is: true [2023-11-26 11:53:15,780 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:15,782 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:53:15,798 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:53:15 BoogieIcfgContainer [2023-11-26 11:53:15,798 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:53:15,799 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:53:15,799 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:53:15,799 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:53:15,800 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:05" (3/4) ... [2023-11-26 11:53:15,802 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:53:15,806 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:53:15,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:53:15,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:53:15,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:53:15,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:53:15,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-26 11:53:15,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:53:15,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:53:15,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:53:15,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-26 11:53:15,825 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 35 nodes and edges [2023-11-26 11:53:15,826 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:53:15,827 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:53:15,827 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:53:15,828 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:53:15,988 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:53:15,989 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:53:15,989 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:53:15,990 INFO L158 Benchmark]: Toolchain (without parser) took 11821.84ms. Allocated memory was 144.7MB in the beginning and 237.0MB in the end (delta: 92.3MB). Free memory was 99.9MB in the beginning and 126.5MB in the end (delta: -26.7MB). Peak memory consumption was 67.4MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,990 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 144.7MB. Free memory is still 119.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:53:15,991 INFO L158 Benchmark]: CACSL2BoogieTranslator took 559.00ms. Allocated memory is still 144.7MB. Free memory was 99.9MB in the beginning and 79.7MB in the end (delta: 20.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,991 INFO L158 Benchmark]: Boogie Procedure Inliner took 80.13ms. Allocated memory is still 144.7MB. Free memory was 79.7MB in the beginning and 77.2MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,992 INFO L158 Benchmark]: Boogie Preprocessor took 119.62ms. Allocated memory is still 144.7MB. Free memory was 77.2MB in the beginning and 115.9MB in the end (delta: -38.7MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,992 INFO L158 Benchmark]: RCFGBuilder took 628.77ms. Allocated memory is still 144.7MB. Free memory was 115.9MB in the beginning and 92.4MB in the end (delta: 23.5MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,993 INFO L158 Benchmark]: TraceAbstraction took 10236.38ms. Allocated memory was 144.7MB in the beginning and 237.0MB in the end (delta: 92.3MB). Free memory was 91.7MB in the beginning and 134.9MB in the end (delta: -43.2MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,994 INFO L158 Benchmark]: Witness Printer took 190.75ms. Allocated memory is still 237.0MB. Free memory was 134.9MB in the beginning and 126.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 11:53:15,997 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 144.7MB. Free memory is still 119.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 559.00ms. Allocated memory is still 144.7MB. Free memory was 99.9MB in the beginning and 79.7MB in the end (delta: 20.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 80.13ms. Allocated memory is still 144.7MB. Free memory was 79.7MB in the beginning and 77.2MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 119.62ms. Allocated memory is still 144.7MB. Free memory was 77.2MB in the beginning and 115.9MB in the end (delta: -38.7MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. * RCFGBuilder took 628.77ms. Allocated memory is still 144.7MB. Free memory was 115.9MB in the beginning and 92.4MB in the end (delta: 23.5MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 10236.38ms. Allocated memory was 144.7MB in the beginning and 237.0MB in the end (delta: 92.3MB). Free memory was 91.7MB in the beginning and 134.9MB in the end (delta: -43.2MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. * Witness Printer took 190.75ms. Allocated memory is still 237.0MB. Free memory was 134.9MB in the beginning and 126.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] - GenericResultAtLocation [Line: 490]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] - GenericResultAtLocation [Line: 591]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] - GenericResultAtLocation [Line: 862]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] - GenericResultAtLocation [Line: 966]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.1s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1284 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1232 mSDsluCounter, 2883 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1954 mSDsCounter, 432 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1956 IncrementalHoareTripleChecker+Invalid, 2388 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 432 mSolverCounterUnsat, 929 mSDtfsCounter, 1956 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 290 GetRequests, 207 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 307 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=855occurred in iteration=9, InterpolantAutomatonStates: 79, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 53 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 1437 PreInvPairs, 1679 NumberOfFragments, 1024 HoareAnnotationTreeSize, 1437 FomulaSimplifications, 2571 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 31 FomulaSimplificationsInter, 8644 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 522 NumberOfCodeBlocks, 522 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 511 ConstructedInterpolants, 0 QuantifiedInterpolants, 821 SizeOfPredicates, 3 NumberOfNonLiveVariables, 351 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 88/90 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (tmp == 1)) && (splverifierCounter == 0))) || ((((methaneLevelCritical == 0) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-26 11:53:16,043 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5557b5ee-e98b-498b-a8be-bb38cbf40d65/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE