./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 03:28:18,404 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 03:28:18,469 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 03:28:18,473 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 03:28:18,474 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 03:28:18,497 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 03:28:18,498 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 03:28:18,498 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 03:28:18,499 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 03:28:18,500 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 03:28:18,500 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 03:28:18,501 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 03:28:18,501 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 03:28:18,502 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 03:28:18,502 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 03:28:18,503 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 03:28:18,503 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 03:28:18,504 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 03:28:18,504 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 03:28:18,505 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 03:28:18,505 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 03:28:18,506 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 03:28:18,507 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 03:28:18,507 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 03:28:18,508 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 03:28:18,508 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 03:28:18,509 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 03:28:18,509 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 03:28:18,510 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 03:28:18,510 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 03:28:18,510 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 03:28:18,511 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:28:18,511 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 03:28:18,511 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 03:28:18,511 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 03:28:18,512 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 03:28:18,512 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 03:28:18,512 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 03:28:18,512 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 03:28:18,512 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 03:28:18,513 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 03:28:18,513 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 03:28:18,513 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2023-11-29 03:28:18,732 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 03:28:18,754 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 03:28:18,756 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 03:28:18,757 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 03:28:18,757 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 03:28:18,758 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2023-11-29 03:28:21,578 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 03:28:21,795 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 03:28:21,795 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2023-11-29 03:28:21,810 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/data/8965c7ebf/fe7620db615b43d0a2ff4f2b14f0b013/FLAGa51f32104 [2023-11-29 03:28:21,824 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/data/8965c7ebf/fe7620db615b43d0a2ff4f2b14f0b013 [2023-11-29 03:28:21,827 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 03:28:21,828 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 03:28:21,830 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 03:28:21,830 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 03:28:21,836 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 03:28:21,837 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:28:21" (1/1) ... [2023-11-29 03:28:21,838 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@a4d40fa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:21, skipping insertion in model container [2023-11-29 03:28:21,838 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:28:21" (1/1) ... [2023-11-29 03:28:21,890 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 03:28:22,077 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2023-11-29 03:28:22,143 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:28:22,154 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 03:28:22,165 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 03:28:22,166 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] [2023-11-29 03:28:22,166 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [254] [2023-11-29 03:28:22,167 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [295] [2023-11-29 03:28:22,167 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] [2023-11-29 03:28:22,167 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [372] [2023-11-29 03:28:22,167 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [567] [2023-11-29 03:28:22,167 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [602] [2023-11-29 03:28:22,181 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2023-11-29 03:28:22,220 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:28:22,238 INFO L206 MainTranslator]: Completed translation [2023-11-29 03:28:22,238 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22 WrapperNode [2023-11-29 03:28:22,238 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 03:28:22,239 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 03:28:22,239 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 03:28:22,239 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 03:28:22,247 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,260 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,287 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 197 [2023-11-29 03:28:22,287 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 03:28:22,288 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 03:28:22,288 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 03:28:22,288 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 03:28:22,297 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,298 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,300 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,315 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 03:28:22,315 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,315 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,321 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,326 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,327 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,329 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,332 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 03:28:22,333 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 03:28:22,333 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 03:28:22,333 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 03:28:22,334 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (1/1) ... [2023-11-29 03:28:22,340 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:28:22,350 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:22,360 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 03:28:22,362 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 03:28:22,388 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 03:28:22,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 03:28:22,388 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 03:28:22,389 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 03:28:22,389 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 03:28:22,389 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 03:28:22,389 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 03:28:22,389 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 03:28:22,389 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 03:28:22,389 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:28:22,389 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:28:22,390 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 03:28:22,390 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 03:28:22,390 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 03:28:22,390 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 03:28:22,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 03:28:22,390 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 03:28:22,390 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 03:28:22,391 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 03:28:22,391 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 03:28:22,462 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 03:28:22,464 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 03:28:22,664 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 03:28:22,724 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 03:28:22,725 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 03:28:22,725 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:28:22 BoogieIcfgContainer [2023-11-29 03:28:22,725 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 03:28:22,728 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 03:28:22,729 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 03:28:22,732 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 03:28:22,732 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 03:28:21" (1/3) ... [2023-11-29 03:28:22,733 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@613e007d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:28:22, skipping insertion in model container [2023-11-29 03:28:22,733 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:28:22" (2/3) ... [2023-11-29 03:28:22,733 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@613e007d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:28:22, skipping insertion in model container [2023-11-29 03:28:22,733 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:28:22" (3/3) ... [2023-11-29 03:28:22,735 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2023-11-29 03:28:22,751 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 03:28:22,751 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 03:28:22,791 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 03:28:22,796 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2cbf2e03, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 03:28:22,796 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 03:28:22,800 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 50 states have (on average 1.54) internal successors, (77), 59 states have internal predecessors, (77), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-29 03:28:22,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 03:28:22,809 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:22,809 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:22,810 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:22,815 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:22,815 INFO L85 PathProgramCache]: Analyzing trace with hash 719227840, now seen corresponding path program 1 times [2023-11-29 03:28:22,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:22,839 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1961456505] [2023-11-29 03:28:22,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:22,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:22,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:28:23,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,033 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:23,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:23,033 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1961456505] [2023-11-29 03:28:23,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1961456505] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:23,034 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:28:23,034 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 03:28:23,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773657392] [2023-11-29 03:28:23,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:23,041 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 03:28:23,042 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:23,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 03:28:23,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:28:23,074 INFO L87 Difference]: Start difference. First operand has 74 states, 50 states have (on average 1.54) internal successors, (77), 59 states have internal predecessors, (77), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:23,130 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2023-11-29 03:28:23,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 03:28:23,133 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 03:28:23,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:23,142 INFO L225 Difference]: With dead ends: 146 [2023-11-29 03:28:23,142 INFO L226 Difference]: Without dead ends: 69 [2023-11-29 03:28:23,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:28:23,150 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:23,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 86 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:23,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-29 03:28:23,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-29 03:28:23,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 47 states have (on average 1.425531914893617) internal successors, (67), 55 states have internal predecessors, (67), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 03:28:23,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 94 transitions. [2023-11-29 03:28:23,195 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 94 transitions. Word has length 17 [2023-11-29 03:28:23,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:23,195 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 94 transitions. [2023-11-29 03:28:23,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,196 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 94 transitions. [2023-11-29 03:28:23,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-29 03:28:23,198 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:23,199 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:23,199 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 03:28:23,199 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:23,200 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:23,200 INFO L85 PathProgramCache]: Analyzing trace with hash 1157705312, now seen corresponding path program 1 times [2023-11-29 03:28:23,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:23,201 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [605693941] [2023-11-29 03:28:23,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:23,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:23,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 03:28:23,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:23,303 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:23,303 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [605693941] [2023-11-29 03:28:23,303 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [605693941] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:23,303 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:28:23,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:28:23,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296020118] [2023-11-29 03:28:23,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:23,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:28:23,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:23,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:28:23,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,307 INFO L87 Difference]: Start difference. First operand 69 states and 94 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:23,343 INFO L93 Difference]: Finished difference Result 108 states and 146 transitions. [2023-11-29 03:28:23,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:28:23,344 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-29 03:28:23,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:23,346 INFO L225 Difference]: With dead ends: 108 [2023-11-29 03:28:23,346 INFO L226 Difference]: Without dead ends: 61 [2023-11-29 03:28:23,347 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,349 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 14 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:23,349 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 127 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:23,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-29 03:28:23,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-29 03:28:23,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 50 states have internal predecessors, (61), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-29 03:28:23,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 83 transitions. [2023-11-29 03:28:23,361 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 83 transitions. Word has length 18 [2023-11-29 03:28:23,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:23,362 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 83 transitions. [2023-11-29 03:28:23,362 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,362 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 83 transitions. [2023-11-29 03:28:23,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 03:28:23,364 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:23,364 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:23,364 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 03:28:23,365 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:23,365 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:23,365 INFO L85 PathProgramCache]: Analyzing trace with hash -1235089648, now seen corresponding path program 1 times [2023-11-29 03:28:23,366 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:23,366 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [166001555] [2023-11-29 03:28:23,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:23,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:23,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:28:23,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:23,453 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:23,454 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [166001555] [2023-11-29 03:28:23,454 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [166001555] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:23,454 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:28:23,454 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:28:23,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536098187] [2023-11-29 03:28:23,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:23,455 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:28:23,455 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:23,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:28:23,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,456 INFO L87 Difference]: Start difference. First operand 61 states and 83 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:23,511 INFO L93 Difference]: Finished difference Result 179 states and 246 transitions. [2023-11-29 03:28:23,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:28:23,511 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-29 03:28:23,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:23,514 INFO L225 Difference]: With dead ends: 179 [2023-11-29 03:28:23,514 INFO L226 Difference]: Without dead ends: 120 [2023-11-29 03:28:23,515 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,516 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 70 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:23,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 153 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:23,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-29 03:28:23,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2023-11-29 03:28:23,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 80 states have (on average 1.4625) internal successors, (117), 95 states have internal predecessors, (117), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2023-11-29 03:28:23,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 161 transitions. [2023-11-29 03:28:23,541 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 161 transitions. Word has length 21 [2023-11-29 03:28:23,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:23,541 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 161 transitions. [2023-11-29 03:28:23,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,542 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 161 transitions. [2023-11-29 03:28:23,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-29 03:28:23,543 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:23,544 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:23,544 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 03:28:23,544 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:23,545 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:23,545 INFO L85 PathProgramCache]: Analyzing trace with hash -1367970363, now seen corresponding path program 1 times [2023-11-29 03:28:23,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:23,545 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498955220] [2023-11-29 03:28:23,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:23,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:23,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 03:28:23,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:23,629 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:23,629 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498955220] [2023-11-29 03:28:23,630 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498955220] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:23,630 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:28:23,630 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:28:23,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1267121905] [2023-11-29 03:28:23,631 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:23,631 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:28:23,631 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:23,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:28:23,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,632 INFO L87 Difference]: Start difference. First operand 117 states and 161 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:23,689 INFO L93 Difference]: Finished difference Result 232 states and 324 transitions. [2023-11-29 03:28:23,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:28:23,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-29 03:28:23,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:23,694 INFO L225 Difference]: With dead ends: 232 [2023-11-29 03:28:23,694 INFO L226 Difference]: Without dead ends: 230 [2023-11-29 03:28:23,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:28:23,696 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 59 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:23,697 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 139 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:23,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2023-11-29 03:28:23,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2023-11-29 03:28:23,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 157 states have (on average 1.4585987261146496) internal successors, (229), 186 states have internal predecessors, (229), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (48), 30 states have call predecessors, (48), 44 states have call successors, (48) [2023-11-29 03:28:23,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 321 transitions. [2023-11-29 03:28:23,736 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 321 transitions. Word has length 24 [2023-11-29 03:28:23,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:23,736 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 321 transitions. [2023-11-29 03:28:23,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:28:23,737 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 321 transitions. [2023-11-29 03:28:23,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 03:28:23,740 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:23,740 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:23,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 03:28:23,741 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:23,741 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:23,741 INFO L85 PathProgramCache]: Analyzing trace with hash -1773129581, now seen corresponding path program 1 times [2023-11-29 03:28:23,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:23,742 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1541103745] [2023-11-29 03:28:23,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:23,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:23,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-29 03:28:23,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:23,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 03:28:23,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:23,936 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 03:28:23,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:23,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1541103745] [2023-11-29 03:28:23,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1541103745] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:23,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1072584340] [2023-11-29 03:28:23,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:23,937 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:23,937 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:23,944 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:23,945 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 03:28:24,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,037 INFO L262 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:28:24,043 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:24,097 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 03:28:24,098 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:28:24,098 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1072584340] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:24,098 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:28:24,098 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 10 [2023-11-29 03:28:24,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682951717] [2023-11-29 03:28:24,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:24,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:28:24,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:24,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:28:24,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2023-11-29 03:28:24,100 INFO L87 Difference]: Start difference. First operand 230 states and 321 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:28:24,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:24,190 INFO L93 Difference]: Finished difference Result 570 states and 816 transitions. [2023-11-29 03:28:24,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:28:24,190 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 44 [2023-11-29 03:28:24,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:24,195 INFO L225 Difference]: With dead ends: 570 [2023-11-29 03:28:24,195 INFO L226 Difference]: Without dead ends: 342 [2023-11-29 03:28:24,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2023-11-29 03:28:24,199 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 54 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:24,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 193 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:24,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2023-11-29 03:28:24,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 321. [2023-11-29 03:28:24,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 223 states have (on average 1.3946188340807175) internal successors, (311), 250 states have internal predecessors, (311), 53 states have call successors, (53), 45 states have call predecessors, (53), 44 states have return successors, (75), 44 states have call predecessors, (75), 53 states have call successors, (75) [2023-11-29 03:28:24,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 439 transitions. [2023-11-29 03:28:24,236 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 439 transitions. Word has length 44 [2023-11-29 03:28:24,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:24,237 INFO L495 AbstractCegarLoop]: Abstraction has 321 states and 439 transitions. [2023-11-29 03:28:24,237 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:28:24,237 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 439 transitions. [2023-11-29 03:28:24,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-29 03:28:24,241 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:24,241 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:24,252 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 03:28:24,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:24,447 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:24,447 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:24,448 INFO L85 PathProgramCache]: Analyzing trace with hash -2039319740, now seen corresponding path program 1 times [2023-11-29 03:28:24,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:24,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2076326696] [2023-11-29 03:28:24,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:24,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:24,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-29 03:28:24,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:24,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:24,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-29 03:28:24,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:24,545 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 03:28:24,545 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:24,545 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2076326696] [2023-11-29 03:28:24,545 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2076326696] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:24,546 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:28:24,546 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 03:28:24,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1149938762] [2023-11-29 03:28:24,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:24,546 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 03:28:24,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:24,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 03:28:24,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:28:24,548 INFO L87 Difference]: Start difference. First operand 321 states and 439 transitions. Second operand has 7 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:28:24,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:24,899 INFO L93 Difference]: Finished difference Result 599 states and 841 transitions. [2023-11-29 03:28:24,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 03:28:24,899 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) Word has length 58 [2023-11-29 03:28:24,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:24,902 INFO L225 Difference]: With dead ends: 599 [2023-11-29 03:28:24,902 INFO L226 Difference]: Without dead ends: 238 [2023-11-29 03:28:24,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2023-11-29 03:28:24,904 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 141 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:24,905 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 290 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 03:28:24,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2023-11-29 03:28:24,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 187. [2023-11-29 03:28:24,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 134 states have (on average 1.3208955223880596) internal successors, (177), 145 states have internal predecessors, (177), 26 states have call successors, (26), 21 states have call predecessors, (26), 26 states have return successors, (44), 27 states have call predecessors, (44), 26 states have call successors, (44) [2023-11-29 03:28:24,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 247 transitions. [2023-11-29 03:28:24,928 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 247 transitions. Word has length 58 [2023-11-29 03:28:24,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:24,928 INFO L495 AbstractCegarLoop]: Abstraction has 187 states and 247 transitions. [2023-11-29 03:28:24,929 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:28:24,929 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 247 transitions. [2023-11-29 03:28:24,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-29 03:28:24,931 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:24,931 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:24,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 03:28:24,931 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:24,932 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:24,932 INFO L85 PathProgramCache]: Analyzing trace with hash 981830418, now seen corresponding path program 1 times [2023-11-29 03:28:24,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:24,932 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313307892] [2023-11-29 03:28:24,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:24,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:24,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:28:25,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:25,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:25,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-29 03:28:25,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-29 03:28:25,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,057 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-29 03:28:25,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:25,058 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313307892] [2023-11-29 03:28:25,058 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313307892] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:25,058 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2052095977] [2023-11-29 03:28:25,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:25,058 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:25,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:25,060 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:25,063 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 03:28:25,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,146 INFO L262 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:28:25,150 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:25,182 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-29 03:28:25,182 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:28:25,183 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2052095977] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:25,183 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:28:25,183 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 8 [2023-11-29 03:28:25,183 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1461988201] [2023-11-29 03:28:25,183 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:25,184 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:28:25,184 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:25,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:28:25,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:28:25,185 INFO L87 Difference]: Start difference. First operand 187 states and 247 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:28:25,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:25,240 INFO L93 Difference]: Finished difference Result 386 states and 529 transitions. [2023-11-29 03:28:25,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:28:25,241 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 65 [2023-11-29 03:28:25,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:25,243 INFO L225 Difference]: With dead ends: 386 [2023-11-29 03:28:25,243 INFO L226 Difference]: Without dead ends: 201 [2023-11-29 03:28:25,244 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 74 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2023-11-29 03:28:25,245 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 6 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 196 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:25,245 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 196 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:25,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2023-11-29 03:28:25,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 191. [2023-11-29 03:28:25,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 138 states have (on average 1.3115942028985508) internal successors, (181), 149 states have internal predecessors, (181), 26 states have call successors, (26), 21 states have call predecessors, (26), 26 states have return successors, (44), 27 states have call predecessors, (44), 26 states have call successors, (44) [2023-11-29 03:28:25,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 251 transitions. [2023-11-29 03:28:25,264 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 251 transitions. Word has length 65 [2023-11-29 03:28:25,265 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:25,265 INFO L495 AbstractCegarLoop]: Abstraction has 191 states and 251 transitions. [2023-11-29 03:28:25,265 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:28:25,265 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 251 transitions. [2023-11-29 03:28:25,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-29 03:28:25,267 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:25,267 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:25,273 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 03:28:25,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-11-29 03:28:25,472 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:25,472 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:25,472 INFO L85 PathProgramCache]: Analyzing trace with hash -622036202, now seen corresponding path program 1 times [2023-11-29 03:28:25,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:25,473 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1291633727] [2023-11-29 03:28:25,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:25,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:25,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:28:25,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:25,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:25,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-29 03:28:25,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-29 03:28:25,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,641 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 03:28:25,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:25,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1291633727] [2023-11-29 03:28:25,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1291633727] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:25,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [352884305] [2023-11-29 03:28:25,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:25,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:25,642 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:25,644 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:25,648 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-29 03:28:25,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:25,737 INFO L262 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:28:25,740 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:25,864 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:25,864 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:28:25,864 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [352884305] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:25,864 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:28:25,865 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [8] total 11 [2023-11-29 03:28:25,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [221558834] [2023-11-29 03:28:25,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:25,865 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 03:28:25,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:25,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 03:28:25,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2023-11-29 03:28:25,866 INFO L87 Difference]: Start difference. First operand 191 states and 251 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 6 states have internal predecessors, (54), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 03:28:26,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:26,162 INFO L93 Difference]: Finished difference Result 605 states and 869 transitions. [2023-11-29 03:28:26,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 03:28:26,163 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 6 states have internal predecessors, (54), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2023-11-29 03:28:26,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:26,166 INFO L225 Difference]: With dead ends: 605 [2023-11-29 03:28:26,166 INFO L226 Difference]: Without dead ends: 416 [2023-11-29 03:28:26,168 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=101, Unknown=0, NotChecked=0, Total=132 [2023-11-29 03:28:26,169 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 167 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 267 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:26,169 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 176 Invalid, 267 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:28:26,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2023-11-29 03:28:26,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 412. [2023-11-29 03:28:26,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 296 states have (on average 1.2905405405405406) internal successors, (382), 315 states have internal predecessors, (382), 61 states have call successors, (61), 56 states have call predecessors, (61), 54 states have return successors, (119), 56 states have call predecessors, (119), 61 states have call successors, (119) [2023-11-29 03:28:26,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 562 transitions. [2023-11-29 03:28:26,216 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 562 transitions. Word has length 65 [2023-11-29 03:28:26,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:26,217 INFO L495 AbstractCegarLoop]: Abstraction has 412 states and 562 transitions. [2023-11-29 03:28:26,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 6 states have internal predecessors, (54), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 03:28:26,217 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 562 transitions. [2023-11-29 03:28:26,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-29 03:28:26,219 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:26,219 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:26,225 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-11-29 03:28:26,420 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:26,420 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:26,420 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:26,421 INFO L85 PathProgramCache]: Analyzing trace with hash -1431509840, now seen corresponding path program 1 times [2023-11-29 03:28:26,421 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:26,421 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1594956226] [2023-11-29 03:28:26,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:26,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:26,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:28:26,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:28:26,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:26,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:26,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-29 03:28:26,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 03:28:26,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,551 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 10 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-29 03:28:26,551 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:26,551 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1594956226] [2023-11-29 03:28:26,552 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1594956226] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:26,552 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [35254538] [2023-11-29 03:28:26,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:26,552 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:26,552 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:26,553 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:26,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-29 03:28:26,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:26,641 INFO L262 TraceCheckSpWp]: Trace formula consists of 285 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:28:26,644 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:26,678 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:28:26,678 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:28:26,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [35254538] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:26,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:28:26,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-29 03:28:26,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1082816971] [2023-11-29 03:28:26,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:26,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:28:26,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:26,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:28:26,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:28:26,681 INFO L87 Difference]: Start difference. First operand 412 states and 562 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 03:28:26,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:26,742 INFO L93 Difference]: Finished difference Result 773 states and 1064 transitions. [2023-11-29 03:28:26,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:28:26,743 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 69 [2023-11-29 03:28:26,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:26,746 INFO L225 Difference]: With dead ends: 773 [2023-11-29 03:28:26,746 INFO L226 Difference]: Without dead ends: 363 [2023-11-29 03:28:26,748 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:28:26,749 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 37 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:26,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 143 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:28:26,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 363 states. [2023-11-29 03:28:26,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 363 to 363. [2023-11-29 03:28:26,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 363 states, 259 states have (on average 1.2548262548262548) internal successors, (325), 276 states have internal predecessors, (325), 55 states have call successors, (55), 50 states have call predecessors, (55), 48 states have return successors, (84), 52 states have call predecessors, (84), 55 states have call successors, (84) [2023-11-29 03:28:26,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 464 transitions. [2023-11-29 03:28:26,799 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 464 transitions. Word has length 69 [2023-11-29 03:28:26,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:26,800 INFO L495 AbstractCegarLoop]: Abstraction has 363 states and 464 transitions. [2023-11-29 03:28:26,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 03:28:26,800 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 464 transitions. [2023-11-29 03:28:26,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2023-11-29 03:28:26,802 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:26,802 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:26,807 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-29 03:28:27,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:27,004 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:27,004 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:27,004 INFO L85 PathProgramCache]: Analyzing trace with hash 1217640220, now seen corresponding path program 1 times [2023-11-29 03:28:27,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:27,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1442769702] [2023-11-29 03:28:27,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:27,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:27,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:28:27,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:28:27,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:27,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:27,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-29 03:28:27,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-29 03:28:27,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:28:27,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 03:28:27,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,177 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 03:28:27,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:27,177 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1442769702] [2023-11-29 03:28:27,177 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1442769702] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:27,177 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1078348823] [2023-11-29 03:28:27,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:27,178 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:27,178 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:27,179 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:27,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-29 03:28:27,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:27,264 INFO L262 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-29 03:28:27,267 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:27,399 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-29 03:28:27,399 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 03:28:27,521 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-29 03:28:27,521 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1078348823] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:27,522 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-29 03:28:27,522 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2023-11-29 03:28:27,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738662861] [2023-11-29 03:28:27,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:27,522 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 03:28:27,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:27,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 03:28:27,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-29 03:28:27,524 INFO L87 Difference]: Start difference. First operand 363 states and 464 transitions. Second operand has 6 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 03:28:27,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:27,678 INFO L93 Difference]: Finished difference Result 1039 states and 1361 transitions. [2023-11-29 03:28:27,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 03:28:27,679 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 74 [2023-11-29 03:28:27,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:27,684 INFO L225 Difference]: With dead ends: 1039 [2023-11-29 03:28:27,684 INFO L226 Difference]: Without dead ends: 678 [2023-11-29 03:28:27,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 156 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2023-11-29 03:28:27,687 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 45 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:27,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 295 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:28:27,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2023-11-29 03:28:27,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 611. [2023-11-29 03:28:27,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 611 states, 432 states have (on average 1.2152777777777777) internal successors, (525), 463 states have internal predecessors, (525), 93 states have call successors, (93), 85 states have call predecessors, (93), 85 states have return successors, (144), 88 states have call predecessors, (144), 93 states have call successors, (144) [2023-11-29 03:28:27,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 611 states to 611 states and 762 transitions. [2023-11-29 03:28:27,761 INFO L78 Accepts]: Start accepts. Automaton has 611 states and 762 transitions. Word has length 74 [2023-11-29 03:28:27,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:27,761 INFO L495 AbstractCegarLoop]: Abstraction has 611 states and 762 transitions. [2023-11-29 03:28:27,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 03:28:27,761 INFO L276 IsEmpty]: Start isEmpty. Operand 611 states and 762 transitions. [2023-11-29 03:28:27,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2023-11-29 03:28:27,764 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:28:27,764 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:27,770 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-11-29 03:28:27,964 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 03:28:27,965 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:28:27,965 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:28:27,965 INFO L85 PathProgramCache]: Analyzing trace with hash -84643232, now seen corresponding path program 1 times [2023-11-29 03:28:27,965 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:28:27,965 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338815021] [2023-11-29 03:28:27,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:27,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:28:27,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:28:28,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 03:28:28,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 03:28:28,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:28:28,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:28:28,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-29 03:28:28,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-29 03:28:28,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:28:28,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-29 03:28:28,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,115 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-29 03:28:28,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:28:28,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338815021] [2023-11-29 03:28:28,115 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1338815021] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:28:28,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1736197607] [2023-11-29 03:28:28,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:28:28,115 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:28:28,115 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:28:28,116 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:28:28,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-11-29 03:28:28,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:28:28,199 INFO L262 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:28:28,201 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:28:28,306 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 03:28:28,307 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:28:28,307 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1736197607] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:28:28,307 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:28:28,307 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-29 03:28:28,307 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985571110] [2023-11-29 03:28:28,307 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:28:28,308 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 03:28:28,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:28:28,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 03:28:28,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2023-11-29 03:28:28,309 INFO L87 Difference]: Start difference. First operand 611 states and 762 transitions. Second operand has 6 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-29 03:28:28,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:28:28,462 INFO L93 Difference]: Finished difference Result 1076 states and 1336 transitions. [2023-11-29 03:28:28,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-29 03:28:28,462 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 78 [2023-11-29 03:28:28,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:28:28,463 INFO L225 Difference]: With dead ends: 1076 [2023-11-29 03:28:28,463 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 03:28:28,466 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2023-11-29 03:28:28,467 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 24 mSDsluCounter, 375 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:28:28,467 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 489 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:28:28,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 03:28:28,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 03:28:28,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:28:28,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 03:28:28,469 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 78 [2023-11-29 03:28:28,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:28:28,469 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 03:28:28,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-29 03:28:28,469 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 03:28:28,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 03:28:28,472 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 03:28:28,478 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2023-11-29 03:28:28,672 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-29 03:28:28,675 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 03:28:31,915 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2023-11-29 03:28:31,915 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 469 476) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0))) [2023-11-29 03:28:31,915 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2023-11-29 03:28:31,915 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2023-11-29 03:28:31,915 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (< |old(~methaneLevelCritical~0)| 1)) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~waterLevel~0 2)) (or .cse4 .cse5 .cse6 .cse2 .cse7) (or .cse0 .cse4 .cse6 .cse2 .cse7) (or .cse1 .cse5 .cse2 .cse3 .cse7))) [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2023-11-29 03:28:31,916 INFO L895 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 1 ~systemActive~0)) (.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (and .cse4 .cse9 .cse5)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse9)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or (and .cse4 (= ~methAndRunningLastTime~0 0) .cse5) .cse6 .cse1 .cse2 .cse3) (or .cse7 .cse6 .cse1 .cse8) (or .cse0 .cse1 .cse8 .cse2) (or .cse7 .cse6 .cse1 .cse3) (or .cse7 (not (= 0 ~systemActive~0)))))) [2023-11-29 03:28:31,916 INFO L899 garLoopResultBuilder]: For program point L482-1(line 482) no Hoare annotation was computed. [2023-11-29 03:28:31,917 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~pumpRunning~0 0)) (.cse15 (= 1 ~systemActive~0)) (.cse16 (<= 2 ~waterLevel~0)) (.cse14 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) .cse16 .cse14)) (.cse3 (and .cse13 .cse8 .cse16 .cse15 .cse14)) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse11 (< |old(~pumpRunning~0)| 1)) (.cse12 (and .cse8 .cse15 .cse14)) (.cse9 (< 1 |old(~waterLevel~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse15)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (and .cse13 .cse8 (<= ~waterLevel~0 1) .cse15 .cse14))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7) (or .cse0 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (not (= 0 ~systemActive~0))) (or .cse9 .cse0 .cse2 .cse4 .cse10 .cse6) (or .cse2 .cse4 .cse11 .cse12 .cse6) (or .cse4 .cse5 .cse11 .cse12 .cse6) (or .cse4 .cse7 (and .cse13 .cse14) .cse11 .cse12) (or .cse9 .cse0 .cse2 .cse4 .cse7 .cse10)))) [2023-11-29 03:28:31,917 INFO L899 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2023-11-29 03:28:31,917 INFO L895 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse5 .cse0 .cse1 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-29 03:28:31,917 INFO L895 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and .cse7 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse8 .cse9)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse8)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse6) (or (and .cse7 .cse8 .cse9) .cse1 .cse6 .cse2) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse4) (or .cse5 (not (= 0 ~systemActive~0)))))) [2023-11-29 03:28:31,918 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 378 401) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse10 (and .cse0 .cse2 .cse9)) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (and .cse8 .cse1 .cse2)) (.cse11 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 (and .cse8 .cse2 .cse9) (not (= 0 ~systemActive~0))) (or .cse4 .cse10 .cse11 .cse5) (or .cse4 (< |old(~waterLevel~0)| 2) .cse10 .cse5 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse11)))) [2023-11-29 03:28:31,918 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (< |old(~waterLevel~0)| 2)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse4 (not .cse9))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse1 .cse6) (or .cse1 .cse6 .cse2) (or .cse4 .cse0 .cse1 .cse7 .cse8 .cse3) (or .cse4 .cse0 .cse1 .cse7 .cse8 .cse6) (or .cse4 .cse0 .cse5 .cse1 .cse3) (or .cse1 .cse8 .cse2 .cse3) (or .cse4 (not (= 0 ~systemActive~0)))))) [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L455-1(lines 436 460) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2023-11-29 03:28:31,918 INFO L899 garLoopResultBuilder]: For program point L274-1(lines 266 294) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point L178(lines 153 182) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 182) the Hoare annotation is: true [2023-11-29 03:28:31,919 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2023-11-29 03:28:31,919 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2023-11-29 03:28:31,920 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L556-1(lines 556 562) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L367(lines 306 371) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2023-11-29 03:28:31,920 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 03:28:31,921 INFO L895 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2023-11-29 03:28:31,921 INFO L899 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2023-11-29 03:28:31,922 INFO L895 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-29 03:28:31,922 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-29 03:28:31,922 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 410 434) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-29 03:28:31,922 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse6)) (.cse1 (not .cse5)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse5 .cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse3 (< ~methaneLevelCritical~0 1) .cse4)))) [2023-11-29 03:28:31,922 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 136 149) no Hoare annotation was computed. [2023-11-29 03:28:31,922 INFO L899 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2023-11-29 03:28:31,922 INFO L899 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2023-11-29 03:28:31,922 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-29 03:28:31,923 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse4))) [2023-11-29 03:28:31,926 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:28:31,928 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 03:28:31,940 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 03:28:31 BoogieIcfgContainer [2023-11-29 03:28:31,940 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 03:28:31,941 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 03:28:31,941 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 03:28:31,941 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 03:28:31,942 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:28:22" (3/4) ... [2023-11-29 03:28:31,944 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 03:28:31,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 03:28:31,948 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:28:31,948 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 03:28:31,955 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 03:28:31,956 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 03:28:31,957 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 03:28:31,957 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:28:31,958 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:28:32,057 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 03:28:32,057 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 03:28:32,058 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 03:28:32,058 INFO L158 Benchmark]: Toolchain (without parser) took 10230.04ms. Allocated memory was 146.8MB in the beginning and 211.8MB in the end (delta: 65.0MB). Free memory was 106.1MB in the beginning and 156.5MB in the end (delta: -50.4MB). Peak memory consumption was 16.6MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,059 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 146.8MB. Free memory was 118.6MB in the beginning and 118.4MB in the end (delta: 151.2kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 03:28:32,059 INFO L158 Benchmark]: CACSL2BoogieTranslator took 408.84ms. Allocated memory is still 146.8MB. Free memory was 106.0MB in the beginning and 86.6MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,059 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.19ms. Allocated memory is still 146.8MB. Free memory was 86.6MB in the beginning and 84.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,060 INFO L158 Benchmark]: Boogie Preprocessor took 44.07ms. Allocated memory is still 146.8MB. Free memory was 84.0MB in the beginning and 81.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,060 INFO L158 Benchmark]: RCFGBuilder took 392.91ms. Allocated memory is still 146.8MB. Free memory was 81.9MB in the beginning and 60.5MB in the end (delta: 21.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,060 INFO L158 Benchmark]: TraceAbstraction took 9211.98ms. Allocated memory was 146.8MB in the beginning and 211.8MB in the end (delta: 65.0MB). Free memory was 60.0MB in the beginning and 163.8MB in the end (delta: -103.9MB). Peak memory consumption was 64.7MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,061 INFO L158 Benchmark]: Witness Printer took 116.74ms. Allocated memory is still 211.8MB. Free memory was 163.8MB in the beginning and 156.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 03:28:32,063 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 146.8MB. Free memory was 118.6MB in the beginning and 118.4MB in the end (delta: 151.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 408.84ms. Allocated memory is still 146.8MB. Free memory was 106.0MB in the beginning and 86.6MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.19ms. Allocated memory is still 146.8MB. Free memory was 86.6MB in the beginning and 84.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.07ms. Allocated memory is still 146.8MB. Free memory was 84.0MB in the beginning and 81.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 392.91ms. Allocated memory is still 146.8MB. Free memory was 81.9MB in the beginning and 60.5MB in the end (delta: 21.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 9211.98ms. Allocated memory was 146.8MB in the beginning and 211.8MB in the end (delta: 65.0MB). Free memory was 60.0MB in the beginning and 163.8MB in the end (delta: -103.9MB). Peak memory consumption was 64.7MB. Max. memory is 16.1GB. * Witness Printer took 116.74ms. Allocated memory is still 211.8MB. Free memory was 163.8MB in the beginning and 156.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] - GenericResultAtLocation [Line: 254]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [254] - GenericResultAtLocation [Line: 295]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [295] - GenericResultAtLocation [Line: 304]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] - GenericResultAtLocation [Line: 372]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [372] - GenericResultAtLocation [Line: 567]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [567] - GenericResultAtLocation [Line: 602]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [602] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.1s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 641 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 617 mSDsluCounter, 2287 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1417 mSDsCounter, 136 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 875 IncrementalHoareTripleChecker+Invalid, 1011 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 136 mSolverCounterUnsat, 870 mSDtfsCounter, 875 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 615 GetRequests, 542 SyntacticMatches, 1 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=611occurred in iteration=10, InterpolantAutomatonStates: 53, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 156 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 971 PreInvPairs, 1087 NumberOfFragments, 1578 HoareAnnotationTreeSize, 971 FomulaSimplifications, 267 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 24 FomulaSimplificationsInter, 7274 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 928 NumberOfCodeBlocks, 928 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 984 ConstructedInterpolants, 0 QuantifiedInterpolants, 1871 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1639 ConjunctsInSsa, 37 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 344/374 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-29 03:28:32,078 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37dff88e-c6b3-4cf9-9523-d09beb1b60d2/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE