./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 00:53:30,225 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 00:53:30,293 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 00:53:30,298 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 00:53:30,299 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 00:53:30,323 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 00:53:30,324 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 00:53:30,325 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 00:53:30,326 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 00:53:30,326 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 00:53:30,327 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 00:53:30,327 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 00:53:30,328 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 00:53:30,329 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 00:53:30,329 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 00:53:30,330 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 00:53:30,330 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 00:53:30,331 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 00:53:30,331 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 00:53:30,332 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 00:53:30,332 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 00:53:30,333 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 00:53:30,334 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 00:53:30,334 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 00:53:30,335 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 00:53:30,335 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 00:53:30,336 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 00:53:30,336 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 00:53:30,337 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 00:53:30,337 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 00:53:30,338 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 00:53:30,338 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:53:30,339 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 00:53:30,339 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 00:53:30,339 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 00:53:30,339 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 00:53:30,340 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 00:53:30,340 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 00:53:30,340 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 00:53:30,340 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 00:53:30,341 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 00:53:30,341 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 00:53:30,341 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2023-11-29 00:53:30,569 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 00:53:30,589 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 00:53:30,591 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 00:53:30,593 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 00:53:30,593 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 00:53:30,594 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2023-11-29 00:53:33,375 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 00:53:33,614 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 00:53:33,614 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2023-11-29 00:53:33,626 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/data/5b2492786/13b69531665e4a0b8179ca6302b40806/FLAG70c7eb002 [2023-11-29 00:53:33,638 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/data/5b2492786/13b69531665e4a0b8179ca6302b40806 [2023-11-29 00:53:33,640 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 00:53:33,642 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 00:53:33,642 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 00:53:33,643 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 00:53:33,647 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 00:53:33,648 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:53:33" (1/1) ... [2023-11-29 00:53:33,649 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@33ee68e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:33, skipping insertion in model container [2023-11-29 00:53:33,649 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:53:33" (1/1) ... [2023-11-29 00:53:33,703 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 00:53:33,885 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2023-11-29 00:53:33,952 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:53:33,965 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 00:53:33,975 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 00:53:33,977 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] [2023-11-29 00:53:33,977 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] [2023-11-29 00:53:33,977 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] [2023-11-29 00:53:33,978 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] [2023-11-29 00:53:33,978 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] [2023-11-29 00:53:33,978 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] [2023-11-29 00:53:33,978 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] [2023-11-29 00:53:34,000 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2023-11-29 00:53:34,034 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:53:34,054 INFO L206 MainTranslator]: Completed translation [2023-11-29 00:53:34,054 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34 WrapperNode [2023-11-29 00:53:34,054 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 00:53:34,055 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 00:53:34,056 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 00:53:34,056 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 00:53:34,063 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,077 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,104 INFO L138 Inliner]: procedures = 60, calls = 108, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 241 [2023-11-29 00:53:34,104 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 00:53:34,105 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 00:53:34,105 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 00:53:34,105 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 00:53:34,117 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,117 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,120 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,133 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 00:53:34,133 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,133 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,138 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,143 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,145 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,147 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,149 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 00:53:34,150 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 00:53:34,150 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 00:53:34,150 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 00:53:34,151 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (1/1) ... [2023-11-29 00:53:34,157 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:53:34,171 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:53:34,183 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 00:53:34,187 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 00:53:34,217 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 00:53:34,218 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 00:53:34,218 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 00:53:34,218 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 00:53:34,218 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 00:53:34,219 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 00:53:34,219 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 00:53:34,219 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 00:53:34,219 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 00:53:34,219 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 00:53:34,220 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 00:53:34,220 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:53:34,220 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:53:34,220 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-29 00:53:34,220 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-29 00:53:34,221 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 00:53:34,221 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 00:53:34,221 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 00:53:34,221 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 00:53:34,221 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 00:53:34,222 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 00:53:34,222 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 00:53:34,307 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 00:53:34,310 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 00:53:34,573 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 00:53:34,633 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 00:53:34,633 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 00:53:34,634 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:53:34 BoogieIcfgContainer [2023-11-29 00:53:34,634 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 00:53:34,637 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 00:53:34,637 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 00:53:34,640 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 00:53:34,640 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 12:53:33" (1/3) ... [2023-11-29 00:53:34,641 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3169f53f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:53:34, skipping insertion in model container [2023-11-29 00:53:34,641 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:53:34" (2/3) ... [2023-11-29 00:53:34,642 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3169f53f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:53:34, skipping insertion in model container [2023-11-29 00:53:34,642 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:53:34" (3/3) ... [2023-11-29 00:53:34,643 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2023-11-29 00:53:34,665 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 00:53:34,665 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 00:53:34,734 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 00:53:34,742 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1dc2895d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 00:53:34,742 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 00:53:34,746 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 57 states have (on average 1.5263157894736843) internal successors, (87), 68 states have internal predecessors, (87), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-29 00:53:34,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-29 00:53:34,757 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:34,758 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:34,758 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:34,764 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:34,764 INFO L85 PathProgramCache]: Analyzing trace with hash 854361438, now seen corresponding path program 1 times [2023-11-29 00:53:34,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:34,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751872218] [2023-11-29 00:53:34,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:34,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:34,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:34,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 00:53:34,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:34,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 00:53:34,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:34,954 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:34,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:34,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751872218] [2023-11-29 00:53:34,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751872218] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:34,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:34,956 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 00:53:34,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103446824] [2023-11-29 00:53:34,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:34,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 00:53:34,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:34,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 00:53:34,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:53:34,997 INFO L87 Difference]: Start difference. First operand has 85 states, 57 states have (on average 1.5263157894736843) internal successors, (87), 68 states have internal predecessors, (87), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:35,062 INFO L93 Difference]: Finished difference Result 168 states and 243 transitions. [2023-11-29 00:53:35,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 00:53:35,065 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-29 00:53:35,065 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:35,075 INFO L225 Difference]: With dead ends: 168 [2023-11-29 00:53:35,075 INFO L226 Difference]: Without dead ends: 80 [2023-11-29 00:53:35,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:53:35,083 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:35,084 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 98 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:53:35,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-29 00:53:35,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2023-11-29 00:53:35,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 64 states have internal predecessors, (77), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-29 00:53:35,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 110 transitions. [2023-11-29 00:53:35,128 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 110 transitions. Word has length 22 [2023-11-29 00:53:35,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:35,129 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 110 transitions. [2023-11-29 00:53:35,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,129 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 110 transitions. [2023-11-29 00:53:35,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 00:53:35,132 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:35,132 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:35,132 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 00:53:35,133 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:35,133 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:35,133 INFO L85 PathProgramCache]: Analyzing trace with hash -1532484765, now seen corresponding path program 1 times [2023-11-29 00:53:35,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:35,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152981987] [2023-11-29 00:53:35,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:35,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:35,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:53:35,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 00:53:35,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,255 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:35,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:35,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152981987] [2023-11-29 00:53:35,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152981987] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:35,256 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:35,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 00:53:35,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1241429660] [2023-11-29 00:53:35,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:35,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:53:35,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:35,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:53:35,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:53:35,259 INFO L87 Difference]: Start difference. First operand 80 states and 110 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:35,307 INFO L93 Difference]: Finished difference Result 130 states and 178 transitions. [2023-11-29 00:53:35,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:53:35,308 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-29 00:53:35,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:35,310 INFO L225 Difference]: With dead ends: 130 [2023-11-29 00:53:35,310 INFO L226 Difference]: Without dead ends: 72 [2023-11-29 00:53:35,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:53:35,313 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 14 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:35,314 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 152 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:53:35,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2023-11-29 00:53:35,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2023-11-29 00:53:35,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 49 states have (on average 1.4489795918367347) internal successors, (71), 59 states have internal predecessors, (71), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-29 00:53:35,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 99 transitions. [2023-11-29 00:53:35,327 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 99 transitions. Word has length 23 [2023-11-29 00:53:35,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:35,328 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 99 transitions. [2023-11-29 00:53:35,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,328 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 99 transitions. [2023-11-29 00:53:35,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 00:53:35,330 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:35,330 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:35,330 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 00:53:35,331 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:35,331 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:35,331 INFO L85 PathProgramCache]: Analyzing trace with hash -1076188903, now seen corresponding path program 1 times [2023-11-29 00:53:35,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:35,332 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743516964] [2023-11-29 00:53:35,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:35,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:35,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 00:53:35,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-29 00:53:35,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,426 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:35,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:35,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743516964] [2023-11-29 00:53:35,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743516964] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:35,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:35,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 00:53:35,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619411056] [2023-11-29 00:53:35,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:35,428 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:53:35,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:35,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:53:35,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:53:35,429 INFO L87 Difference]: Start difference. First operand 72 states and 99 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 00:53:35,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:35,497 INFO L93 Difference]: Finished difference Result 212 states and 294 transitions. [2023-11-29 00:53:35,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:53:35,498 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-29 00:53:35,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:35,501 INFO L225 Difference]: With dead ends: 212 [2023-11-29 00:53:35,501 INFO L226 Difference]: Without dead ends: 142 [2023-11-29 00:53:35,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:53:35,504 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 90 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:35,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 178 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:53:35,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142 states. [2023-11-29 00:53:35,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142 to 139. [2023-11-29 00:53:35,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 113 states have internal predecessors, (137), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2023-11-29 00:53:35,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 193 transitions. [2023-11-29 00:53:35,528 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 193 transitions. Word has length 26 [2023-11-29 00:53:35,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:35,529 INFO L495 AbstractCegarLoop]: Abstraction has 139 states and 193 transitions. [2023-11-29 00:53:35,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 00:53:35,529 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 193 transitions. [2023-11-29 00:53:35,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-29 00:53:35,532 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:35,532 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:35,532 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 00:53:35,532 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:35,533 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:35,533 INFO L85 PathProgramCache]: Analyzing trace with hash 439230069, now seen corresponding path program 1 times [2023-11-29 00:53:35,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:35,534 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [612719095] [2023-11-29 00:53:35,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:35,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:35,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-29 00:53:35,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 00:53:35,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,670 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 00:53:35,670 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:35,671 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [612719095] [2023-11-29 00:53:35,671 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [612719095] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:35,671 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:35,671 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 00:53:35,671 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2046838289] [2023-11-29 00:53:35,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:35,672 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 00:53:35,672 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:35,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 00:53:35,673 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 00:53:35,674 INFO L87 Difference]: Start difference. First operand 139 states and 193 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:35,872 INFO L93 Difference]: Finished difference Result 368 states and 521 transitions. [2023-11-29 00:53:35,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 00:53:35,873 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2023-11-29 00:53:35,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:35,877 INFO L225 Difference]: With dead ends: 368 [2023-11-29 00:53:35,877 INFO L226 Difference]: Without dead ends: 231 [2023-11-29 00:53:35,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-29 00:53:35,880 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 51 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:35,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 378 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 00:53:35,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2023-11-29 00:53:35,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 226. [2023-11-29 00:53:35,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 157 states have (on average 1.3694267515923566) internal successors, (215), 174 states have internal predecessors, (215), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2023-11-29 00:53:35,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 303 transitions. [2023-11-29 00:53:35,912 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 303 transitions. Word has length 29 [2023-11-29 00:53:35,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:35,913 INFO L495 AbstractCegarLoop]: Abstraction has 226 states and 303 transitions. [2023-11-29 00:53:35,913 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 00:53:35,913 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 303 transitions. [2023-11-29 00:53:35,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-29 00:53:35,915 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:35,916 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:35,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 00:53:35,916 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:35,917 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:35,917 INFO L85 PathProgramCache]: Analyzing trace with hash 112415171, now seen corresponding path program 1 times [2023-11-29 00:53:35,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:35,917 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303636627] [2023-11-29 00:53:35,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:35,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:35,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 00:53:35,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:35,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 00:53:36,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:36,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:53:36,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,042 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:36,042 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:36,042 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303636627] [2023-11-29 00:53:36,042 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303636627] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:36,043 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:36,043 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 00:53:36,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837635643] [2023-11-29 00:53:36,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:36,043 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 00:53:36,044 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:36,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 00:53:36,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 00:53:36,045 INFO L87 Difference]: Start difference. First operand 226 states and 303 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 00:53:36,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:36,375 INFO L93 Difference]: Finished difference Result 700 states and 983 transitions. [2023-11-29 00:53:36,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-29 00:53:36,377 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 43 [2023-11-29 00:53:36,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:36,382 INFO L225 Difference]: With dead ends: 700 [2023-11-29 00:53:36,382 INFO L226 Difference]: Without dead ends: 476 [2023-11-29 00:53:36,384 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-29 00:53:36,386 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 148 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:36,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 309 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 00:53:36,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 476 states. [2023-11-29 00:53:36,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 476 to 450. [2023-11-29 00:53:36,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 317 states have (on average 1.3217665615141956) internal successors, (419), 339 states have internal predecessors, (419), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2023-11-29 00:53:36,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 595 transitions. [2023-11-29 00:53:36,443 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 595 transitions. Word has length 43 [2023-11-29 00:53:36,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:36,443 INFO L495 AbstractCegarLoop]: Abstraction has 450 states and 595 transitions. [2023-11-29 00:53:36,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 00:53:36,444 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 595 transitions. [2023-11-29 00:53:36,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-29 00:53:36,446 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:36,447 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:36,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 00:53:36,447 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:36,447 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:36,448 INFO L85 PathProgramCache]: Analyzing trace with hash 1801358913, now seen corresponding path program 1 times [2023-11-29 00:53:36,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:36,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1287498317] [2023-11-29 00:53:36,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:36,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:36,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 00:53:36,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 00:53:36,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:36,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:53:36,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,562 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:36,563 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:36,563 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1287498317] [2023-11-29 00:53:36,563 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1287498317] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:36,563 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:36,563 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 00:53:36,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [583073881] [2023-11-29 00:53:36,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:36,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 00:53:36,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:36,565 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 00:53:36,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 00:53:36,566 INFO L87 Difference]: Start difference. First operand 450 states and 595 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 00:53:36,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:36,767 INFO L93 Difference]: Finished difference Result 908 states and 1223 transitions. [2023-11-29 00:53:36,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 00:53:36,768 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2023-11-29 00:53:36,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:36,772 INFO L225 Difference]: With dead ends: 908 [2023-11-29 00:53:36,772 INFO L226 Difference]: Without dead ends: 460 [2023-11-29 00:53:36,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:53:36,775 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 57 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:36,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 235 Invalid, 161 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 00:53:36,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 460 states. [2023-11-29 00:53:36,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 460 to 458. [2023-11-29 00:53:36,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 325 states have (on average 1.3138461538461539) internal successors, (427), 347 states have internal predecessors, (427), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2023-11-29 00:53:36,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 603 transitions. [2023-11-29 00:53:36,813 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 603 transitions. Word has length 43 [2023-11-29 00:53:36,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:36,814 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 603 transitions. [2023-11-29 00:53:36,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 00:53:36,814 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 603 transitions. [2023-11-29 00:53:36,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-29 00:53:36,816 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:36,817 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:36,817 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 00:53:36,817 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:36,818 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:36,818 INFO L85 PathProgramCache]: Analyzing trace with hash 213011011, now seen corresponding path program 1 times [2023-11-29 00:53:36,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:36,818 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [888383687] [2023-11-29 00:53:36,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:36,819 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:36,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 00:53:36,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 00:53:36,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:36,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:53:36,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:36,926 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:36,926 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:36,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [888383687] [2023-11-29 00:53:36,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [888383687] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:36,926 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:36,927 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 00:53:36,927 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133356703] [2023-11-29 00:53:36,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:36,927 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 00:53:36,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:36,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 00:53:36,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 00:53:36,928 INFO L87 Difference]: Start difference. First operand 458 states and 603 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 00:53:37,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:37,242 INFO L93 Difference]: Finished difference Result 852 states and 1142 transitions. [2023-11-29 00:53:37,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 00:53:37,244 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 43 [2023-11-29 00:53:37,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:37,247 INFO L225 Difference]: With dead ends: 852 [2023-11-29 00:53:37,247 INFO L226 Difference]: Without dead ends: 396 [2023-11-29 00:53:37,248 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-29 00:53:37,249 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 202 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 207 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 207 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:37,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 290 Invalid, 270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 207 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 00:53:37,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396 states. [2023-11-29 00:53:37,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396 to 380. [2023-11-29 00:53:37,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 380 states, 269 states have (on average 1.2862453531598512) internal successors, (346), 288 states have internal predecessors, (346), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (80), 59 states have call predecessors, (80), 58 states have call successors, (80) [2023-11-29 00:53:37,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 380 states to 380 states and 484 transitions. [2023-11-29 00:53:37,279 INFO L78 Accepts]: Start accepts. Automaton has 380 states and 484 transitions. Word has length 43 [2023-11-29 00:53:37,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:37,279 INFO L495 AbstractCegarLoop]: Abstraction has 380 states and 484 transitions. [2023-11-29 00:53:37,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 00:53:37,280 INFO L276 IsEmpty]: Start isEmpty. Operand 380 states and 484 transitions. [2023-11-29 00:53:37,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-29 00:53:37,281 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:37,281 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:37,281 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 00:53:37,281 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:37,282 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:37,282 INFO L85 PathProgramCache]: Analyzing trace with hash 540619359, now seen corresponding path program 1 times [2023-11-29 00:53:37,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:37,282 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1830518640] [2023-11-29 00:53:37,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:37,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:37,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:53:37,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 00:53:37,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 00:53:37,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:37,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-29 00:53:37,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:37,454 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 00:53:37,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:37,455 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1830518640] [2023-11-29 00:53:37,455 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1830518640] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:37,455 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:37,455 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-29 00:53:37,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592873400] [2023-11-29 00:53:37,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:37,456 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-29 00:53:37,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:37,457 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-29 00:53:37,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-29 00:53:37,457 INFO L87 Difference]: Start difference. First operand 380 states and 484 transitions. Second operand has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 00:53:38,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:38,208 INFO L93 Difference]: Finished difference Result 1166 states and 1605 transitions. [2023-11-29 00:53:38,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-29 00:53:38,209 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 47 [2023-11-29 00:53:38,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:38,216 INFO L225 Difference]: With dead ends: 1166 [2023-11-29 00:53:38,216 INFO L226 Difference]: Without dead ends: 888 [2023-11-29 00:53:38,218 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 191 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=200, Invalid=612, Unknown=0, NotChecked=0, Total=812 [2023-11-29 00:53:38,219 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 474 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 559 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 482 SdHoareTripleChecker+Valid, 328 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 559 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:38,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [482 Valid, 328 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 559 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-29 00:53:38,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 888 states. [2023-11-29 00:53:38,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 888 to 822. [2023-11-29 00:53:38,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 822 states, 577 states have (on average 1.2703639514731369) internal successors, (733), 625 states have internal predecessors, (733), 129 states have call successors, (129), 95 states have call predecessors, (129), 115 states have return successors, (213), 127 states have call predecessors, (213), 129 states have call successors, (213) [2023-11-29 00:53:38,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 822 states to 822 states and 1075 transitions. [2023-11-29 00:53:38,288 INFO L78 Accepts]: Start accepts. Automaton has 822 states and 1075 transitions. Word has length 47 [2023-11-29 00:53:38,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:38,289 INFO L495 AbstractCegarLoop]: Abstraction has 822 states and 1075 transitions. [2023-11-29 00:53:38,289 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 00:53:38,289 INFO L276 IsEmpty]: Start isEmpty. Operand 822 states and 1075 transitions. [2023-11-29 00:53:38,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-29 00:53:38,292 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:38,292 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:38,292 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 00:53:38,292 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:38,293 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:38,293 INFO L85 PathProgramCache]: Analyzing trace with hash 994621290, now seen corresponding path program 1 times [2023-11-29 00:53:38,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:38,293 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886457556] [2023-11-29 00:53:38,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:38,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:38,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:53:38,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 00:53:38,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:53:38,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:53:38,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:38,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-29 00:53:38,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-29 00:53:38,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,399 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-29 00:53:38,399 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:38,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886457556] [2023-11-29 00:53:38,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886457556] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:53:38,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:53:38,400 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 00:53:38,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64793145] [2023-11-29 00:53:38,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:53:38,401 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 00:53:38,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:38,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 00:53:38,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:53:38,403 INFO L87 Difference]: Start difference. First operand 822 states and 1075 transitions. Second operand has 7 states, 6 states have (on average 9.166666666666666) internal successors, (55), 4 states have internal predecessors, (55), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 00:53:38,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:38,791 INFO L93 Difference]: Finished difference Result 1382 states and 1801 transitions. [2023-11-29 00:53:38,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-29 00:53:38,792 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 9.166666666666666) internal successors, (55), 4 states have internal predecessors, (55), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 72 [2023-11-29 00:53:38,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:38,796 INFO L225 Difference]: With dead ends: 1382 [2023-11-29 00:53:38,796 INFO L226 Difference]: Without dead ends: 562 [2023-11-29 00:53:38,798 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-29 00:53:38,799 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 220 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 322 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 322 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:38,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 241 Invalid, 394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 322 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 00:53:38,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 562 states. [2023-11-29 00:53:38,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 562 to 536. [2023-11-29 00:53:38,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 536 states, 379 states have (on average 1.2612137203166227) internal successors, (478), 411 states have internal predecessors, (478), 83 states have call successors, (83), 63 states have call predecessors, (83), 73 states have return successors, (126), 82 states have call predecessors, (126), 83 states have call successors, (126) [2023-11-29 00:53:38,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 536 states to 536 states and 687 transitions. [2023-11-29 00:53:38,837 INFO L78 Accepts]: Start accepts. Automaton has 536 states and 687 transitions. Word has length 72 [2023-11-29 00:53:38,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:38,837 INFO L495 AbstractCegarLoop]: Abstraction has 536 states and 687 transitions. [2023-11-29 00:53:38,838 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 9.166666666666666) internal successors, (55), 4 states have internal predecessors, (55), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 00:53:38,838 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 687 transitions. [2023-11-29 00:53:38,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2023-11-29 00:53:38,839 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:53:38,839 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:38,840 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 00:53:38,840 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:53:38,840 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:53:38,840 INFO L85 PathProgramCache]: Analyzing trace with hash 875974300, now seen corresponding path program 1 times [2023-11-29 00:53:38,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:53:38,841 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766913345] [2023-11-29 00:53:38,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:38,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:53:38,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:53:38,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:53:38,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:38,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:53:38,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:53:39,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:39,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-29 00:53:39,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 00:53:39,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:53:39,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:53:39,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2023-11-29 00:53:39,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,055 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 13 proven. 10 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 00:53:39,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:53:39,055 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766913345] [2023-11-29 00:53:39,055 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1766913345] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 00:53:39,056 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [247821498] [2023-11-29 00:53:39,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:53:39,056 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 00:53:39,056 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:53:39,057 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 00:53:39,065 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 00:53:39,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:53:39,163 INFO L262 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-29 00:53:39,171 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 00:53:39,321 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 22 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 00:53:39,321 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 00:53:39,509 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 00:53:39,510 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [247821498] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 00:53:39,510 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 00:53:39,510 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-29 00:53:39,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379876225] [2023-11-29 00:53:39,511 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 00:53:39,511 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-29 00:53:39,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:53:39,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-29 00:53:39,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-29 00:53:39,513 INFO L87 Difference]: Start difference. First operand 536 states and 687 transitions. Second operand has 15 states, 11 states have (on average 9.272727272727273) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2023-11-29 00:53:41,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:53:41,003 INFO L93 Difference]: Finished difference Result 1173 states and 1546 transitions. [2023-11-29 00:53:41,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-29 00:53:41,003 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 9.272727272727273) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 87 [2023-11-29 00:53:41,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:53:41,004 INFO L225 Difference]: With dead ends: 1173 [2023-11-29 00:53:41,005 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 00:53:41,009 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 200 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 579 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2023-11-29 00:53:41,010 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 380 mSDsluCounter, 817 mSDsCounter, 0 mSdLazyCounter, 1537 mSolverCounterSat, 160 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 388 SdHoareTripleChecker+Valid, 933 SdHoareTripleChecker+Invalid, 1697 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 160 IncrementalHoareTripleChecker+Valid, 1537 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-29 00:53:41,010 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [388 Valid, 933 Invalid, 1697 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [160 Valid, 1537 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-29 00:53:41,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 00:53:41,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 00:53:41,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 00:53:41,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 00:53:41,011 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2023-11-29 00:53:41,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:53:41,012 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 00:53:41,012 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 9.272727272727273) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2023-11-29 00:53:41,012 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 00:53:41,012 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 00:53:41,015 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 00:53:41,022 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 00:53:41,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 00:53:41,218 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 00:53:43,376 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2023-11-29 00:53:43,376 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 293 300) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2023-11-29 00:53:43,376 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2023-11-29 00:53:43,376 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2023-11-29 00:53:43,377 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: true [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L902 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L902 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point L977(lines 952 981) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2023-11-29 00:53:43,377 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 952 981) the Hoare annotation is: true [2023-11-29 00:53:43,377 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L902 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L64-2(lines 60 71) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L279-1(lines 260 284) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2023-11-29 00:53:43,378 INFO L899 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2023-11-29 00:53:43,379 INFO L895 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse10 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse7 (< 2 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2) (let ((.cse4 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse1 (and .cse3 .cse4 .cse5) .cse6 .cse7 (and .cse8 .cse4 .cse5))) (or .cse0 .cse9 .cse7 .cse10) (or .cse0 .cse2 .cse10) (or .cse0 .cse9 .cse1 .cse7) (let ((.cse11 (= ~waterLevel~0 1))) (or .cse1 (and .cse8 .cse11 .cse5) .cse2 .cse6 (and .cse3 .cse11 .cse5)))))) [2023-11-29 00:53:43,379 INFO L899 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2023-11-29 00:53:43,379 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2023-11-29 00:53:43,379 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2023-11-29 00:53:43,379 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 173 199) the Hoare annotation is: (let ((.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse6 (and (= ~pumpRunning~0 0) .cse3 .cse4)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or .cse6 .cse7 .cse0 .cse5) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1) (or .cse6 .cse7 .cse5 (not (= 0 ~systemActive~0)))))) [2023-11-29 00:53:43,380 INFO L895 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse6 (and (= ~pumpRunning~0 0) .cse3 .cse4)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or .cse6 .cse7 .cse0 .cse5) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1) (or .cse6 .cse7 .cse5 (not (= 0 ~systemActive~0)))))) [2023-11-29 00:53:43,380 INFO L899 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2023-11-29 00:53:43,380 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2023-11-29 00:53:43,380 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2023-11-29 00:53:43,380 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2023-11-29 00:53:43,380 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse3 (< |old(~pumpRunning~0)| 1)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2) (not (= |old(~waterLevel~0)| 2)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse3 .cse4 (and .cse1 (<= ~waterLevel~0 2) .cse2)) (or .cse5 .cse0 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point L563-1(lines 555 583) no Hoare annotation was computed. [2023-11-29 00:53:43,381 INFO L895 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse3 (< |old(~pumpRunning~0)| 1)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2) (not (= |old(~waterLevel~0)| 2)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse3 .cse4 (and .cse1 (<= ~waterLevel~0 2) .cse2)) (or .cse5 .cse0 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2023-11-29 00:53:43,381 INFO L895 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2023-11-29 00:53:43,381 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point L483(lines 420 487) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 00:53:43,382 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 00:53:43,382 INFO L895 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2023-11-29 00:53:43,382 INFO L899 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L895 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2023-11-29 00:53:43,383 INFO L899 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2023-11-29 00:53:43,384 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 208 232) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,384 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 137 150) no Hoare annotation was computed. [2023-11-29 00:53:43,384 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse2 (< 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or .cse2 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))))) [2023-11-29 00:53:43,384 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2023-11-29 00:53:43,384 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2023-11-29 00:53:43,384 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2023-11-29 00:53:43,385 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,385 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2023-11-29 00:53:43,385 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-29 00:53:43,385 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2023-11-29 00:53:43,385 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (= 2 ~waterLevel~0) .cse1 (not (= |old(~waterLevel~0)| 2))) (or .cse2 .cse1 .cse3 .cse4) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse3 .cse4) (or .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 00:53:43,386 INFO L895 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,386 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,386 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2023-11-29 00:53:43,386 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2023-11-29 00:53:43,386 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 234 258) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,386 INFO L899 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2023-11-29 00:53:43,386 INFO L899 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2023-11-29 00:53:43,386 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2023-11-29 00:53:43,387 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:53:43,387 INFO L899 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2023-11-29 00:53:43,387 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2023-11-29 00:53:43,387 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 312 320) the Hoare annotation is: true [2023-11-29 00:53:43,389 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:53:43,391 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 00:53:43,400 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 12:53:43 BoogieIcfgContainer [2023-11-29 00:53:43,401 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 00:53:43,401 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 00:53:43,401 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 00:53:43,402 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 00:53:43,402 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:53:34" (3/4) ... [2023-11-29 00:53:43,404 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 00:53:43,407 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 00:53:43,408 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:53:43,408 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-29 00:53:43,416 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 37 nodes and edges [2023-11-29 00:53:43,417 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 00:53:43,418 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 00:53:43,419 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:53:43,420 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:53:43,522 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 00:53:43,522 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 00:53:43,523 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 00:53:43,523 INFO L158 Benchmark]: Toolchain (without parser) took 9881.89ms. Allocated memory was 134.2MB in the beginning and 213.9MB in the end (delta: 79.7MB). Free memory was 102.5MB in the beginning and 102.5MB in the end (delta: 31.1kB). Peak memory consumption was 81.8MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,524 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 79.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 00:53:43,524 INFO L158 Benchmark]: CACSL2BoogieTranslator took 412.13ms. Allocated memory is still 134.2MB. Free memory was 102.0MB in the beginning and 82.0MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,525 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.84ms. Allocated memory is still 134.2MB. Free memory was 82.0MB in the beginning and 79.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,525 INFO L158 Benchmark]: Boogie Preprocessor took 44.94ms. Allocated memory is still 134.2MB. Free memory was 79.9MB in the beginning and 77.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,526 INFO L158 Benchmark]: RCFGBuilder took 483.82ms. Allocated memory is still 134.2MB. Free memory was 77.3MB in the beginning and 53.0MB in the end (delta: 24.3MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,526 INFO L158 Benchmark]: TraceAbstraction took 8764.18ms. Allocated memory was 134.2MB in the beginning and 213.9MB in the end (delta: 79.7MB). Free memory was 52.4MB in the beginning and 110.9MB in the end (delta: -58.4MB). Peak memory consumption was 78.5MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,526 INFO L158 Benchmark]: Witness Printer took 121.62ms. Allocated memory is still 213.9MB. Free memory was 109.8MB in the beginning and 102.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 00:53:43,528 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 79.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 412.13ms. Allocated memory is still 134.2MB. Free memory was 102.0MB in the beginning and 82.0MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.84ms. Allocated memory is still 134.2MB. Free memory was 82.0MB in the beginning and 79.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.94ms. Allocated memory is still 134.2MB. Free memory was 79.9MB in the beginning and 77.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 483.82ms. Allocated memory is still 134.2MB. Free memory was 77.3MB in the beginning and 53.0MB in the end (delta: 24.3MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 8764.18ms. Allocated memory was 134.2MB in the beginning and 213.9MB in the end (delta: 79.7MB). Free memory was 52.4MB in the beginning and 110.9MB in the end (delta: -58.4MB). Peak memory consumption was 78.5MB. Max. memory is 16.1GB. * Witness Printer took 121.62ms. Allocated memory is still 213.9MB. Free memory was 109.8MB in the beginning and 102.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] - GenericResultAtLocation [Line: 418]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] - GenericResultAtLocation [Line: 488]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] - GenericResultAtLocation [Line: 526]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] - GenericResultAtLocation [Line: 535]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] - GenericResultAtLocation [Line: 584]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] - GenericResultAtLocation [Line: 950]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1683 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1636 mSDsluCounter, 3142 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2287 mSDsCounter, 571 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3195 IncrementalHoareTripleChecker+Invalid, 3766 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 571 mSolverCounterUnsat, 855 mSDtfsCounter, 3195 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 413 GetRequests, 293 SyntacticMatches, 4 SemanticMatches, 116 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 813 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=822occurred in iteration=8, InterpolantAutomatonStates: 115, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 144 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 28 LocationsWithAnnotation, 1331 PreInvPairs, 1464 NumberOfFragments, 1108 HoareAnnotationTreeSize, 1331 FomulaSimplifications, 2248 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 28 FomulaSimplificationsInter, 5105 FormulaSimplificationTreeSizeReductionInter, 1.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 522 NumberOfCodeBlocks, 522 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 597 ConstructedInterpolants, 0 QuantifiedInterpolants, 1133 SizeOfPredicates, 3 NumberOfNonLiveVariables, 329 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 104/131 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-29 00:53:43,545 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fbfed26-7f8e-4dce-9880-233dd25fe3b4/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE