./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6497de01 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f629674af99a09af382dbe6cebebcc4fb4b60762fab54c6aa0b3a2dc7cf784d0 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-6497de0 [2024-11-24 00:53:12,916 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-24 00:53:12,999 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-24 00:53:13,005 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-24 00:53:13,006 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-24 00:53:13,039 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-24 00:53:13,041 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-24 00:53:13,041 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-24 00:53:13,041 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-24 00:53:13,042 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-24 00:53:13,042 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-24 00:53:13,043 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * Use SBE=true [2024-11-24 00:53:13,043 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-24 00:53:13,043 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-24 00:53:13,044 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:53:13,044 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:53:13,045 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:53:13,045 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-24 00:53:13,045 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:53:13,046 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:53:13,046 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:53:13,046 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:53:13,046 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-24 00:53:13,046 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-24 00:53:13,047 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-24 00:53:13,048 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-24 00:53:13,048 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-24 00:53:13,048 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f629674af99a09af382dbe6cebebcc4fb4b60762fab54c6aa0b3a2dc7cf784d0 [2024-11-24 00:53:13,343 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-24 00:53:13,355 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-24 00:53:13,359 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-24 00:53:13,361 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-24 00:53:13,361 INFO L274 PluginConnector]: CDTParser initialized [2024-11-24 00:53:13,363 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/../../sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c [2024-11-24 00:53:16,319 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/data/993760ad8/b560a7bbecec45bf8911272e2ca98290/FLAGd3b13a319 [2024-11-24 00:53:16,586 INFO L384 CDTParser]: Found 1 translation units. [2024-11-24 00:53:16,586 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c [2024-11-24 00:53:16,597 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/data/993760ad8/b560a7bbecec45bf8911272e2ca98290/FLAGd3b13a319 [2024-11-24 00:53:16,874 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/data/993760ad8/b560a7bbecec45bf8911272e2ca98290 [2024-11-24 00:53:16,876 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-24 00:53:16,878 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-24 00:53:16,879 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-24 00:53:16,879 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-24 00:53:16,884 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-24 00:53:16,885 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:53:16" (1/1) ... [2024-11-24 00:53:16,888 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ac3390b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:16, skipping insertion in model container [2024-11-24 00:53:16,888 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:53:16" (1/1) ... [2024-11-24 00:53:16,933 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-24 00:53:17,253 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c[17234,17247] [2024-11-24 00:53:17,257 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:53:17,269 INFO L200 MainTranslator]: Completed pre-run [2024-11-24 00:53:17,278 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2024-11-24 00:53:17,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [135] [2024-11-24 00:53:17,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [163] [2024-11-24 00:53:17,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [236] [2024-11-24 00:53:17,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [387] [2024-11-24 00:53:17,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [425] [2024-11-24 00:53:17,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [521] [2024-11-24 00:53:17,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [887] [2024-11-24 00:53:17,380 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/sv-benchmarks/c/product-lines/minepump_spec4_product12.cil.c[17234,17247] [2024-11-24 00:53:17,381 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:53:17,406 INFO L204 MainTranslator]: Completed translation [2024-11-24 00:53:17,406 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17 WrapperNode [2024-11-24 00:53:17,406 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-24 00:53:17,407 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-24 00:53:17,407 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-24 00:53:17,407 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-24 00:53:17,418 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,434 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,456 INFO L138 Inliner]: procedures = 52, calls = 93, calls flagged for inlining = 23, calls inlined = 17, statements flattened = 142 [2024-11-24 00:53:17,457 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-24 00:53:17,457 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-24 00:53:17,457 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-24 00:53:17,458 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-24 00:53:17,467 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,467 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,469 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,492 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-24 00:53:17,492 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,493 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,499 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,500 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,508 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,509 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,510 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,515 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-24 00:53:17,516 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-24 00:53:17,516 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-24 00:53:17,516 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-24 00:53:17,521 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (1/1) ... [2024-11-24 00:53:17,531 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:53:17,546 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:53:17,561 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-24 00:53:17,564 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-24 00:53:17,597 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-24 00:53:17,598 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-24 00:53:17,598 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-24 00:53:17,598 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-24 00:53:17,598 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-24 00:53:17,598 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-24 00:53:17,598 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-24 00:53:17,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-24 00:53:17,598 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-24 00:53:17,599 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-24 00:53:17,599 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-24 00:53:17,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-24 00:53:17,680 INFO L234 CfgBuilder]: Building ICFG [2024-11-24 00:53:17,684 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-24 00:53:17,932 INFO L? ?]: Removed 27 outVars from TransFormulas that were not future-live. [2024-11-24 00:53:17,932 INFO L283 CfgBuilder]: Performing block encoding [2024-11-24 00:53:17,946 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-24 00:53:17,946 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-24 00:53:17,946 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:53:17 BoogieIcfgContainer [2024-11-24 00:53:17,947 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-24 00:53:17,950 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-24 00:53:17,951 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-24 00:53:17,957 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-24 00:53:17,957 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 24.11 12:53:16" (1/3) ... [2024-11-24 00:53:17,958 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2bbcf521 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:53:17, skipping insertion in model container [2024-11-24 00:53:17,958 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:53:17" (2/3) ... [2024-11-24 00:53:17,958 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2bbcf521 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:53:17, skipping insertion in model container [2024-11-24 00:53:17,958 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:53:17" (3/3) ... [2024-11-24 00:53:17,960 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product12.cil.c [2024-11-24 00:53:17,976 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-24 00:53:17,978 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec4_product12.cil.c that has 5 procedures, 61 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-24 00:53:18,053 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-24 00:53:18,068 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@c344b3d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-24 00:53:18,069 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-24 00:53:18,074 INFO L276 IsEmpty]: Start isEmpty. Operand has 61 states, 49 states have (on average 1.4081632653061225) internal successors, (69), 53 states have internal predecessors, (69), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-24 00:53:18,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-11-24 00:53:18,082 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:18,083 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:18,083 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:18,088 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:18,088 INFO L85 PathProgramCache]: Analyzing trace with hash 2018679958, now seen corresponding path program 1 times [2024-11-24 00:53:18,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:18,094 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569490246] [2024-11-24 00:53:18,094 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:18,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:18,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:18,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:18,244 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:18,244 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569490246] [2024-11-24 00:53:18,245 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569490246] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:53:18,245 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:53:18,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-24 00:53:18,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677417076] [2024-11-24 00:53:18,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:53:18,251 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-24 00:53:18,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:18,269 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-24 00:53:18,270 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:53:18,272 INFO L87 Difference]: Start difference. First operand has 61 states, 49 states have (on average 1.4081632653061225) internal successors, (69), 53 states have internal predecessors, (69), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:18,303 INFO L93 Difference]: Finished difference Result 114 states and 157 transitions. [2024-11-24 00:53:18,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-24 00:53:18,305 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2024-11-24 00:53:18,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:18,312 INFO L225 Difference]: With dead ends: 114 [2024-11-24 00:53:18,312 INFO L226 Difference]: Without dead ends: 52 [2024-11-24 00:53:18,315 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:53:18,318 INFO L435 NwaCegarLoop]: 75 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:18,320 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:53:18,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-11-24 00:53:18,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2024-11-24 00:53:18,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 45 states have internal predecessors, (55), 6 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-11-24 00:53:18,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 66 transitions. [2024-11-24 00:53:18,366 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 66 transitions. Word has length 19 [2024-11-24 00:53:18,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:18,367 INFO L471 AbstractCegarLoop]: Abstraction has 52 states and 66 transitions. [2024-11-24 00:53:18,367 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,367 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 66 transitions. [2024-11-24 00:53:18,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-11-24 00:53:18,369 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:18,369 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:18,369 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-24 00:53:18,369 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:18,370 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:18,370 INFO L85 PathProgramCache]: Analyzing trace with hash -1501791024, now seen corresponding path program 1 times [2024-11-24 00:53:18,370 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:18,370 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [302394671] [2024-11-24 00:53:18,370 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:18,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:18,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:18,514 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:18,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:18,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [302394671] [2024-11-24 00:53:18,518 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [302394671] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:53:18,518 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:53:18,518 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:53:18,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829763578] [2024-11-24 00:53:18,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:53:18,520 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:53:18,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:18,521 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:53:18,521 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:53:18,522 INFO L87 Difference]: Start difference. First operand 52 states and 66 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:18,533 INFO L93 Difference]: Finished difference Result 67 states and 84 transitions. [2024-11-24 00:53:18,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:53:18,535 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2024-11-24 00:53:18,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:18,536 INFO L225 Difference]: With dead ends: 67 [2024-11-24 00:53:18,536 INFO L226 Difference]: Without dead ends: 44 [2024-11-24 00:53:18,536 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:53:18,537 INFO L435 NwaCegarLoop]: 54 mSDtfsCounter, 18 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:18,538 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 87 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:53:18,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2024-11-24 00:53:18,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 44. [2024-11-24 00:53:18,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 37 states have (on average 1.3243243243243243) internal successors, (49), 40 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-24 00:53:18,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 55 transitions. [2024-11-24 00:53:18,544 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 55 transitions. Word has length 19 [2024-11-24 00:53:18,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:18,544 INFO L471 AbstractCegarLoop]: Abstraction has 44 states and 55 transitions. [2024-11-24 00:53:18,544 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,544 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 55 transitions. [2024-11-24 00:53:18,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-11-24 00:53:18,545 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:18,545 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:18,545 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-24 00:53:18,545 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:18,546 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:18,546 INFO L85 PathProgramCache]: Analyzing trace with hash -1556104331, now seen corresponding path program 1 times [2024-11-24 00:53:18,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:18,546 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559229834] [2024-11-24 00:53:18,546 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:18,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:18,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:18,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:18,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:18,762 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559229834] [2024-11-24 00:53:18,762 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559229834] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:53:18,762 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:53:18,762 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:53:18,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377251217] [2024-11-24 00:53:18,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:53:18,763 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:53:18,763 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:18,764 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:53:18,764 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-11-24 00:53:18,764 INFO L87 Difference]: Start difference. First operand 44 states and 55 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:18,894 INFO L93 Difference]: Finished difference Result 150 states and 197 transitions. [2024-11-24 00:53:18,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:53:18,894 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2024-11-24 00:53:18,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:18,899 INFO L225 Difference]: With dead ends: 150 [2024-11-24 00:53:18,899 INFO L226 Difference]: Without dead ends: 113 [2024-11-24 00:53:18,900 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2024-11-24 00:53:18,900 INFO L435 NwaCegarLoop]: 52 mSDtfsCounter, 80 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:18,901 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 254 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:53:18,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2024-11-24 00:53:18,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 103. [2024-11-24 00:53:18,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 84 states have (on average 1.380952380952381) internal successors, (116), 91 states have internal predecessors, (116), 9 states have call successors, (9), 9 states have call predecessors, (9), 9 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2024-11-24 00:53:18,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 135 transitions. [2024-11-24 00:53:18,932 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 135 transitions. Word has length 24 [2024-11-24 00:53:18,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:18,935 INFO L471 AbstractCegarLoop]: Abstraction has 103 states and 135 transitions. [2024-11-24 00:53:18,935 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:18,935 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 135 transitions. [2024-11-24 00:53:18,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2024-11-24 00:53:18,936 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:18,936 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:18,936 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-24 00:53:18,937 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:18,937 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:18,937 INFO L85 PathProgramCache]: Analyzing trace with hash 1308960492, now seen corresponding path program 1 times [2024-11-24 00:53:18,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:18,938 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [210548263] [2024-11-24 00:53:18,938 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:18,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:18,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:19,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:19,224 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:19,224 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [210548263] [2024-11-24 00:53:19,224 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [210548263] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:53:19,224 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:53:19,224 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-24 00:53:19,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [545657559] [2024-11-24 00:53:19,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:53:19,225 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:53:19,225 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:19,225 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:53:19,225 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-11-24 00:53:19,225 INFO L87 Difference]: Start difference. First operand 103 states and 135 transitions. Second operand has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:19,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:19,496 INFO L93 Difference]: Finished difference Result 366 states and 518 transitions. [2024-11-24 00:53:19,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-24 00:53:19,497 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2024-11-24 00:53:19,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:19,500 INFO L225 Difference]: With dead ends: 366 [2024-11-24 00:53:19,500 INFO L226 Difference]: Without dead ends: 270 [2024-11-24 00:53:19,501 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2024-11-24 00:53:19,502 INFO L435 NwaCegarLoop]: 48 mSDtfsCounter, 70 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:19,502 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 313 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:53:19,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2024-11-24 00:53:19,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 264. [2024-11-24 00:53:19,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 215 states have (on average 1.3488372093023255) internal successors, (290), 231 states have internal predecessors, (290), 24 states have call successors, (24), 24 states have call predecessors, (24), 24 states have return successors, (38), 24 states have call predecessors, (38), 24 states have call successors, (38) [2024-11-24 00:53:19,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 352 transitions. [2024-11-24 00:53:19,543 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 352 transitions. Word has length 25 [2024-11-24 00:53:19,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:19,543 INFO L471 AbstractCegarLoop]: Abstraction has 264 states and 352 transitions. [2024-11-24 00:53:19,544 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:19,544 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 352 transitions. [2024-11-24 00:53:19,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-11-24 00:53:19,545 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:19,545 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:19,545 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-24 00:53:19,545 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:19,546 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:19,546 INFO L85 PathProgramCache]: Analyzing trace with hash 966744551, now seen corresponding path program 1 times [2024-11-24 00:53:19,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:19,546 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2005998613] [2024-11-24 00:53:19,547 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:19,547 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:19,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:19,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:19,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:19,587 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2005998613] [2024-11-24 00:53:19,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2005998613] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:53:19,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:53:19,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-24 00:53:19,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [245692864] [2024-11-24 00:53:19,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:53:19,588 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:53:19,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:19,589 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:53:19,589 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:53:19,589 INFO L87 Difference]: Start difference. First operand 264 states and 352 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:19,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:19,618 INFO L93 Difference]: Finished difference Result 503 states and 681 transitions. [2024-11-24 00:53:19,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:53:19,619 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2024-11-24 00:53:19,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:19,621 INFO L225 Difference]: With dead ends: 503 [2024-11-24 00:53:19,621 INFO L226 Difference]: Without dead ends: 246 [2024-11-24 00:53:19,623 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:53:19,624 INFO L435 NwaCegarLoop]: 46 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:19,624 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 46 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:53:19,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 246 states. [2024-11-24 00:53:19,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 246 to 246. [2024-11-24 00:53:19,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 197 states have (on average 1.2893401015228427) internal successors, (254), 213 states have internal predecessors, (254), 24 states have call successors, (24), 24 states have call predecessors, (24), 24 states have return successors, (30), 24 states have call predecessors, (30), 24 states have call successors, (30) [2024-11-24 00:53:19,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 308 transitions. [2024-11-24 00:53:19,657 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 308 transitions. Word has length 27 [2024-11-24 00:53:19,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:19,657 INFO L471 AbstractCegarLoop]: Abstraction has 246 states and 308 transitions. [2024-11-24 00:53:19,658 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:19,658 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 308 transitions. [2024-11-24 00:53:19,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2024-11-24 00:53:19,660 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:53:19,660 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:53:19,660 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-24 00:53:19,661 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:53:19,661 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:53:19,661 INFO L85 PathProgramCache]: Analyzing trace with hash 1489577750, now seen corresponding path program 1 times [2024-11-24 00:53:19,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:53:19,661 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [990969166] [2024-11-24 00:53:19,662 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:19,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:53:19,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:20,011 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:20,011 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:53:20,012 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [990969166] [2024-11-24 00:53:20,012 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [990969166] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:53:20,012 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [237287471] [2024-11-24 00:53:20,012 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:53:20,012 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:53:20,012 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:53:20,014 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:53:20,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-24 00:53:20,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:53:20,120 INFO L256 TraceCheckSpWp]: Trace formula consists of 198 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-11-24 00:53:20,129 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:53:20,304 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-24 00:53:20,305 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 00:53:20,629 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:53:20,630 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [237287471] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-24 00:53:20,630 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-24 00:53:20,630 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 7] total 17 [2024-11-24 00:53:20,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168405039] [2024-11-24 00:53:20,630 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-24 00:53:20,631 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-11-24 00:53:20,631 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:53:20,632 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-11-24 00:53:20,634 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2024-11-24 00:53:20,634 INFO L87 Difference]: Start difference. First operand 246 states and 308 transitions. Second operand has 18 states, 18 states have (on average 4.888888888888889) internal successors, (88), 15 states have internal predecessors, (88), 5 states have call successors, (11), 7 states have call predecessors, (11), 8 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-24 00:53:20,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:53:20,924 INFO L93 Difference]: Finished difference Result 333 states and 415 transitions. [2024-11-24 00:53:20,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-24 00:53:20,925 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 4.888888888888889) internal successors, (88), 15 states have internal predecessors, (88), 5 states have call successors, (11), 7 states have call predecessors, (11), 8 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 51 [2024-11-24 00:53:20,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:53:20,926 INFO L225 Difference]: With dead ends: 333 [2024-11-24 00:53:20,926 INFO L226 Difference]: Without dead ends: 0 [2024-11-24 00:53:20,927 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 93 SyntacticMatches, 4 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 135 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=162, Invalid=438, Unknown=0, NotChecked=0, Total=600 [2024-11-24 00:53:20,928 INFO L435 NwaCegarLoop]: 59 mSDtfsCounter, 163 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-24 00:53:20,928 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 347 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-24 00:53:20,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-24 00:53:20,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-24 00:53:20,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:53:20,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-24 00:53:20,930 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 51 [2024-11-24 00:53:20,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:53:20,930 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-24 00:53:20,930 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 4.888888888888889) internal successors, (88), 15 states have internal predecessors, (88), 5 states have call successors, (11), 7 states have call predecessors, (11), 8 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-24 00:53:20,930 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-24 00:53:20,931 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-24 00:53:20,933 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-24 00:53:20,942 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-24 00:53:21,134 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:53:21,136 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2024-11-24 00:53:21,138 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-24 00:53:21,899 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-24 00:53:21,911 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 24.11 12:53:21 BoogieIcfgContainer [2024-11-24 00:53:21,912 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-24 00:53:21,912 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-24 00:53:21,912 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-24 00:53:21,913 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-24 00:53:21,913 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:53:17" (3/4) ... [2024-11-24 00:53:21,915 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-24 00:53:21,920 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-24 00:53:21,920 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-24 00:53:21,920 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-24 00:53:21,920 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-24 00:53:21,924 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2024-11-24 00:53:21,925 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-24 00:53:21,925 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-24 00:53:21,925 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:53:21,926 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:53:22,010 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/witness.graphml [2024-11-24 00:53:22,010 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/witness.yml [2024-11-24 00:53:22,010 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-24 00:53:22,011 INFO L158 Benchmark]: Toolchain (without parser) took 5133.55ms. Allocated memory is still 142.6MB. Free memory was 116.7MB in the beginning and 61.8MB in the end (delta: 54.9MB). Peak memory consumption was 56.0MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,011 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 117.4MB. Free memory is still 74.9MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:53:22,012 INFO L158 Benchmark]: CACSL2BoogieTranslator took 527.95ms. Allocated memory is still 142.6MB. Free memory was 116.4MB in the beginning and 98.5MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,012 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.62ms. Allocated memory is still 142.6MB. Free memory was 98.5MB in the beginning and 96.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:53:22,012 INFO L158 Benchmark]: Boogie Preprocessor took 57.88ms. Allocated memory is still 142.6MB. Free memory was 96.9MB in the beginning and 95.1MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,013 INFO L158 Benchmark]: RCFGBuilder took 430.75ms. Allocated memory is still 142.6MB. Free memory was 95.1MB in the beginning and 81.1MB in the end (delta: 14.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,013 INFO L158 Benchmark]: TraceAbstraction took 3961.42ms. Allocated memory is still 142.6MB. Free memory was 80.6MB in the beginning and 67.1MB in the end (delta: 13.5MB). Peak memory consumption was 14.0MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,013 INFO L158 Benchmark]: Witness Printer took 98.04ms. Allocated memory is still 142.6MB. Free memory was 67.1MB in the beginning and 61.8MB in the end (delta: 5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:53:22,015 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 117.4MB. Free memory is still 74.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 527.95ms. Allocated memory is still 142.6MB. Free memory was 116.4MB in the beginning and 98.5MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.62ms. Allocated memory is still 142.6MB. Free memory was 98.5MB in the beginning and 96.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 57.88ms. Allocated memory is still 142.6MB. Free memory was 96.9MB in the beginning and 95.1MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 430.75ms. Allocated memory is still 142.6MB. Free memory was 95.1MB in the beginning and 81.1MB in the end (delta: 14.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 3961.42ms. Allocated memory is still 142.6MB. Free memory was 80.6MB in the beginning and 67.1MB in the end (delta: 13.5MB). Peak memory consumption was 14.0MB. Max. memory is 16.1GB. * Witness Printer took 98.04ms. Allocated memory is still 142.6MB. Free memory was 67.1MB in the beginning and 61.8MB in the end (delta: 5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 135]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [135] - GenericResultAtLocation [Line: 163]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [163] - GenericResultAtLocation [Line: 236]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [236] - GenericResultAtLocation [Line: 387]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [387] - GenericResultAtLocation [Line: 425]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [425] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [521] - GenericResultAtLocation [Line: 887]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [887] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 892]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 5 procedures, 61 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.1s, OverallIterations: 6, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 369 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 364 mSDsluCounter, 1122 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 788 mSDsCounter, 36 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 272 IncrementalHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 36 mSolverCounterUnsat, 334 mSDtfsCounter, 272 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 148 GetRequests, 101 SyntacticMatches, 4 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 153 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=264occurred in iteration=4, InterpolantAutomatonStates: 35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 6 MinimizatonAttempts, 16 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 216 NumberOfCodeBlocks, 216 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 259 ConstructedInterpolants, 0 QuantifiedInterpolants, 723 SizeOfPredicates, 0 NumberOfNonLiveVariables, 198 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 8 InterpolantComputations, 5 PerfectInterpolantSequences, 34/57 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 177]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2024-11-24 00:53:22,034 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c2864a1b-69d1-4a5e-8fc5-3670a9f11532/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE