./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6497de01 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b --- Real Ultimate output --- This is Ultimate 0.3.0-dev-6497de0 [2024-11-24 02:07:34,158 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-24 02:07:34,268 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-24 02:07:34,275 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-24 02:07:34,280 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-24 02:07:34,320 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-24 02:07:34,322 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-24 02:07:34,322 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-24 02:07:34,323 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-24 02:07:34,323 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-24 02:07:34,324 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-24 02:07:34,324 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-24 02:07:34,325 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-24 02:07:34,325 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-24 02:07:34,326 INFO L153 SettingsManager]: * Use SBE=true [2024-11-24 02:07:34,326 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-24 02:07:34,326 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-24 02:07:34,326 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-24 02:07:34,327 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-24 02:07:34,328 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-24 02:07:34,328 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-24 02:07:34,328 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-24 02:07:34,328 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-24 02:07:34,328 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 02:07:34,329 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 02:07:34,329 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 02:07:34,329 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 02:07:34,329 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-24 02:07:34,329 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 02:07:34,329 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 02:07:34,330 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-24 02:07:34,330 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-24 02:07:34,331 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b [2024-11-24 02:07:34,659 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-24 02:07:34,669 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-24 02:07:34,671 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-24 02:07:34,673 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-24 02:07:34,674 INFO L274 PluginConnector]: CDTParser initialized [2024-11-24 02:07:34,675 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2024-11-24 02:07:37,868 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/data/dbebbf5d1/1539aaf6dd0941a88a321c12b5b58c66/FLAG4cbe9effc [2024-11-24 02:07:38,321 INFO L384 CDTParser]: Found 1 translation units. [2024-11-24 02:07:38,326 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2024-11-24 02:07:38,350 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/data/dbebbf5d1/1539aaf6dd0941a88a321c12b5b58c66/FLAG4cbe9effc [2024-11-24 02:07:38,431 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/data/dbebbf5d1/1539aaf6dd0941a88a321c12b5b58c66 [2024-11-24 02:07:38,434 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-24 02:07:38,436 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-24 02:07:38,437 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-24 02:07:38,437 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-24 02:07:38,442 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-24 02:07:38,443 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 02:07:38" (1/1) ... [2024-11-24 02:07:38,444 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c41357f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:38, skipping insertion in model container [2024-11-24 02:07:38,444 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 02:07:38" (1/1) ... [2024-11-24 02:07:38,479 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-24 02:07:38,665 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2024-11-24 02:07:38,831 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 02:07:38,854 INFO L200 MainTranslator]: Completed pre-run [2024-11-24 02:07:38,865 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2024-11-24 02:07:38,867 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] [2024-11-24 02:07:38,868 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [96] [2024-11-24 02:07:38,868 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [287] [2024-11-24 02:07:38,869 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [653] [2024-11-24 02:07:38,870 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [725] [2024-11-24 02:07:38,870 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [823] [2024-11-24 02:07:38,870 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [873] [2024-11-24 02:07:38,884 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2024-11-24 02:07:38,987 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 02:07:39,026 INFO L204 MainTranslator]: Completed translation [2024-11-24 02:07:39,027 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39 WrapperNode [2024-11-24 02:07:39,027 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-24 02:07:39,028 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-24 02:07:39,028 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-24 02:07:39,029 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-24 02:07:39,037 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,058 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,083 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 184 [2024-11-24 02:07:39,083 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-24 02:07:39,084 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-24 02:07:39,084 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-24 02:07:39,084 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-24 02:07:39,092 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,092 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,094 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,106 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-24 02:07:39,107 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,107 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,111 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,112 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,116 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,117 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,118 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,120 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-24 02:07:39,121 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-24 02:07:39,121 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-24 02:07:39,121 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-24 02:07:39,122 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (1/1) ... [2024-11-24 02:07:39,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 02:07:39,146 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 02:07:39,163 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-24 02:07:39,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-24 02:07:39,199 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-24 02:07:39,199 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-24 02:07:39,199 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-24 02:07:39,199 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-24 02:07:39,200 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-24 02:07:39,200 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-24 02:07:39,200 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-24 02:07:39,200 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-24 02:07:39,201 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-24 02:07:39,201 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-11-24 02:07:39,201 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-11-24 02:07:39,201 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-24 02:07:39,201 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-24 02:07:39,202 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-24 02:07:39,202 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-24 02:07:39,202 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-24 02:07:39,274 INFO L234 CfgBuilder]: Building ICFG [2024-11-24 02:07:39,277 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-24 02:07:39,563 INFO L? ?]: Removed 36 outVars from TransFormulas that were not future-live. [2024-11-24 02:07:39,563 INFO L283 CfgBuilder]: Performing block encoding [2024-11-24 02:07:39,579 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-24 02:07:39,579 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-24 02:07:39,579 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 02:07:39 BoogieIcfgContainer [2024-11-24 02:07:39,579 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-24 02:07:39,582 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-24 02:07:39,582 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-24 02:07:39,590 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-24 02:07:39,590 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 24.11 02:07:38" (1/3) ... [2024-11-24 02:07:39,590 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@434f0ca1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 02:07:39, skipping insertion in model container [2024-11-24 02:07:39,591 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 02:07:39" (2/3) ... [2024-11-24 02:07:39,591 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@434f0ca1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 02:07:39, skipping insertion in model container [2024-11-24 02:07:39,591 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 02:07:39" (3/3) ... [2024-11-24 02:07:39,592 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product36.cil.c [2024-11-24 02:07:39,612 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-24 02:07:39,614 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product36.cil.c that has 7 procedures, 83 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-24 02:07:39,674 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-24 02:07:39,687 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39ec94a9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-24 02:07:39,687 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-24 02:07:39,691 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2024-11-24 02:07:39,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-24 02:07:39,700 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:39,701 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:39,701 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:39,707 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:39,707 INFO L85 PathProgramCache]: Analyzing trace with hash 1494671793, now seen corresponding path program 1 times [2024-11-24 02:07:39,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:39,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1362647834] [2024-11-24 02:07:39,715 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:39,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:39,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:39,909 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:39,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:39,912 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1362647834] [2024-11-24 02:07:39,913 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1362647834] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:39,914 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:39,914 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-24 02:07:39,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [231275111] [2024-11-24 02:07:39,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:39,921 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-24 02:07:39,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:39,944 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-24 02:07:39,945 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 02:07:39,948 INFO L87 Difference]: Start difference. First operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:40,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:40,010 INFO L93 Difference]: Finished difference Result 157 states and 214 transitions. [2024-11-24 02:07:40,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-24 02:07:40,012 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-24 02:07:40,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:40,022 INFO L225 Difference]: With dead ends: 157 [2024-11-24 02:07:40,023 INFO L226 Difference]: Without dead ends: 74 [2024-11-24 02:07:40,028 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 02:07:40,033 INFO L435 NwaCegarLoop]: 104 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:40,033 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:40,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-11-24 02:07:40,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2024-11-24 02:07:40,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 63 states have internal predecessors, (76), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2024-11-24 02:07:40,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 95 transitions. [2024-11-24 02:07:40,085 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 95 transitions. Word has length 32 [2024-11-24 02:07:40,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:40,086 INFO L471 AbstractCegarLoop]: Abstraction has 74 states and 95 transitions. [2024-11-24 02:07:40,086 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:40,086 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 95 transitions. [2024-11-24 02:07:40,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-24 02:07:40,089 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:40,089 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:40,089 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-24 02:07:40,090 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:40,092 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:40,092 INFO L85 PathProgramCache]: Analyzing trace with hash 1092631275, now seen corresponding path program 1 times [2024-11-24 02:07:40,092 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:40,092 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494499618] [2024-11-24 02:07:40,093 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:40,093 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:40,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:40,269 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:40,270 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:40,270 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494499618] [2024-11-24 02:07:40,270 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494499618] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:40,270 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:40,270 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 02:07:40,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408824249] [2024-11-24 02:07:40,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:40,271 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 02:07:40,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:40,272 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 02:07:40,272 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:40,272 INFO L87 Difference]: Start difference. First operand 74 states and 95 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:40,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:40,287 INFO L93 Difference]: Finished difference Result 110 states and 141 transitions. [2024-11-24 02:07:40,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 02:07:40,287 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-24 02:07:40,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:40,288 INFO L225 Difference]: With dead ends: 110 [2024-11-24 02:07:40,288 INFO L226 Difference]: Without dead ends: 66 [2024-11-24 02:07:40,289 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:40,290 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 18 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:40,290 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:40,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-11-24 02:07:40,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2024-11-24 02:07:40,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 53 states have (on average 1.320754716981132) internal successors, (70), 58 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-11-24 02:07:40,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 84 transitions. [2024-11-24 02:07:40,298 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 84 transitions. Word has length 32 [2024-11-24 02:07:40,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:40,298 INFO L471 AbstractCegarLoop]: Abstraction has 66 states and 84 transitions. [2024-11-24 02:07:40,298 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:40,298 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 84 transitions. [2024-11-24 02:07:40,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-11-24 02:07:40,300 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:40,300 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:40,300 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-24 02:07:40,300 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:40,300 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:40,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1159229393, now seen corresponding path program 1 times [2024-11-24 02:07:40,301 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:40,301 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2097263337] [2024-11-24 02:07:40,301 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:40,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:40,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:40,471 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:40,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:40,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2097263337] [2024-11-24 02:07:40,472 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2097263337] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:40,472 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:40,472 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 02:07:40,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220908948] [2024-11-24 02:07:40,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:40,473 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 02:07:40,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:40,473 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 02:07:40,474 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:40,474 INFO L87 Difference]: Start difference. First operand 66 states and 84 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:40,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:40,548 INFO L93 Difference]: Finished difference Result 180 states and 235 transitions. [2024-11-24 02:07:40,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 02:07:40,552 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2024-11-24 02:07:40,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:40,553 INFO L225 Difference]: With dead ends: 180 [2024-11-24 02:07:40,554 INFO L226 Difference]: Without dead ends: 122 [2024-11-24 02:07:40,554 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:40,555 INFO L435 NwaCegarLoop]: 98 mSDtfsCounter, 72 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:40,559 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 169 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:40,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2024-11-24 02:07:40,587 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 117. [2024-11-24 02:07:40,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 92 states have (on average 1.3478260869565217) internal successors, (124), 101 states have internal predecessors, (124), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2024-11-24 02:07:40,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 152 transitions. [2024-11-24 02:07:40,589 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 152 transitions. Word has length 37 [2024-11-24 02:07:40,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:40,590 INFO L471 AbstractCegarLoop]: Abstraction has 117 states and 152 transitions. [2024-11-24 02:07:40,590 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:40,590 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 152 transitions. [2024-11-24 02:07:40,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-11-24 02:07:40,592 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:40,592 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:40,592 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-24 02:07:40,592 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:40,592 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:40,593 INFO L85 PathProgramCache]: Analyzing trace with hash -1542397475, now seen corresponding path program 1 times [2024-11-24 02:07:40,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:40,593 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812138054] [2024-11-24 02:07:40,593 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:40,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:40,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:40,829 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-24 02:07:40,829 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:40,829 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812138054] [2024-11-24 02:07:40,829 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1812138054] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:40,829 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:40,829 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-24 02:07:40,830 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888156802] [2024-11-24 02:07:40,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:40,830 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 02:07:40,830 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:40,831 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 02:07:40,831 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-24 02:07:40,831 INFO L87 Difference]: Start difference. First operand 117 states and 152 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:41,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:41,078 INFO L93 Difference]: Finished difference Result 306 states and 406 transitions. [2024-11-24 02:07:41,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-24 02:07:41,079 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 40 [2024-11-24 02:07:41,080 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:41,082 INFO L225 Difference]: With dead ends: 306 [2024-11-24 02:07:41,085 INFO L226 Difference]: Without dead ends: 197 [2024-11-24 02:07:41,087 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-24 02:07:41,091 INFO L435 NwaCegarLoop]: 82 mSDtfsCounter, 41 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:41,091 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 352 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 02:07:41,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2024-11-24 02:07:41,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 197. [2024-11-24 02:07:41,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 152 states have (on average 1.3092105263157894) internal successors, (199), 163 states have internal predecessors, (199), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-24 02:07:41,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 251 transitions. [2024-11-24 02:07:41,138 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 251 transitions. Word has length 40 [2024-11-24 02:07:41,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:41,141 INFO L471 AbstractCegarLoop]: Abstraction has 197 states and 251 transitions. [2024-11-24 02:07:41,141 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 02:07:41,141 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 251 transitions. [2024-11-24 02:07:41,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-24 02:07:41,143 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:41,143 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:41,143 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-24 02:07:41,144 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:41,146 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:41,146 INFO L85 PathProgramCache]: Analyzing trace with hash -2141148922, now seen corresponding path program 1 times [2024-11-24 02:07:41,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:41,146 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1672189918] [2024-11-24 02:07:41,147 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:41,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:41,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:41,379 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:41,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:41,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1672189918] [2024-11-24 02:07:41,380 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1672189918] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:41,380 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:41,380 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 02:07:41,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490902906] [2024-11-24 02:07:41,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:41,380 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 02:07:41,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:41,381 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 02:07:41,381 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 02:07:41,382 INFO L87 Difference]: Start difference. First operand 197 states and 251 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:41,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:41,437 INFO L93 Difference]: Finished difference Result 392 states and 506 transitions. [2024-11-24 02:07:41,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 02:07:41,438 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-24 02:07:41,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:41,440 INFO L225 Difference]: With dead ends: 392 [2024-11-24 02:07:41,441 INFO L226 Difference]: Without dead ends: 203 [2024-11-24 02:07:41,442 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 02:07:41,442 INFO L435 NwaCegarLoop]: 81 mSDtfsCounter, 0 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:41,443 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 317 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:41,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2024-11-24 02:07:41,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 203. [2024-11-24 02:07:41,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203 states, 158 states have (on average 1.2974683544303798) internal successors, (205), 169 states have internal predecessors, (205), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-24 02:07:41,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 257 transitions. [2024-11-24 02:07:41,482 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 257 transitions. Word has length 46 [2024-11-24 02:07:41,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:41,483 INFO L471 AbstractCegarLoop]: Abstraction has 203 states and 257 transitions. [2024-11-24 02:07:41,483 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:41,483 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 257 transitions. [2024-11-24 02:07:41,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-24 02:07:41,485 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:41,485 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:41,486 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-24 02:07:41,486 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:41,486 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:41,487 INFO L85 PathProgramCache]: Analyzing trace with hash 565470472, now seen corresponding path program 1 times [2024-11-24 02:07:41,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:41,487 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678391154] [2024-11-24 02:07:41,487 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:41,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:41,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:41,679 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:41,679 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:41,680 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678391154] [2024-11-24 02:07:41,680 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678391154] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:41,680 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:41,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 02:07:41,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672436941] [2024-11-24 02:07:41,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:41,680 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 02:07:41,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:41,681 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 02:07:41,681 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 02:07:41,681 INFO L87 Difference]: Start difference. First operand 203 states and 257 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:41,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:41,777 INFO L93 Difference]: Finished difference Result 408 states and 526 transitions. [2024-11-24 02:07:41,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-24 02:07:41,778 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-24 02:07:41,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:41,780 INFO L225 Difference]: With dead ends: 408 [2024-11-24 02:07:41,780 INFO L226 Difference]: Without dead ends: 213 [2024-11-24 02:07:41,781 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-24 02:07:41,784 INFO L435 NwaCegarLoop]: 89 mSDtfsCounter, 74 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 330 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:41,784 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 330 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:41,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2024-11-24 02:07:41,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 207. [2024-11-24 02:07:41,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-24 02:07:41,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 261 transitions. [2024-11-24 02:07:41,830 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 261 transitions. Word has length 46 [2024-11-24 02:07:41,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:41,830 INFO L471 AbstractCegarLoop]: Abstraction has 207 states and 261 transitions. [2024-11-24 02:07:41,830 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:41,831 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 261 transitions. [2024-11-24 02:07:41,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-24 02:07:41,832 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:41,832 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:41,833 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-24 02:07:41,833 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:41,838 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:41,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1123473270, now seen corresponding path program 1 times [2024-11-24 02:07:41,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:41,838 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461898291] [2024-11-24 02:07:41,838 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:41,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:41,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:42,015 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:42,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:42,017 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461898291] [2024-11-24 02:07:42,017 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [461898291] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:42,017 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:42,017 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 02:07:42,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603941523] [2024-11-24 02:07:42,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:42,019 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 02:07:42,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:42,021 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 02:07:42,021 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:42,021 INFO L87 Difference]: Start difference. First operand 207 states and 261 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:42,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:42,095 INFO L93 Difference]: Finished difference Result 498 states and 633 transitions. [2024-11-24 02:07:42,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 02:07:42,096 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-24 02:07:42,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:42,099 INFO L225 Difference]: With dead ends: 498 [2024-11-24 02:07:42,103 INFO L226 Difference]: Without dead ends: 299 [2024-11-24 02:07:42,104 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 02:07:42,105 INFO L435 NwaCegarLoop]: 84 mSDtfsCounter, 39 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:42,106 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 153 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 02:07:42,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2024-11-24 02:07:42,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 299. [2024-11-24 02:07:42,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 234 states have (on average 1.2564102564102564) internal successors, (294), 247 states have internal predecessors, (294), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2024-11-24 02:07:42,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 370 transitions. [2024-11-24 02:07:42,160 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 370 transitions. Word has length 46 [2024-11-24 02:07:42,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:42,162 INFO L471 AbstractCegarLoop]: Abstraction has 299 states and 370 transitions. [2024-11-24 02:07:42,163 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 02:07:42,163 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 370 transitions. [2024-11-24 02:07:42,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-24 02:07:42,165 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:42,166 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:42,166 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-24 02:07:42,166 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:42,167 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:42,167 INFO L85 PathProgramCache]: Analyzing trace with hash -2000500624, now seen corresponding path program 1 times [2024-11-24 02:07:42,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:42,168 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [355266033] [2024-11-24 02:07:42,168 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:42,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:42,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:42,555 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 02:07:42,555 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:42,556 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [355266033] [2024-11-24 02:07:42,556 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [355266033] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:42,557 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:42,557 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-24 02:07:42,557 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011998996] [2024-11-24 02:07:42,557 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:42,558 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 02:07:42,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:42,559 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 02:07:42,559 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-24 02:07:42,560 INFO L87 Difference]: Start difference. First operand 299 states and 370 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-24 02:07:43,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:43,158 INFO L93 Difference]: Finished difference Result 1006 states and 1293 transitions. [2024-11-24 02:07:43,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-24 02:07:43,161 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2024-11-24 02:07:43,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:43,171 INFO L225 Difference]: With dead ends: 1006 [2024-11-24 02:07:43,172 INFO L226 Difference]: Without dead ends: 807 [2024-11-24 02:07:43,178 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-11-24 02:07:43,178 INFO L435 NwaCegarLoop]: 131 mSDtfsCounter, 224 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:43,179 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 623 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-24 02:07:43,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 807 states. [2024-11-24 02:07:43,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 807 to 757. [2024-11-24 02:07:43,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 757 states, 596 states have (on average 1.238255033557047) internal successors, (738), 633 states have internal predecessors, (738), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2024-11-24 02:07:43,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 757 states to 757 states and 934 transitions. [2024-11-24 02:07:43,308 INFO L78 Accepts]: Start accepts. Automaton has 757 states and 934 transitions. Word has length 50 [2024-11-24 02:07:43,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:43,311 INFO L471 AbstractCegarLoop]: Abstraction has 757 states and 934 transitions. [2024-11-24 02:07:43,311 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-24 02:07:43,312 INFO L276 IsEmpty]: Start isEmpty. Operand 757 states and 934 transitions. [2024-11-24 02:07:43,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2024-11-24 02:07:43,318 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:43,318 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:43,319 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-24 02:07:43,319 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:43,320 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:43,320 INFO L85 PathProgramCache]: Analyzing trace with hash 814079266, now seen corresponding path program 1 times [2024-11-24 02:07:43,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:43,320 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036716121] [2024-11-24 02:07:43,321 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:43,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:43,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:43,419 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-24 02:07:43,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:43,420 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036716121] [2024-11-24 02:07:43,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036716121] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 02:07:43,420 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 02:07:43,420 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-24 02:07:43,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459600505] [2024-11-24 02:07:43,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 02:07:43,421 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-24 02:07:43,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:43,422 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-24 02:07:43,423 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 02:07:43,423 INFO L87 Difference]: Start difference. First operand 757 states and 934 transitions. Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-24 02:07:43,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:43,587 INFO L93 Difference]: Finished difference Result 1286 states and 1586 transitions. [2024-11-24 02:07:43,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-24 02:07:43,587 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 79 [2024-11-24 02:07:43,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:43,594 INFO L225 Difference]: With dead ends: 1286 [2024-11-24 02:07:43,594 INFO L226 Difference]: Without dead ends: 537 [2024-11-24 02:07:43,597 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 02:07:43,597 INFO L435 NwaCegarLoop]: 126 mSDtfsCounter, 107 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:43,597 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 223 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 02:07:43,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2024-11-24 02:07:43,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 529. [2024-11-24 02:07:43,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 415 states have (on average 1.2240963855421687) internal successors, (508), 441 states have internal predecessors, (508), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2024-11-24 02:07:43,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 642 transitions. [2024-11-24 02:07:43,697 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 642 transitions. Word has length 79 [2024-11-24 02:07:43,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:43,698 INFO L471 AbstractCegarLoop]: Abstraction has 529 states and 642 transitions. [2024-11-24 02:07:43,698 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-24 02:07:43,698 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 642 transitions. [2024-11-24 02:07:43,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-11-24 02:07:43,699 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:43,700 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:43,701 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-24 02:07:43,701 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:43,703 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:43,703 INFO L85 PathProgramCache]: Analyzing trace with hash 1869272307, now seen corresponding path program 1 times [2024-11-24 02:07:43,703 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:43,703 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [454336889] [2024-11-24 02:07:43,704 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:43,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:43,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:43,938 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 02:07:43,939 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:43,939 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [454336889] [2024-11-24 02:07:43,939 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [454336889] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 02:07:43,939 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [228514764] [2024-11-24 02:07:43,939 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:43,939 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 02:07:43,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 02:07:43,943 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 02:07:43,945 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-24 02:07:44,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:44,057 INFO L256 TraceCheckSpWp]: Trace formula consists of 281 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-24 02:07:44,063 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 02:07:44,309 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 02:07:44,309 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 02:07:44,587 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 18 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 02:07:44,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [228514764] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-24 02:07:44,588 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-24 02:07:44,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2024-11-24 02:07:44,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695428617] [2024-11-24 02:07:44,588 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-24 02:07:44,589 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-11-24 02:07:44,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:44,590 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-11-24 02:07:44,591 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2024-11-24 02:07:44,591 INFO L87 Difference]: Start difference. First operand 529 states and 642 transitions. Second operand has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-24 02:07:45,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:45,360 INFO L93 Difference]: Finished difference Result 1088 states and 1355 transitions. [2024-11-24 02:07:45,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2024-11-24 02:07:45,361 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) Word has length 81 [2024-11-24 02:07:45,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:45,366 INFO L225 Difference]: With dead ends: 1088 [2024-11-24 02:07:45,366 INFO L226 Difference]: Without dead ends: 644 [2024-11-24 02:07:45,369 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 158 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=215, Invalid=715, Unknown=0, NotChecked=0, Total=930 [2024-11-24 02:07:45,370 INFO L435 NwaCegarLoop]: 166 mSDtfsCounter, 350 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 98 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 1022 SdHoareTripleChecker+Invalid, 313 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 98 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:45,370 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 1022 Invalid, 313 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [98 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-11-24 02:07:45,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2024-11-24 02:07:45,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 567. [2024-11-24 02:07:45,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 436 states have (on average 1.2087155963302751) internal successors, (527), 466 states have internal predecessors, (527), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2024-11-24 02:07:45,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 675 transitions. [2024-11-24 02:07:45,457 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 675 transitions. Word has length 81 [2024-11-24 02:07:45,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:45,457 INFO L471 AbstractCegarLoop]: Abstraction has 567 states and 675 transitions. [2024-11-24 02:07:45,458 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-24 02:07:45,458 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 675 transitions. [2024-11-24 02:07:45,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 174 [2024-11-24 02:07:45,466 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 02:07:45,467 INFO L218 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:45,479 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-11-24 02:07:45,667 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 02:07:45,668 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 02:07:45,668 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 02:07:45,668 INFO L85 PathProgramCache]: Analyzing trace with hash -894340528, now seen corresponding path program 1 times [2024-11-24 02:07:45,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 02:07:45,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574532689] [2024-11-24 02:07:45,669 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:45,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 02:07:45,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:45,921 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 97 proven. 2 refuted. 0 times theorem prover too weak. 164 trivial. 0 not checked. [2024-11-24 02:07:45,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 02:07:45,921 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574532689] [2024-11-24 02:07:45,921 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574532689] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 02:07:45,921 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1945688959] [2024-11-24 02:07:45,922 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 02:07:45,922 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 02:07:45,922 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 02:07:45,924 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 02:07:45,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-24 02:07:46,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 02:07:46,122 INFO L256 TraceCheckSpWp]: Trace formula consists of 508 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-11-24 02:07:46,127 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 02:07:46,434 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 171 proven. 3 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2024-11-24 02:07:46,434 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 02:07:47,083 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 108 proven. 60 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2024-11-24 02:07:47,083 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1945688959] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-24 02:07:47,083 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-24 02:07:47,083 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 10, 11] total 22 [2024-11-24 02:07:47,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000009770] [2024-11-24 02:07:47,084 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-24 02:07:47,084 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-11-24 02:07:47,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 02:07:47,085 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-11-24 02:07:47,086 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=363, Unknown=0, NotChecked=0, Total=462 [2024-11-24 02:07:47,086 INFO L87 Difference]: Start difference. First operand 567 states and 675 transitions. Second operand has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) [2024-11-24 02:07:47,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 02:07:47,920 INFO L93 Difference]: Finished difference Result 1321 states and 1614 transitions. [2024-11-24 02:07:47,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-11-24 02:07:47,920 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) Word has length 173 [2024-11-24 02:07:47,921 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 02:07:47,922 INFO L225 Difference]: With dead ends: 1321 [2024-11-24 02:07:47,922 INFO L226 Difference]: Without dead ends: 0 [2024-11-24 02:07:47,925 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 369 GetRequests, 333 SyntacticMatches, 3 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 170 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=275, Invalid=915, Unknown=0, NotChecked=0, Total=1190 [2024-11-24 02:07:47,925 INFO L435 NwaCegarLoop]: 102 mSDtfsCounter, 349 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 544 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 914 SdHoareTripleChecker+Invalid, 665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 544 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-11-24 02:07:47,926 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [352 Valid, 914 Invalid, 665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 544 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-11-24 02:07:47,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-24 02:07:47,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-24 02:07:47,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 02:07:47,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-24 02:07:47,927 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 173 [2024-11-24 02:07:47,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 02:07:47,927 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-24 02:07:47,928 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) [2024-11-24 02:07:47,928 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-24 02:07:47,928 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-24 02:07:47,930 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-24 02:07:47,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-11-24 02:07:48,131 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 02:07:48,134 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 02:07:48,137 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-24 02:07:54,472 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-24 02:07:54,485 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 24.11 02:07:54 BoogieIcfgContainer [2024-11-24 02:07:54,485 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-24 02:07:54,486 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-24 02:07:54,486 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-24 02:07:54,486 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-24 02:07:54,487 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 02:07:39" (3/4) ... [2024-11-24 02:07:54,489 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-24 02:07:54,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-24 02:07:54,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-24 02:07:54,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-24 02:07:54,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-24 02:07:54,496 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-24 02:07:54,496 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-11-24 02:07:54,511 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2024-11-24 02:07:54,511 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-24 02:07:54,512 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-24 02:07:54,512 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 02:07:54,512 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 02:07:54,649 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/witness.graphml [2024-11-24 02:07:54,650 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/witness.yml [2024-11-24 02:07:54,650 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-24 02:07:54,653 INFO L158 Benchmark]: Toolchain (without parser) took 16215.33ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 93.2MB in the beginning and 316.7MB in the end (delta: -223.5MB). Peak memory consumption was 208.6MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,653 INFO L158 Benchmark]: CDTParser took 0.46ms. Allocated memory is still 167.8MB. Free memory is still 104.1MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 02:07:54,653 INFO L158 Benchmark]: CACSL2BoogieTranslator took 590.32ms. Allocated memory is still 117.4MB. Free memory was 93.2MB in the beginning and 74.4MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,654 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.49ms. Allocated memory is still 117.4MB. Free memory was 74.4MB in the beginning and 72.6MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 02:07:54,654 INFO L158 Benchmark]: Boogie Preprocessor took 36.18ms. Allocated memory is still 117.4MB. Free memory was 72.6MB in the beginning and 70.6MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,655 INFO L158 Benchmark]: RCFGBuilder took 458.87ms. Allocated memory is still 117.4MB. Free memory was 70.6MB in the beginning and 55.0MB in the end (delta: 15.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,655 INFO L158 Benchmark]: TraceAbstraction took 14903.51ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 54.2MB in the beginning and 123.7MB in the end (delta: -69.5MB). Peak memory consumption was 167.4MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,656 INFO L158 Benchmark]: Witness Printer took 164.12ms. Allocated memory is still 352.3MB. Free memory was 123.7MB in the beginning and 316.7MB in the end (delta: -193.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 02:07:54,658 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.46ms. Allocated memory is still 167.8MB. Free memory is still 104.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 590.32ms. Allocated memory is still 117.4MB. Free memory was 93.2MB in the beginning and 74.4MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.49ms. Allocated memory is still 117.4MB. Free memory was 74.4MB in the beginning and 72.6MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 36.18ms. Allocated memory is still 117.4MB. Free memory was 72.6MB in the beginning and 70.6MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 458.87ms. Allocated memory is still 117.4MB. Free memory was 70.6MB in the beginning and 55.0MB in the end (delta: 15.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 14903.51ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 54.2MB in the beginning and 123.7MB in the end (delta: -69.5MB). Peak memory consumption was 167.4MB. Max. memory is 16.1GB. * Witness Printer took 164.12ms. Allocated memory is still 352.3MB. Free memory was 123.7MB in the beginning and 316.7MB in the end (delta: -193.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [96] - GenericResultAtLocation [Line: 287]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [287] - GenericResultAtLocation [Line: 653]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [653] - GenericResultAtLocation [Line: 725]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [725] - GenericResultAtLocation [Line: 823]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [823] - GenericResultAtLocation [Line: 873]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [873] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 92]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.5s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1291 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1274 mSDsluCounter, 4352 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3206 mSDsCounter, 275 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1100 IncrementalHoareTripleChecker+Invalid, 1375 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 275 mSolverCounterUnsat, 1146 mSDtfsCounter, 1100 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 615 GetRequests, 515 SyntacticMatches, 7 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 404 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=757occurred in iteration=8, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 146 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 916 NumberOfCodeBlocks, 916 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1155 ConstructedInterpolants, 0 QuantifiedInterpolants, 2326 SizeOfPredicates, 2 NumberOfNonLiveVariables, 789 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 840/927 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 666]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 737]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-11-24 02:07:54,683 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6d0cffd-8ce8-48e6-98b1-98a02cd87b34/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE