./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6497de01 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 76f5874bdc2210da6be360b9991ed804689b1623a0180577df5607e0ad5d02da --- Real Ultimate output --- This is Ultimate 0.3.0-dev-6497de0 [2024-11-24 00:16:31,167 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-24 00:16:31,298 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-24 00:16:31,312 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-24 00:16:31,316 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-24 00:16:31,366 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-24 00:16:31,366 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-24 00:16:31,367 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-24 00:16:31,368 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-24 00:16:31,368 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-24 00:16:31,369 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-24 00:16:31,369 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-24 00:16:31,369 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-24 00:16:31,369 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-24 00:16:31,369 INFO L153 SettingsManager]: * Use SBE=true [2024-11-24 00:16:31,370 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-24 00:16:31,370 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-24 00:16:31,370 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-24 00:16:31,372 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-24 00:16:31,372 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-24 00:16:31,372 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-24 00:16:31,372 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-24 00:16:31,372 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-24 00:16:31,373 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-24 00:16:31,373 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:16:31,375 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:16:31,375 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:16:31,375 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:16:31,375 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-24 00:16:31,376 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:16:31,376 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:16:31,376 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:16:31,376 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:16:31,376 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-24 00:16:31,376 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-24 00:16:31,377 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-24 00:16:31,378 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-24 00:16:31,378 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 76f5874bdc2210da6be360b9991ed804689b1623a0180577df5607e0ad5d02da [2024-11-24 00:16:31,758 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-24 00:16:31,772 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-24 00:16:31,779 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-24 00:16:31,782 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-24 00:16:31,783 INFO L274 PluginConnector]: CDTParser initialized [2024-11-24 00:16:31,786 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c [2024-11-24 00:16:35,718 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/data/fe72e2978/a3ba0af63e534f13b6f0705afdfc73d2/FLAGff2ffd894 [2024-11-24 00:16:36,171 INFO L384 CDTParser]: Found 1 translation units. [2024-11-24 00:16:36,172 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c [2024-11-24 00:16:36,187 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/data/fe72e2978/a3ba0af63e534f13b6f0705afdfc73d2/FLAGff2ffd894 [2024-11-24 00:16:36,206 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/data/fe72e2978/a3ba0af63e534f13b6f0705afdfc73d2 [2024-11-24 00:16:36,210 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-24 00:16:36,212 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-24 00:16:36,214 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-24 00:16:36,214 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-24 00:16:36,224 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-24 00:16:36,225 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,226 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4bb8196 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36, skipping insertion in model container [2024-11-24 00:16:36,227 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,265 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-24 00:16:36,579 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c[3693,3706] [2024-11-24 00:16:36,730 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:16:36,750 INFO L200 MainTranslator]: Completed pre-run [2024-11-24 00:16:36,762 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2024-11-24 00:16:36,764 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [101] [2024-11-24 00:16:36,765 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [206] [2024-11-24 00:16:36,765 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [215] [2024-11-24 00:16:36,766 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [250] [2024-11-24 00:16:36,766 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [616] [2024-11-24 00:16:36,766 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] [2024-11-24 00:16:36,766 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] [2024-11-24 00:16:36,780 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c[3693,3706] [2024-11-24 00:16:36,850 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:16:36,875 INFO L204 MainTranslator]: Completed translation [2024-11-24 00:16:36,876 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36 WrapperNode [2024-11-24 00:16:36,876 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-24 00:16:36,878 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-24 00:16:36,878 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-24 00:16:36,878 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-24 00:16:36,886 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,901 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,937 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 200 [2024-11-24 00:16:36,938 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-24 00:16:36,938 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-24 00:16:36,938 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-24 00:16:36,939 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-24 00:16:36,957 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,958 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,961 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,998 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-24 00:16:36,998 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:36,998 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,004 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,005 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,010 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,012 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,013 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,016 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-24 00:16:37,017 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-24 00:16:37,017 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-24 00:16:37,017 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-24 00:16:37,019 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (1/1) ... [2024-11-24 00:16:37,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:16:37,044 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:16:37,063 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-24 00:16:37,068 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-24 00:16:37,105 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-24 00:16:37,105 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-24 00:16:37,105 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-24 00:16:37,105 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-24 00:16:37,105 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-24 00:16:37,106 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-24 00:16:37,107 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-24 00:16:37,107 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-24 00:16:37,108 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-24 00:16:37,108 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-11-24 00:16:37,109 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-11-24 00:16:37,109 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-24 00:16:37,109 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-24 00:16:37,110 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-24 00:16:37,110 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-24 00:16:37,110 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-24 00:16:37,232 INFO L234 CfgBuilder]: Building ICFG [2024-11-24 00:16:37,236 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-24 00:16:37,653 INFO L? ?]: Removed 42 outVars from TransFormulas that were not future-live. [2024-11-24 00:16:37,653 INFO L283 CfgBuilder]: Performing block encoding [2024-11-24 00:16:37,676 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-24 00:16:37,677 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-24 00:16:37,677 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:16:37 BoogieIcfgContainer [2024-11-24 00:16:37,677 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-24 00:16:37,684 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-24 00:16:37,684 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-24 00:16:37,692 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-24 00:16:37,693 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 24.11 12:16:36" (1/3) ... [2024-11-24 00:16:37,694 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2aba79e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:16:37, skipping insertion in model container [2024-11-24 00:16:37,694 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:16:36" (2/3) ... [2024-11-24 00:16:37,694 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2aba79e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:16:37, skipping insertion in model container [2024-11-24 00:16:37,694 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:16:37" (3/3) ... [2024-11-24 00:16:37,696 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product42.cil.c [2024-11-24 00:16:37,722 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-24 00:16:37,724 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product42.cil.c that has 7 procedures, 83 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-24 00:16:37,821 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-24 00:16:37,845 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4ad414ab, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-24 00:16:37,846 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-24 00:16:37,851 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2024-11-24 00:16:37,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-24 00:16:37,867 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:37,868 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:37,868 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:37,875 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:37,875 INFO L85 PathProgramCache]: Analyzing trace with hash -1729644157, now seen corresponding path program 1 times [2024-11-24 00:16:37,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:37,890 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731199269] [2024-11-24 00:16:37,890 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:37,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:38,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:38,379 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:38,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:38,383 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731199269] [2024-11-24 00:16:38,384 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731199269] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:38,384 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:38,384 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:16:38,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650532606] [2024-11-24 00:16:38,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:38,391 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:16:38,392 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:38,413 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:16:38,414 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:38,416 INFO L87 Difference]: Start difference. First operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 00:16:38,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:38,458 INFO L93 Difference]: Finished difference Result 145 states and 194 transitions. [2024-11-24 00:16:38,460 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:16:38,461 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-24 00:16:38,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:38,471 INFO L225 Difference]: With dead ends: 145 [2024-11-24 00:16:38,472 INFO L226 Difference]: Without dead ends: 66 [2024-11-24 00:16:38,478 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:38,485 INFO L435 NwaCegarLoop]: 87 mSDtfsCounter, 13 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:38,487 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 158 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:38,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-11-24 00:16:38,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2024-11-24 00:16:38,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 53 states have (on average 1.320754716981132) internal successors, (70), 58 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-11-24 00:16:38,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 84 transitions. [2024-11-24 00:16:38,547 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 84 transitions. Word has length 32 [2024-11-24 00:16:38,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:38,549 INFO L471 AbstractCegarLoop]: Abstraction has 66 states and 84 transitions. [2024-11-24 00:16:38,550 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 00:16:38,550 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 84 transitions. [2024-11-24 00:16:38,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-11-24 00:16:38,555 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:38,555 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:38,556 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-24 00:16:38,557 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:38,558 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:38,558 INFO L85 PathProgramCache]: Analyzing trace with hash -2019759696, now seen corresponding path program 1 times [2024-11-24 00:16:38,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:38,559 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1650649717] [2024-11-24 00:16:38,559 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:38,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:38,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:38,804 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:38,804 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:38,804 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1650649717] [2024-11-24 00:16:38,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1650649717] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:38,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:38,805 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:16:38,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746361500] [2024-11-24 00:16:38,805 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:38,806 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:16:38,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:38,807 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:16:38,807 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:38,808 INFO L87 Difference]: Start difference. First operand 66 states and 84 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:38,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:38,857 INFO L93 Difference]: Finished difference Result 124 states and 161 transitions. [2024-11-24 00:16:38,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:16:38,861 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2024-11-24 00:16:38,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:38,862 INFO L225 Difference]: With dead ends: 124 [2024-11-24 00:16:38,863 INFO L226 Difference]: Without dead ends: 66 [2024-11-24 00:16:38,863 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:38,864 INFO L435 NwaCegarLoop]: 82 mSDtfsCounter, 74 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:38,865 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 82 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:38,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-11-24 00:16:38,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2024-11-24 00:16:38,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 53 states have (on average 1.3018867924528301) internal successors, (69), 58 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-11-24 00:16:38,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 83 transitions. [2024-11-24 00:16:38,878 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 83 transitions. Word has length 37 [2024-11-24 00:16:38,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:38,880 INFO L471 AbstractCegarLoop]: Abstraction has 66 states and 83 transitions. [2024-11-24 00:16:38,880 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:38,881 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 83 transitions. [2024-11-24 00:16:38,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2024-11-24 00:16:38,882 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:38,882 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:38,882 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-24 00:16:38,883 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:38,883 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:38,884 INFO L85 PathProgramCache]: Analyzing trace with hash -2134310885, now seen corresponding path program 1 times [2024-11-24 00:16:38,884 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:38,884 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1922265951] [2024-11-24 00:16:38,884 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:38,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:38,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:39,060 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:39,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:39,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1922265951] [2024-11-24 00:16:39,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1922265951] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:39,060 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:39,060 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:16:39,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1351701608] [2024-11-24 00:16:39,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:39,061 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:16:39,061 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:39,062 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:16:39,062 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:39,062 INFO L87 Difference]: Start difference. First operand 66 states and 83 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-24 00:16:39,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:39,133 INFO L93 Difference]: Finished difference Result 168 states and 216 transitions. [2024-11-24 00:16:39,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:16:39,134 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 42 [2024-11-24 00:16:39,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:39,136 INFO L225 Difference]: With dead ends: 168 [2024-11-24 00:16:39,136 INFO L226 Difference]: Without dead ends: 110 [2024-11-24 00:16:39,137 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:39,141 INFO L435 NwaCegarLoop]: 87 mSDtfsCounter, 52 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:39,142 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 142 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:39,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2024-11-24 00:16:39,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 108. [2024-11-24 00:16:39,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 85 states have (on average 1.2941176470588236) internal successors, (110), 92 states have internal predecessors, (110), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2024-11-24 00:16:39,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 136 transitions. [2024-11-24 00:16:39,189 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 136 transitions. Word has length 42 [2024-11-24 00:16:39,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:39,189 INFO L471 AbstractCegarLoop]: Abstraction has 108 states and 136 transitions. [2024-11-24 00:16:39,189 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-24 00:16:39,190 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 136 transitions. [2024-11-24 00:16:39,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2024-11-24 00:16:39,191 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:39,191 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:39,191 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-24 00:16:39,192 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:39,194 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:39,195 INFO L85 PathProgramCache]: Analyzing trace with hash 922673731, now seen corresponding path program 1 times [2024-11-24 00:16:39,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:39,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599180816] [2024-11-24 00:16:39,199 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:39,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:39,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:39,531 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-24 00:16:39,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:39,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599180816] [2024-11-24 00:16:39,532 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [599180816] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:39,532 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:39,532 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-24 00:16:39,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1978480759] [2024-11-24 00:16:39,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:39,533 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:16:39,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:39,533 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:16:39,534 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-24 00:16:39,534 INFO L87 Difference]: Start difference. First operand 108 states and 136 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-24 00:16:39,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:39,797 INFO L93 Difference]: Finished difference Result 207 states and 264 transitions. [2024-11-24 00:16:39,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-24 00:16:39,800 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2024-11-24 00:16:39,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:39,802 INFO L225 Difference]: With dead ends: 207 [2024-11-24 00:16:39,802 INFO L226 Difference]: Without dead ends: 107 [2024-11-24 00:16:39,803 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:16:39,806 INFO L435 NwaCegarLoop]: 81 mSDtfsCounter, 35 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:39,807 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 349 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:16:39,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2024-11-24 00:16:39,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 107. [2024-11-24 00:16:39,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 84 states have (on average 1.2738095238095237) internal successors, (107), 91 states have internal predecessors, (107), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2024-11-24 00:16:39,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 133 transitions. [2024-11-24 00:16:39,834 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 133 transitions. Word has length 48 [2024-11-24 00:16:39,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:39,834 INFO L471 AbstractCegarLoop]: Abstraction has 107 states and 133 transitions. [2024-11-24 00:16:39,835 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-24 00:16:39,835 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 133 transitions. [2024-11-24 00:16:39,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-24 00:16:39,836 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:39,836 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:39,837 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-24 00:16:39,839 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:39,840 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:39,840 INFO L85 PathProgramCache]: Analyzing trace with hash -1398776075, now seen corresponding path program 1 times [2024-11-24 00:16:39,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:39,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746803730] [2024-11-24 00:16:39,841 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:39,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:39,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:40,072 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:40,072 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:40,073 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746803730] [2024-11-24 00:16:40,073 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746803730] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:40,073 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:40,073 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:16:40,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1037132841] [2024-11-24 00:16:40,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:40,074 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 00:16:40,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:40,074 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 00:16:40,074 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:16:40,077 INFO L87 Difference]: Start difference. First operand 107 states and 133 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:40,153 INFO L93 Difference]: Finished difference Result 209 states and 266 transitions. [2024-11-24 00:16:40,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 00:16:40,154 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2024-11-24 00:16:40,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:40,156 INFO L225 Difference]: With dead ends: 209 [2024-11-24 00:16:40,156 INFO L226 Difference]: Without dead ends: 110 [2024-11-24 00:16:40,157 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:16:40,158 INFO L435 NwaCegarLoop]: 80 mSDtfsCounter, 0 mSDsluCounter, 233 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:40,158 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 313 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:40,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2024-11-24 00:16:40,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 110. [2024-11-24 00:16:40,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 87 states have (on average 1.264367816091954) internal successors, (110), 94 states have internal predecessors, (110), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2024-11-24 00:16:40,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 136 transitions. [2024-11-24 00:16:40,191 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 136 transitions. Word has length 50 [2024-11-24 00:16:40,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:40,192 INFO L471 AbstractCegarLoop]: Abstraction has 110 states and 136 transitions. [2024-11-24 00:16:40,192 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,192 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 136 transitions. [2024-11-24 00:16:40,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-24 00:16:40,197 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:40,197 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:40,198 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-24 00:16:40,198 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:40,198 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:40,198 INFO L85 PathProgramCache]: Analyzing trace with hash -976074249, now seen corresponding path program 1 times [2024-11-24 00:16:40,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:40,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1602193714] [2024-11-24 00:16:40,199 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:40,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:40,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:40,363 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:40,364 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:40,364 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1602193714] [2024-11-24 00:16:40,364 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1602193714] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:40,364 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:40,364 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-24 00:16:40,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247965629] [2024-11-24 00:16:40,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:40,365 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-24 00:16:40,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:40,365 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-24 00:16:40,366 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:16:40,366 INFO L87 Difference]: Start difference. First operand 110 states and 136 transitions. Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:40,413 INFO L93 Difference]: Finished difference Result 214 states and 271 transitions. [2024-11-24 00:16:40,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-24 00:16:40,414 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2024-11-24 00:16:40,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:40,417 INFO L225 Difference]: With dead ends: 214 [2024-11-24 00:16:40,417 INFO L226 Difference]: Without dead ends: 112 [2024-11-24 00:16:40,418 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:16:40,422 INFO L435 NwaCegarLoop]: 81 mSDtfsCounter, 0 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:40,422 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 237 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:40,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2024-11-24 00:16:40,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 112. [2024-11-24 00:16:40,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 89 states have (on average 1.2584269662921348) internal successors, (112), 96 states have internal predecessors, (112), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2024-11-24 00:16:40,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 138 transitions. [2024-11-24 00:16:40,451 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 138 transitions. Word has length 50 [2024-11-24 00:16:40,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:40,455 INFO L471 AbstractCegarLoop]: Abstraction has 112 states and 138 transitions. [2024-11-24 00:16:40,455 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,455 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 138 transitions. [2024-11-24 00:16:40,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-24 00:16:40,456 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:40,457 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:40,457 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-24 00:16:40,457 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:40,458 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:40,462 INFO L85 PathProgramCache]: Analyzing trace with hash 1513454713, now seen corresponding path program 1 times [2024-11-24 00:16:40,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:40,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2044409760] [2024-11-24 00:16:40,462 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:40,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:40,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:40,642 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:40,642 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:40,642 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2044409760] [2024-11-24 00:16:40,643 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2044409760] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:40,643 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:40,643 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:16:40,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433460607] [2024-11-24 00:16:40,643 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:40,643 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:16:40,644 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:40,645 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:16:40,646 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:40,646 INFO L87 Difference]: Start difference. First operand 112 states and 138 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:40,708 INFO L93 Difference]: Finished difference Result 261 states and 326 transitions. [2024-11-24 00:16:40,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:16:40,710 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2024-11-24 00:16:40,710 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:40,712 INFO L225 Difference]: With dead ends: 261 [2024-11-24 00:16:40,714 INFO L226 Difference]: Without dead ends: 157 [2024-11-24 00:16:40,715 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:16:40,716 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 35 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:40,717 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 151 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:16:40,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2024-11-24 00:16:40,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2024-11-24 00:16:40,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 124 states have (on average 1.2338709677419355) internal successors, (153), 132 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 14 states have return successors, (20), 17 states have call predecessors, (20), 18 states have call successors, (20) [2024-11-24 00:16:40,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 191 transitions. [2024-11-24 00:16:40,760 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 191 transitions. Word has length 50 [2024-11-24 00:16:40,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:40,761 INFO L471 AbstractCegarLoop]: Abstraction has 157 states and 191 transitions. [2024-11-24 00:16:40,761 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:16:40,762 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 191 transitions. [2024-11-24 00:16:40,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-11-24 00:16:40,763 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:40,763 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:40,763 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-24 00:16:40,764 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:40,764 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:40,764 INFO L85 PathProgramCache]: Analyzing trace with hash -1559011553, now seen corresponding path program 1 times [2024-11-24 00:16:40,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:40,764 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527866367] [2024-11-24 00:16:40,764 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:40,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:40,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:41,179 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-24 00:16:41,180 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:41,180 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527866367] [2024-11-24 00:16:41,181 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527866367] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:16:41,181 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:16:41,181 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-24 00:16:41,181 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [236308837] [2024-11-24 00:16:41,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:16:41,182 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:16:41,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:41,184 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:16:41,184 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-24 00:16:41,184 INFO L87 Difference]: Start difference. First operand 157 states and 191 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-24 00:16:41,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:41,769 INFO L93 Difference]: Finished difference Result 524 states and 663 transitions. [2024-11-24 00:16:41,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-24 00:16:41,770 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 54 [2024-11-24 00:16:41,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:41,776 INFO L225 Difference]: With dead ends: 524 [2024-11-24 00:16:41,780 INFO L226 Difference]: Without dead ends: 420 [2024-11-24 00:16:41,781 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-11-24 00:16:41,782 INFO L435 NwaCegarLoop]: 123 mSDtfsCounter, 254 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 546 SdHoareTripleChecker+Invalid, 229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:41,783 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 546 Invalid, 229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-24 00:16:41,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 420 states. [2024-11-24 00:16:41,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 420 to 393. [2024-11-24 00:16:41,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 393 states, 312 states have (on average 1.2211538461538463) internal successors, (381), 334 states have internal predecessors, (381), 44 states have call successors, (44), 33 states have call predecessors, (44), 36 states have return successors, (54), 42 states have call predecessors, (54), 44 states have call successors, (54) [2024-11-24 00:16:41,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 393 states to 393 states and 479 transitions. [2024-11-24 00:16:41,872 INFO L78 Accepts]: Start accepts. Automaton has 393 states and 479 transitions. Word has length 54 [2024-11-24 00:16:41,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:41,872 INFO L471 AbstractCegarLoop]: Abstraction has 393 states and 479 transitions. [2024-11-24 00:16:41,872 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-24 00:16:41,874 INFO L276 IsEmpty]: Start isEmpty. Operand 393 states and 479 transitions. [2024-11-24 00:16:41,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2024-11-24 00:16:41,876 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:16:41,876 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:41,876 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-24 00:16:41,877 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:16:41,881 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:16:41,882 INFO L85 PathProgramCache]: Analyzing trace with hash 1419049522, now seen corresponding path program 1 times [2024-11-24 00:16:41,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:16:41,882 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1946179622] [2024-11-24 00:16:41,886 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:41,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:16:41,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:42,245 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 00:16:42,245 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:16:42,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1946179622] [2024-11-24 00:16:42,245 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1946179622] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:16:42,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1563307830] [2024-11-24 00:16:42,246 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:16:42,246 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:16:42,246 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:16:42,252 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:16:42,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-24 00:16:42,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:16:42,426 INFO L256 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-24 00:16:42,442 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:16:42,711 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:16:42,712 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 00:16:43,066 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 18 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 00:16:43,066 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1563307830] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-24 00:16:43,066 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-24 00:16:43,067 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2024-11-24 00:16:43,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093677659] [2024-11-24 00:16:43,071 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-24 00:16:43,072 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-11-24 00:16:43,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:16:43,073 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-11-24 00:16:43,073 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2024-11-24 00:16:43,073 INFO L87 Difference]: Start difference. First operand 393 states and 479 transitions. Second operand has 14 states, 14 states have (on average 8.642857142857142) internal successors, (121), 12 states have internal predecessors, (121), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-24 00:16:43,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:16:43,666 INFO L93 Difference]: Finished difference Result 624 states and 786 transitions. [2024-11-24 00:16:43,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-24 00:16:43,667 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.642857142857142) internal successors, (121), 12 states have internal predecessors, (121), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) Word has length 85 [2024-11-24 00:16:43,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:16:43,669 INFO L225 Difference]: With dead ends: 624 [2024-11-24 00:16:43,669 INFO L226 Difference]: Without dead ends: 0 [2024-11-24 00:16:43,671 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 165 SyntacticMatches, 4 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=119, Invalid=343, Unknown=0, NotChecked=0, Total=462 [2024-11-24 00:16:43,672 INFO L435 NwaCegarLoop]: 150 mSDtfsCounter, 282 mSDsluCounter, 804 mSDsCounter, 0 mSdLazyCounter, 222 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 954 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 222 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-11-24 00:16:43,673 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 954 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 222 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-11-24 00:16:43,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-24 00:16:43,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-24 00:16:43,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:16:43,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-24 00:16:43,679 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 85 [2024-11-24 00:16:43,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:16:43,680 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-24 00:16:43,680 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.642857142857142) internal successors, (121), 12 states have internal predecessors, (121), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-24 00:16:43,680 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-24 00:16:43,681 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-24 00:16:43,684 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-24 00:16:43,699 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-24 00:16:43,887 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:16:43,891 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:16:43,894 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-24 00:16:47,204 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-24 00:16:47,233 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 24.11 12:16:47 BoogieIcfgContainer [2024-11-24 00:16:47,233 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-24 00:16:47,234 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-24 00:16:47,234 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-24 00:16:47,235 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-24 00:16:47,236 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:16:37" (3/4) ... [2024-11-24 00:16:47,238 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-24 00:16:47,245 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-24 00:16:47,245 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-24 00:16:47,246 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-24 00:16:47,246 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-24 00:16:47,246 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-24 00:16:47,246 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-11-24 00:16:47,258 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2024-11-24 00:16:47,259 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-24 00:16:47,259 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-24 00:16:47,260 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:16:47,261 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:16:47,413 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/witness.graphml [2024-11-24 00:16:47,413 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/witness.yml [2024-11-24 00:16:47,414 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-24 00:16:47,416 INFO L158 Benchmark]: Toolchain (without parser) took 11203.31ms. Allocated memory is still 117.4MB. Free memory was 91.9MB in the beginning and 61.0MB in the end (delta: 30.9MB). Peak memory consumption was 31.3MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,417 INFO L158 Benchmark]: CDTParser took 0.40ms. Allocated memory is still 117.4MB. Free memory is still 74.4MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:16:47,418 INFO L158 Benchmark]: CACSL2BoogieTranslator took 663.31ms. Allocated memory is still 117.4MB. Free memory was 91.7MB in the beginning and 73.0MB in the end (delta: 18.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,418 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.13ms. Allocated memory is still 117.4MB. Free memory was 73.0MB in the beginning and 71.1MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,419 INFO L158 Benchmark]: Boogie Preprocessor took 77.87ms. Allocated memory is still 117.4MB. Free memory was 71.1MB in the beginning and 69.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:16:47,420 INFO L158 Benchmark]: RCFGBuilder took 660.37ms. Allocated memory is still 117.4MB. Free memory was 69.2MB in the beginning and 53.5MB in the end (delta: 15.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,420 INFO L158 Benchmark]: TraceAbstraction took 9549.36ms. Allocated memory is still 117.4MB. Free memory was 52.8MB in the beginning and 66.9MB in the end (delta: -14.1MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,420 INFO L158 Benchmark]: Witness Printer took 179.63ms. Allocated memory is still 117.4MB. Free memory was 66.9MB in the beginning and 61.0MB in the end (delta: 5.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:16:47,426 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.40ms. Allocated memory is still 117.4MB. Free memory is still 74.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 663.31ms. Allocated memory is still 117.4MB. Free memory was 91.7MB in the beginning and 73.0MB in the end (delta: 18.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.13ms. Allocated memory is still 117.4MB. Free memory was 73.0MB in the beginning and 71.1MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 77.87ms. Allocated memory is still 117.4MB. Free memory was 71.1MB in the beginning and 69.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 660.37ms. Allocated memory is still 117.4MB. Free memory was 69.2MB in the beginning and 53.5MB in the end (delta: 15.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9549.36ms. Allocated memory is still 117.4MB. Free memory was 52.8MB in the beginning and 66.9MB in the end (delta: -14.1MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. * Witness Printer took 179.63ms. Allocated memory is still 117.4MB. Free memory was 66.9MB in the beginning and 61.0MB in the end (delta: 5.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [101] - GenericResultAtLocation [Line: 206]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [206] - GenericResultAtLocation [Line: 215]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [215] - GenericResultAtLocation [Line: 250]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [250] - GenericResultAtLocation [Line: 616]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [616] - GenericResultAtLocation [Line: 714]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] - GenericResultAtLocation [Line: 782]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 211]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.1s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 756 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 745 mSDsluCounter, 2932 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2078 mSDsCounter, 130 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 499 IncrementalHoareTripleChecker+Invalid, 629 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 130 mSolverCounterUnsat, 854 mSDtfsCounter, 499 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 238 GetRequests, 187 SyntacticMatches, 4 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 112 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=393occurred in iteration=8, InterpolantAutomatonStates: 50, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 9 MinimizatonAttempts, 29 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 533 NumberOfCodeBlocks, 533 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 607 ConstructedInterpolants, 0 QuantifiedInterpolants, 1267 SizeOfPredicates, 2 NumberOfNonLiveVariables, 298 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 11 InterpolantComputations, 8 PerfectInterpolantSequences, 89/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 725]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((((1 == systemActive) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1)) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) RESULT: Ultimate proved your program to be correct! [2024-11-24 00:16:47,457 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0b8f6e9-4319-4b34-bc39-25e057ea582b/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE