./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-11-27 23:38:27,076 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-27 23:38:27,177 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-27 23:38:27,190 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-27 23:38:27,190 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-27 23:38:27,237 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-27 23:38:27,238 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-27 23:38:27,238 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-27 23:38:27,239 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-27 23:38:27,239 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-27 23:38:27,240 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-27 23:38:27,240 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-27 23:38:27,241 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-27 23:38:27,241 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-27 23:38:27,242 INFO L153 SettingsManager]: * Use SBE=true [2024-11-27 23:38:27,242 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-27 23:38:27,242 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-27 23:38:27,242 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-27 23:38:27,243 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-27 23:38:27,244 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-27 23:38:27,244 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-27 23:38:27,245 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-27 23:38:27,246 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-27 23:38:27,246 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-27 23:38:27,246 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-27 23:38:27,246 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-27 23:38:27,246 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-27 23:38:27,246 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-27 23:38:27,247 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-27 23:38:27,247 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-27 23:38:27,247 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-27 23:38:27,247 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-27 23:38:27,247 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-27 23:38:27,247 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-27 23:38:27,248 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-27 23:38:27,248 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-27 23:38:27,248 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-27 23:38:27,248 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-27 23:38:27,248 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b [2024-11-27 23:38:27,599 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-27 23:38:27,616 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-27 23:38:27,620 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-27 23:38:27,621 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-27 23:38:27,622 INFO L274 PluginConnector]: CDTParser initialized [2024-11-27 23:38:27,623 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/../../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2024-11-27 23:38:31,411 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/data/59d5f1e1c/2df11519f21c462fa2d047f09903dc85/FLAG397ec7104 [2024-11-27 23:38:31,818 INFO L384 CDTParser]: Found 1 translation units. [2024-11-27 23:38:31,819 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2024-11-27 23:38:31,849 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/data/59d5f1e1c/2df11519f21c462fa2d047f09903dc85/FLAG397ec7104 [2024-11-27 23:38:31,886 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/data/59d5f1e1c/2df11519f21c462fa2d047f09903dc85 [2024-11-27 23:38:31,889 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-27 23:38:31,893 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-27 23:38:31,896 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-27 23:38:31,896 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-27 23:38:31,902 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-27 23:38:31,904 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.11 11:38:31" (1/1) ... [2024-11-27 23:38:31,907 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3ed3b9bf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:31, skipping insertion in model container [2024-11-27 23:38:31,907 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.11 11:38:31" (1/1) ... [2024-11-27 23:38:31,971 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-27 23:38:32,243 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2024-11-27 23:38:32,400 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-27 23:38:32,423 INFO L200 MainTranslator]: Completed pre-run [2024-11-27 23:38:32,435 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2024-11-27 23:38:32,437 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] [2024-11-27 23:38:32,438 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [96] [2024-11-27 23:38:32,438 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [287] [2024-11-27 23:38:32,438 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [653] [2024-11-27 23:38:32,438 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [725] [2024-11-27 23:38:32,439 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [823] [2024-11-27 23:38:32,439 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [873] [2024-11-27 23:38:32,452 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2024-11-27 23:38:32,550 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-27 23:38:32,585 INFO L204 MainTranslator]: Completed translation [2024-11-27 23:38:32,585 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32 WrapperNode [2024-11-27 23:38:32,586 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-27 23:38:32,588 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-27 23:38:32,588 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-27 23:38:32,588 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-27 23:38:32,600 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,612 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,639 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 184 [2024-11-27 23:38:32,639 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-27 23:38:32,640 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-27 23:38:32,640 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-27 23:38:32,640 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-27 23:38:32,651 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,651 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,653 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,666 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-27 23:38:32,667 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,667 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,671 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,673 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,677 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,678 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,679 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,685 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-27 23:38:32,686 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-27 23:38:32,686 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-27 23:38:32,686 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-27 23:38:32,687 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (1/1) ... [2024-11-27 23:38:32,698 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-27 23:38:32,713 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-27 23:38:32,728 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-27 23:38:32,736 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-27 23:38:32,760 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-27 23:38:32,760 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-27 23:38:32,760 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-27 23:38:32,760 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-27 23:38:32,760 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-27 23:38:32,761 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-27 23:38:32,761 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-27 23:38:32,761 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-27 23:38:32,761 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-27 23:38:32,761 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-11-27 23:38:32,761 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-11-27 23:38:32,761 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-27 23:38:32,761 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-27 23:38:32,762 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-27 23:38:32,762 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-27 23:38:32,762 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-27 23:38:32,849 INFO L234 CfgBuilder]: Building ICFG [2024-11-27 23:38:32,852 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-27 23:38:33,195 INFO L? ?]: Removed 36 outVars from TransFormulas that were not future-live. [2024-11-27 23:38:33,195 INFO L283 CfgBuilder]: Performing block encoding [2024-11-27 23:38:33,213 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-27 23:38:33,213 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-27 23:38:33,214 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.11 11:38:33 BoogieIcfgContainer [2024-11-27 23:38:33,214 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-27 23:38:33,221 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-27 23:38:33,222 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-27 23:38:33,230 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-27 23:38:33,230 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 27.11 11:38:31" (1/3) ... [2024-11-27 23:38:33,231 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2fcaf0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.11 11:38:33, skipping insertion in model container [2024-11-27 23:38:33,232 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.11 11:38:32" (2/3) ... [2024-11-27 23:38:33,233 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2fcaf0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.11 11:38:33, skipping insertion in model container [2024-11-27 23:38:33,234 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.11 11:38:33" (3/3) ... [2024-11-27 23:38:33,236 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product36.cil.c [2024-11-27 23:38:33,257 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-27 23:38:33,261 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product36.cil.c that has 7 procedures, 83 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-27 23:38:33,347 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-27 23:38:33,363 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@49750f14, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-27 23:38:33,363 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-27 23:38:33,368 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2024-11-27 23:38:33,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-27 23:38:33,379 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:33,380 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:33,381 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:33,388 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:33,388 INFO L85 PathProgramCache]: Analyzing trace with hash 1494671793, now seen corresponding path program 1 times [2024-11-27 23:38:33,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:33,399 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48879917] [2024-11-27 23:38:33,399 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:33,400 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:33,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:33,652 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:33,653 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:33,653 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48879917] [2024-11-27 23:38:33,654 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48879917] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:33,654 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:33,655 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-27 23:38:33,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1465692605] [2024-11-27 23:38:33,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:33,662 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-27 23:38:33,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:33,726 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-27 23:38:33,727 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-27 23:38:33,730 INFO L87 Difference]: Start difference. First operand has 83 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 71 states have internal predecessors, (90), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:33,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:33,784 INFO L93 Difference]: Finished difference Result 157 states and 214 transitions. [2024-11-27 23:38:33,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-27 23:38:33,789 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-27 23:38:33,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:33,800 INFO L225 Difference]: With dead ends: 157 [2024-11-27 23:38:33,801 INFO L226 Difference]: Without dead ends: 74 [2024-11-27 23:38:33,805 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-27 23:38:33,809 INFO L435 NwaCegarLoop]: 104 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:33,810 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:33,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-11-27 23:38:33,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2024-11-27 23:38:33,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 63 states have internal predecessors, (76), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2024-11-27 23:38:33,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 95 transitions. [2024-11-27 23:38:33,870 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 95 transitions. Word has length 32 [2024-11-27 23:38:33,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:33,872 INFO L471 AbstractCegarLoop]: Abstraction has 74 states and 95 transitions. [2024-11-27 23:38:33,873 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:33,873 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 95 transitions. [2024-11-27 23:38:33,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-27 23:38:33,877 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:33,878 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:33,878 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-27 23:38:33,879 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:33,880 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:33,881 INFO L85 PathProgramCache]: Analyzing trace with hash 1092631275, now seen corresponding path program 1 times [2024-11-27 23:38:33,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:33,881 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056229647] [2024-11-27 23:38:33,884 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:33,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:33,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:34,092 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:34,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:34,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056229647] [2024-11-27 23:38:34,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056229647] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:34,092 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:34,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-27 23:38:34,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285774107] [2024-11-27 23:38:34,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:34,095 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-27 23:38:34,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:34,096 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-27 23:38:34,096 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:34,096 INFO L87 Difference]: Start difference. First operand 74 states and 95 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:34,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:34,122 INFO L93 Difference]: Finished difference Result 110 states and 141 transitions. [2024-11-27 23:38:34,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-27 23:38:34,123 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-27 23:38:34,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:34,125 INFO L225 Difference]: With dead ends: 110 [2024-11-27 23:38:34,125 INFO L226 Difference]: Without dead ends: 66 [2024-11-27 23:38:34,126 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:34,127 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 18 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:34,128 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:34,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-11-27 23:38:34,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2024-11-27 23:38:34,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 53 states have (on average 1.320754716981132) internal successors, (70), 58 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-11-27 23:38:34,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 84 transitions. [2024-11-27 23:38:34,140 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 84 transitions. Word has length 32 [2024-11-27 23:38:34,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:34,140 INFO L471 AbstractCegarLoop]: Abstraction has 66 states and 84 transitions. [2024-11-27 23:38:34,140 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:34,140 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 84 transitions. [2024-11-27 23:38:34,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-11-27 23:38:34,142 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:34,142 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:34,142 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-27 23:38:34,143 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:34,143 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:34,143 INFO L85 PathProgramCache]: Analyzing trace with hash -1159229393, now seen corresponding path program 1 times [2024-11-27 23:38:34,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:34,144 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1213800717] [2024-11-27 23:38:34,144 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:34,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:34,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:34,338 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:34,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:34,339 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1213800717] [2024-11-27 23:38:34,339 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1213800717] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:34,339 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:34,339 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-27 23:38:34,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209210297] [2024-11-27 23:38:34,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:34,340 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-27 23:38:34,340 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:34,341 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-27 23:38:34,341 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:34,341 INFO L87 Difference]: Start difference. First operand 66 states and 84 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:34,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:34,416 INFO L93 Difference]: Finished difference Result 180 states and 235 transitions. [2024-11-27 23:38:34,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-27 23:38:34,417 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2024-11-27 23:38:34,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:34,419 INFO L225 Difference]: With dead ends: 180 [2024-11-27 23:38:34,420 INFO L226 Difference]: Without dead ends: 122 [2024-11-27 23:38:34,420 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:34,422 INFO L435 NwaCegarLoop]: 98 mSDtfsCounter, 72 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:34,422 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 169 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:34,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2024-11-27 23:38:34,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 117. [2024-11-27 23:38:34,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 92 states have (on average 1.3478260869565217) internal successors, (124), 101 states have internal predecessors, (124), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2024-11-27 23:38:34,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 152 transitions. [2024-11-27 23:38:34,446 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 152 transitions. Word has length 37 [2024-11-27 23:38:34,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:34,447 INFO L471 AbstractCegarLoop]: Abstraction has 117 states and 152 transitions. [2024-11-27 23:38:34,447 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:34,447 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 152 transitions. [2024-11-27 23:38:34,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-11-27 23:38:34,449 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:34,449 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:34,449 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-27 23:38:34,449 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:34,450 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:34,450 INFO L85 PathProgramCache]: Analyzing trace with hash -1542397475, now seen corresponding path program 1 times [2024-11-27 23:38:34,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:34,450 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640731488] [2024-11-27 23:38:34,450 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:34,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:34,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:34,714 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-27 23:38:34,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:34,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1640731488] [2024-11-27 23:38:34,715 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1640731488] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:34,715 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:34,716 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-27 23:38:34,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183968095] [2024-11-27 23:38:34,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:34,716 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-27 23:38:34,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:34,717 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-27 23:38:34,717 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-27 23:38:34,718 INFO L87 Difference]: Start difference. First operand 117 states and 152 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:34,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:34,933 INFO L93 Difference]: Finished difference Result 306 states and 406 transitions. [2024-11-27 23:38:34,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-27 23:38:34,934 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 40 [2024-11-27 23:38:34,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:34,937 INFO L225 Difference]: With dead ends: 306 [2024-11-27 23:38:34,937 INFO L226 Difference]: Without dead ends: 197 [2024-11-27 23:38:34,938 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-27 23:38:34,939 INFO L435 NwaCegarLoop]: 82 mSDtfsCounter, 41 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:34,940 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 352 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-27 23:38:34,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2024-11-27 23:38:34,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 197. [2024-11-27 23:38:34,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 152 states have (on average 1.3092105263157894) internal successors, (199), 163 states have internal predecessors, (199), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-27 23:38:34,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 251 transitions. [2024-11-27 23:38:34,985 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 251 transitions. Word has length 40 [2024-11-27 23:38:34,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:34,986 INFO L471 AbstractCegarLoop]: Abstraction has 197 states and 251 transitions. [2024-11-27 23:38:34,988 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-27 23:38:34,988 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 251 transitions. [2024-11-27 23:38:34,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-27 23:38:34,991 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:34,994 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:34,994 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-27 23:38:34,994 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:34,995 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:34,995 INFO L85 PathProgramCache]: Analyzing trace with hash -2141148922, now seen corresponding path program 1 times [2024-11-27 23:38:34,995 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:34,995 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1840649243] [2024-11-27 23:38:34,995 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:34,995 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:35,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:35,204 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:35,204 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:35,204 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1840649243] [2024-11-27 23:38:35,205 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1840649243] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:35,205 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:35,205 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-27 23:38:35,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1432324492] [2024-11-27 23:38:35,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:35,205 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-27 23:38:35,206 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:35,206 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-27 23:38:35,206 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-27 23:38:35,207 INFO L87 Difference]: Start difference. First operand 197 states and 251 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:35,255 INFO L93 Difference]: Finished difference Result 392 states and 506 transitions. [2024-11-27 23:38:35,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-27 23:38:35,255 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-27 23:38:35,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:35,258 INFO L225 Difference]: With dead ends: 392 [2024-11-27 23:38:35,258 INFO L226 Difference]: Without dead ends: 203 [2024-11-27 23:38:35,259 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-27 23:38:35,260 INFO L435 NwaCegarLoop]: 81 mSDtfsCounter, 0 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:35,264 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 317 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:35,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2024-11-27 23:38:35,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 203. [2024-11-27 23:38:35,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203 states, 158 states have (on average 1.2974683544303798) internal successors, (205), 169 states have internal predecessors, (205), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-27 23:38:35,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 257 transitions. [2024-11-27 23:38:35,310 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 257 transitions. Word has length 46 [2024-11-27 23:38:35,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:35,311 INFO L471 AbstractCegarLoop]: Abstraction has 203 states and 257 transitions. [2024-11-27 23:38:35,315 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,315 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 257 transitions. [2024-11-27 23:38:35,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-27 23:38:35,321 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:35,321 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:35,321 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-27 23:38:35,322 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:35,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:35,322 INFO L85 PathProgramCache]: Analyzing trace with hash 565470472, now seen corresponding path program 1 times [2024-11-27 23:38:35,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:35,323 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46753313] [2024-11-27 23:38:35,323 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:35,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:35,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:35,517 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:35,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:35,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [46753313] [2024-11-27 23:38:35,518 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [46753313] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:35,518 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:35,518 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-27 23:38:35,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [830731105] [2024-11-27 23:38:35,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:35,519 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-27 23:38:35,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:35,520 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-27 23:38:35,521 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-27 23:38:35,521 INFO L87 Difference]: Start difference. First operand 203 states and 257 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:35,624 INFO L93 Difference]: Finished difference Result 408 states and 526 transitions. [2024-11-27 23:38:35,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-27 23:38:35,625 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-27 23:38:35,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:35,631 INFO L225 Difference]: With dead ends: 408 [2024-11-27 23:38:35,631 INFO L226 Difference]: Without dead ends: 213 [2024-11-27 23:38:35,633 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-27 23:38:35,634 INFO L435 NwaCegarLoop]: 89 mSDtfsCounter, 74 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 330 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:35,634 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 330 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:35,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2024-11-27 23:38:35,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 207. [2024-11-27 23:38:35,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2024-11-27 23:38:35,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 261 transitions. [2024-11-27 23:38:35,673 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 261 transitions. Word has length 46 [2024-11-27 23:38:35,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:35,674 INFO L471 AbstractCegarLoop]: Abstraction has 207 states and 261 transitions. [2024-11-27 23:38:35,674 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,674 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 261 transitions. [2024-11-27 23:38:35,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-11-27 23:38:35,676 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:35,676 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:35,676 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-27 23:38:35,677 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:35,677 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:35,678 INFO L85 PathProgramCache]: Analyzing trace with hash -1123473270, now seen corresponding path program 1 times [2024-11-27 23:38:35,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:35,678 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697327977] [2024-11-27 23:38:35,678 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:35,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:35,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:35,804 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:35,804 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:35,804 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697327977] [2024-11-27 23:38:35,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697327977] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:35,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:35,805 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-27 23:38:35,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743091661] [2024-11-27 23:38:35,805 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:35,806 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-27 23:38:35,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:35,807 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-27 23:38:35,807 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:35,807 INFO L87 Difference]: Start difference. First operand 207 states and 261 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:35,864 INFO L93 Difference]: Finished difference Result 498 states and 633 transitions. [2024-11-27 23:38:35,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-27 23:38:35,865 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2024-11-27 23:38:35,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:35,868 INFO L225 Difference]: With dead ends: 498 [2024-11-27 23:38:35,869 INFO L226 Difference]: Without dead ends: 299 [2024-11-27 23:38:35,870 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-27 23:38:35,871 INFO L435 NwaCegarLoop]: 84 mSDtfsCounter, 39 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:35,871 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 153 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-27 23:38:35,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2024-11-27 23:38:35,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 299. [2024-11-27 23:38:35,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 234 states have (on average 1.2564102564102564) internal successors, (294), 247 states have internal predecessors, (294), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2024-11-27 23:38:35,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 370 transitions. [2024-11-27 23:38:35,916 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 370 transitions. Word has length 46 [2024-11-27 23:38:35,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:35,917 INFO L471 AbstractCegarLoop]: Abstraction has 299 states and 370 transitions. [2024-11-27 23:38:35,917 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-27 23:38:35,917 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 370 transitions. [2024-11-27 23:38:35,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-27 23:38:35,919 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:35,919 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:35,919 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-27 23:38:35,920 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:35,920 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:35,920 INFO L85 PathProgramCache]: Analyzing trace with hash -2000500624, now seen corresponding path program 1 times [2024-11-27 23:38:35,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:35,921 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842169365] [2024-11-27 23:38:35,921 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:35,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:35,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:36,308 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-27 23:38:36,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:36,310 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842169365] [2024-11-27 23:38:36,311 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842169365] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:36,311 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:36,311 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-27 23:38:36,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981330709] [2024-11-27 23:38:36,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:36,312 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-27 23:38:36,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:36,312 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-27 23:38:36,312 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-27 23:38:36,314 INFO L87 Difference]: Start difference. First operand 299 states and 370 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-27 23:38:36,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:36,916 INFO L93 Difference]: Finished difference Result 1006 states and 1293 transitions. [2024-11-27 23:38:36,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-27 23:38:36,921 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2024-11-27 23:38:36,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:36,933 INFO L225 Difference]: With dead ends: 1006 [2024-11-27 23:38:36,934 INFO L226 Difference]: Without dead ends: 807 [2024-11-27 23:38:36,935 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-11-27 23:38:36,936 INFO L435 NwaCegarLoop]: 131 mSDtfsCounter, 224 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:36,937 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 623 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-27 23:38:36,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 807 states. [2024-11-27 23:38:37,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 807 to 757. [2024-11-27 23:38:37,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 757 states, 596 states have (on average 1.238255033557047) internal successors, (738), 633 states have internal predecessors, (738), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2024-11-27 23:38:37,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 757 states to 757 states and 934 transitions. [2024-11-27 23:38:37,071 INFO L78 Accepts]: Start accepts. Automaton has 757 states and 934 transitions. Word has length 50 [2024-11-27 23:38:37,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:37,072 INFO L471 AbstractCegarLoop]: Abstraction has 757 states and 934 transitions. [2024-11-27 23:38:37,072 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-27 23:38:37,072 INFO L276 IsEmpty]: Start isEmpty. Operand 757 states and 934 transitions. [2024-11-27 23:38:37,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2024-11-27 23:38:37,078 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:37,079 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:37,079 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-27 23:38:37,079 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:37,080 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:37,080 INFO L85 PathProgramCache]: Analyzing trace with hash 814079266, now seen corresponding path program 1 times [2024-11-27 23:38:37,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:37,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984533434] [2024-11-27 23:38:37,083 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:37,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:37,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:37,190 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-27 23:38:37,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:37,192 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984533434] [2024-11-27 23:38:37,193 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984533434] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-27 23:38:37,193 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-27 23:38:37,193 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-27 23:38:37,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366213707] [2024-11-27 23:38:37,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-27 23:38:37,194 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-27 23:38:37,194 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:37,195 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-27 23:38:37,195 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-27 23:38:37,195 INFO L87 Difference]: Start difference. First operand 757 states and 934 transitions. Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-27 23:38:37,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:37,366 INFO L93 Difference]: Finished difference Result 1286 states and 1586 transitions. [2024-11-27 23:38:37,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-27 23:38:37,367 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 79 [2024-11-27 23:38:37,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:37,374 INFO L225 Difference]: With dead ends: 1286 [2024-11-27 23:38:37,374 INFO L226 Difference]: Without dead ends: 537 [2024-11-27 23:38:37,377 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-27 23:38:37,379 INFO L435 NwaCegarLoop]: 126 mSDtfsCounter, 107 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:37,381 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 223 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-27 23:38:37,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2024-11-27 23:38:37,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 529. [2024-11-27 23:38:37,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 415 states have (on average 1.2240963855421687) internal successors, (508), 441 states have internal predecessors, (508), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2024-11-27 23:38:37,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 642 transitions. [2024-11-27 23:38:37,488 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 642 transitions. Word has length 79 [2024-11-27 23:38:37,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:37,489 INFO L471 AbstractCegarLoop]: Abstraction has 529 states and 642 transitions. [2024-11-27 23:38:37,489 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-27 23:38:37,489 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 642 transitions. [2024-11-27 23:38:37,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-11-27 23:38:37,491 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:37,491 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:37,491 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-27 23:38:37,491 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:37,494 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:37,494 INFO L85 PathProgramCache]: Analyzing trace with hash 1869272307, now seen corresponding path program 1 times [2024-11-27 23:38:37,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:37,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731998619] [2024-11-27 23:38:37,495 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:37,496 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:37,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:37,776 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-27 23:38:37,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:37,776 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731998619] [2024-11-27 23:38:37,776 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731998619] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-27 23:38:37,776 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1599070925] [2024-11-27 23:38:37,777 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:37,777 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-27 23:38:37,777 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-27 23:38:37,781 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-27 23:38:37,784 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-27 23:38:37,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:37,930 INFO L256 TraceCheckSpWp]: Trace formula consists of 281 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-27 23:38:37,938 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-27 23:38:38,218 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-27 23:38:38,219 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-27 23:38:38,556 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 18 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-27 23:38:38,557 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1599070925] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-27 23:38:38,557 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-27 23:38:38,557 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2024-11-27 23:38:38,557 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834946700] [2024-11-27 23:38:38,557 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-27 23:38:38,558 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-11-27 23:38:38,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:38,559 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-11-27 23:38:38,560 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2024-11-27 23:38:38,561 INFO L87 Difference]: Start difference. First operand 529 states and 642 transitions. Second operand has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-27 23:38:39,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:39,458 INFO L93 Difference]: Finished difference Result 1088 states and 1355 transitions. [2024-11-27 23:38:39,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2024-11-27 23:38:39,458 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) Word has length 81 [2024-11-27 23:38:39,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:39,467 INFO L225 Difference]: With dead ends: 1088 [2024-11-27 23:38:39,467 INFO L226 Difference]: Without dead ends: 644 [2024-11-27 23:38:39,470 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 158 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=215, Invalid=715, Unknown=0, NotChecked=0, Total=930 [2024-11-27 23:38:39,471 INFO L435 NwaCegarLoop]: 166 mSDtfsCounter, 350 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 98 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 1022 SdHoareTripleChecker+Invalid, 313 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 98 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:39,472 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 1022 Invalid, 313 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [98 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-27 23:38:39,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2024-11-27 23:38:39,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 567. [2024-11-27 23:38:39,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 436 states have (on average 1.2087155963302751) internal successors, (527), 466 states have internal predecessors, (527), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2024-11-27 23:38:39,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 675 transitions. [2024-11-27 23:38:39,576 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 675 transitions. Word has length 81 [2024-11-27 23:38:39,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:39,578 INFO L471 AbstractCegarLoop]: Abstraction has 567 states and 675 transitions. [2024-11-27 23:38:39,578 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.071428571428571) internal successors, (113), 12 states have internal predecessors, (113), 6 states have call successors, (15), 4 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2024-11-27 23:38:39,578 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 675 transitions. [2024-11-27 23:38:39,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 174 [2024-11-27 23:38:39,582 INFO L210 NwaCegarLoop]: Found error trace [2024-11-27 23:38:39,582 INFO L218 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:39,601 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-11-27 23:38:39,782 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-27 23:38:39,783 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-27 23:38:39,783 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-27 23:38:39,784 INFO L85 PathProgramCache]: Analyzing trace with hash -894340528, now seen corresponding path program 1 times [2024-11-27 23:38:39,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-27 23:38:39,784 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042138760] [2024-11-27 23:38:39,784 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:39,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-27 23:38:39,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:40,152 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 97 proven. 2 refuted. 0 times theorem prover too weak. 164 trivial. 0 not checked. [2024-11-27 23:38:40,153 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-27 23:38:40,153 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042138760] [2024-11-27 23:38:40,153 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042138760] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-27 23:38:40,153 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [611816425] [2024-11-27 23:38:40,153 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-27 23:38:40,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-27 23:38:40,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-27 23:38:40,157 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-27 23:38:40,163 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-27 23:38:40,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-27 23:38:40,367 INFO L256 TraceCheckSpWp]: Trace formula consists of 508 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-11-27 23:38:40,378 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-27 23:38:40,825 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 171 proven. 3 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2024-11-27 23:38:40,826 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-27 23:38:41,688 INFO L134 CoverageAnalysis]: Checked inductivity of 263 backedges. 108 proven. 60 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2024-11-27 23:38:41,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [611816425] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-27 23:38:41,689 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-27 23:38:41,689 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 10, 11] total 22 [2024-11-27 23:38:41,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1546477928] [2024-11-27 23:38:41,689 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-27 23:38:41,690 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-11-27 23:38:41,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-27 23:38:41,692 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-11-27 23:38:41,692 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=363, Unknown=0, NotChecked=0, Total=462 [2024-11-27 23:38:41,693 INFO L87 Difference]: Start difference. First operand 567 states and 675 transitions. Second operand has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) [2024-11-27 23:38:42,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-27 23:38:42,728 INFO L93 Difference]: Finished difference Result 1321 states and 1614 transitions. [2024-11-27 23:38:42,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-11-27 23:38:42,729 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) Word has length 173 [2024-11-27 23:38:42,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-27 23:38:42,731 INFO L225 Difference]: With dead ends: 1321 [2024-11-27 23:38:42,731 INFO L226 Difference]: Without dead ends: 0 [2024-11-27 23:38:42,735 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 369 GetRequests, 333 SyntacticMatches, 3 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 170 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=275, Invalid=915, Unknown=0, NotChecked=0, Total=1190 [2024-11-27 23:38:42,736 INFO L435 NwaCegarLoop]: 102 mSDtfsCounter, 349 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 544 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 914 SdHoareTripleChecker+Invalid, 665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 544 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-27 23:38:42,736 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [352 Valid, 914 Invalid, 665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 544 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-11-27 23:38:42,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-27 23:38:42,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-27 23:38:42,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-27 23:38:42,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-27 23:38:42,739 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 173 [2024-11-27 23:38:42,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-27 23:38:42,739 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-27 23:38:42,739 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.590909090909092) internal successors, (211), 21 states have internal predecessors, (211), 9 states have call successors, (21), 6 states have call predecessors, (21), 9 states have return successors, (23), 8 states have call predecessors, (23), 9 states have call successors, (23) [2024-11-27 23:38:42,740 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-27 23:38:42,740 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-27 23:38:42,743 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-27 23:38:42,756 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-11-27 23:38:42,944 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-27 23:38:42,948 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-27 23:38:42,950 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-27 23:38:50,903 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-27 23:38:50,922 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 27.11 11:38:50 BoogieIcfgContainer [2024-11-27 23:38:50,922 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-27 23:38:50,923 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-27 23:38:50,923 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-27 23:38:50,923 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-27 23:38:50,924 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.11 11:38:33" (3/4) ... [2024-11-27 23:38:50,927 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-27 23:38:50,933 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-27 23:38:50,934 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-27 23:38:50,934 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-27 23:38:50,934 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-27 23:38:50,934 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-27 23:38:50,935 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-11-27 23:38:50,941 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2024-11-27 23:38:50,942 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-27 23:38:50,942 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-27 23:38:50,943 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-27 23:38:50,943 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-27 23:38:51,062 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/witness.graphml [2024-11-27 23:38:51,063 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/witness.yml [2024-11-27 23:38:51,063 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-27 23:38:51,064 INFO L158 Benchmark]: Toolchain (without parser) took 19171.57ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 91.8MB in the beginning and 119.4MB in the end (delta: -27.6MB). Peak memory consumption was 32.4MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,064 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 117.4MB. Free memory was 74.5MB in the beginning and 74.4MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-27 23:38:51,065 INFO L158 Benchmark]: CACSL2BoogieTranslator took 692.66ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 72.9MB in the end (delta: 18.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,065 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.63ms. Allocated memory is still 117.4MB. Free memory was 72.9MB in the beginning and 71.3MB in the end (delta: 1.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,066 INFO L158 Benchmark]: Boogie Preprocessor took 45.17ms. Allocated memory is still 117.4MB. Free memory was 71.3MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-27 23:38:51,066 INFO L158 Benchmark]: RCFGBuilder took 528.23ms. Allocated memory is still 117.4MB. Free memory was 69.3MB in the beginning and 54.0MB in the end (delta: 15.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,066 INFO L158 Benchmark]: TraceAbstraction took 17700.63ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 53.3MB in the beginning and 127.6MB in the end (delta: -74.3MB). Peak memory consumption was 58.9MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,067 INFO L158 Benchmark]: Witness Printer took 140.30ms. Allocated memory is still 176.2MB. Free memory was 127.6MB in the beginning and 119.4MB in the end (delta: 8.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-27 23:38:51,069 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 117.4MB. Free memory was 74.5MB in the beginning and 74.4MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 692.66ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 72.9MB in the end (delta: 18.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.63ms. Allocated memory is still 117.4MB. Free memory was 72.9MB in the beginning and 71.3MB in the end (delta: 1.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 45.17ms. Allocated memory is still 117.4MB. Free memory was 71.3MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 528.23ms. Allocated memory is still 117.4MB. Free memory was 69.3MB in the beginning and 54.0MB in the end (delta: 15.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17700.63ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 53.3MB in the beginning and 127.6MB in the end (delta: -74.3MB). Peak memory consumption was 58.9MB. Max. memory is 16.1GB. * Witness Printer took 140.30ms. Allocated memory is still 176.2MB. Free memory was 127.6MB in the beginning and 119.4MB in the end (delta: 8.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [96] - GenericResultAtLocation [Line: 287]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [287] - GenericResultAtLocation [Line: 653]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [653] - GenericResultAtLocation [Line: 725]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [725] - GenericResultAtLocation [Line: 823]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [823] - GenericResultAtLocation [Line: 873]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [873] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 92]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.6s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1291 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1274 mSDsluCounter, 4352 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3206 mSDsCounter, 275 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1100 IncrementalHoareTripleChecker+Invalid, 1375 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 275 mSolverCounterUnsat, 1146 mSDtfsCounter, 1100 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 615 GetRequests, 515 SyntacticMatches, 7 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 404 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=757occurred in iteration=8, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 146 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.9s InterpolantComputationTime, 916 NumberOfCodeBlocks, 916 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1155 ConstructedInterpolants, 0 QuantifiedInterpolants, 2326 SizeOfPredicates, 2 NumberOfNonLiveVariables, 789 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 840/927 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 666]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 737]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-11-27 23:38:51,096 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_37cf01f0-7331-47c8-9f7c-0e7d0b1cdc99/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE