./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-11-28 04:38:36,078 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-28 04:38:36,182 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-28 04:38:36,188 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-28 04:38:36,188 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-28 04:38:36,214 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-28 04:38:36,217 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-28 04:38:36,217 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-28 04:38:36,218 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-28 04:38:36,218 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-28 04:38:36,219 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-28 04:38:36,219 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-28 04:38:36,219 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-28 04:38:36,219 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-28 04:38:36,219 INFO L153 SettingsManager]: * Use SBE=true [2024-11-28 04:38:36,219 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-28 04:38:36,220 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-28 04:38:36,221 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-28 04:38:36,223 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-28 04:38:36,223 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-28 04:38:36,224 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-28 04:38:36,224 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-28 04:38:36,224 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 04:38:36,224 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-28 04:38:36,224 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-28 04:38:36,224 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 04:38:36,225 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-28 04:38:36,225 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-28 04:38:36,226 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-28 04:38:36,226 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-28 04:38:36,226 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-28 04:38:36,226 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-28 04:38:36,226 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-28 04:38:36,227 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2024-11-28 04:38:36,536 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-28 04:38:36,545 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-28 04:38:36,547 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-28 04:38:36,549 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-28 04:38:36,549 INFO L274 PluginConnector]: CDTParser initialized [2024-11-28 04:38:36,551 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2024-11-28 04:38:39,470 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/data/0b4bc2c0f/3501733af57f4a1abebed50e3ab73055/FLAG06efa26df [2024-11-28 04:38:39,888 INFO L384 CDTParser]: Found 1 translation units. [2024-11-28 04:38:39,891 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2024-11-28 04:38:39,916 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/data/0b4bc2c0f/3501733af57f4a1abebed50e3ab73055/FLAG06efa26df [2024-11-28 04:38:39,947 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/data/0b4bc2c0f/3501733af57f4a1abebed50e3ab73055 [2024-11-28 04:38:39,952 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-28 04:38:39,953 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-28 04:38:39,956 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-28 04:38:39,956 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-28 04:38:39,964 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-28 04:38:39,965 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 04:38:39" (1/1) ... [2024-11-28 04:38:39,967 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@57880fdc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:39, skipping insertion in model container [2024-11-28 04:38:39,968 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 04:38:39" (1/1) ... [2024-11-28 04:38:40,021 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-28 04:38:40,310 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2024-11-28 04:38:40,378 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-28 04:38:40,389 INFO L200 MainTranslator]: Completed pre-run [2024-11-28 04:38:40,398 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2024-11-28 04:38:40,400 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2024-11-28 04:38:40,400 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [521] [2024-11-28 04:38:40,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [556] [2024-11-28 04:38:40,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] [2024-11-28 04:38:40,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] [2024-11-28 04:38:40,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] [2024-11-28 04:38:40,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [988] [2024-11-28 04:38:40,448 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2024-11-28 04:38:40,480 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-28 04:38:40,521 INFO L204 MainTranslator]: Completed translation [2024-11-28 04:38:40,521 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40 WrapperNode [2024-11-28 04:38:40,522 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-28 04:38:40,523 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-28 04:38:40,524 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-28 04:38:40,524 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-28 04:38:40,534 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,555 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,583 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 237 [2024-11-28 04:38:40,584 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-28 04:38:40,584 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-28 04:38:40,584 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-28 04:38:40,585 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-28 04:38:40,596 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,596 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,604 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,632 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-28 04:38:40,636 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,636 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,647 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,652 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,657 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,661 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,664 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,667 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-28 04:38:40,669 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-28 04:38:40,670 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-28 04:38:40,670 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-28 04:38:40,672 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (1/1) ... [2024-11-28 04:38:40,678 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 04:38:40,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 04:38:40,707 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-28 04:38:40,712 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-28 04:38:40,748 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-28 04:38:40,748 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-28 04:38:40,748 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-28 04:38:40,748 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-28 04:38:40,748 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-28 04:38:40,748 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-11-28 04:38:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-28 04:38:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-28 04:38:40,750 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-28 04:38:40,750 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-28 04:38:40,750 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-28 04:38:40,848 INFO L234 CfgBuilder]: Building ICFG [2024-11-28 04:38:40,851 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-28 04:38:41,291 INFO L? ?]: Removed 51 outVars from TransFormulas that were not future-live. [2024-11-28 04:38:41,292 INFO L283 CfgBuilder]: Performing block encoding [2024-11-28 04:38:41,305 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-28 04:38:41,305 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-28 04:38:41,305 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 04:38:41 BoogieIcfgContainer [2024-11-28 04:38:41,306 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-28 04:38:41,308 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-28 04:38:41,308 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-28 04:38:41,313 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-28 04:38:41,314 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 04:38:39" (1/3) ... [2024-11-28 04:38:41,314 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b9fb93e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 04:38:41, skipping insertion in model container [2024-11-28 04:38:41,315 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 04:38:40" (2/3) ... [2024-11-28 04:38:41,315 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b9fb93e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 04:38:41, skipping insertion in model container [2024-11-28 04:38:41,315 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 04:38:41" (3/3) ... [2024-11-28 04:38:41,316 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2024-11-28 04:38:41,334 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-28 04:38:41,336 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product55.cil.c that has 10 procedures, 107 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-28 04:38:41,415 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-28 04:38:41,432 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3a6d0abc, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-28 04:38:41,433 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-28 04:38:41,439 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2024-11-28 04:38:41,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-28 04:38:41,451 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:41,452 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:41,453 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:41,457 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:41,458 INFO L85 PathProgramCache]: Analyzing trace with hash 1002309339, now seen corresponding path program 1 times [2024-11-28 04:38:41,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:41,464 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2046094495] [2024-11-28 04:38:41,464 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:41,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:41,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:41,678 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:41,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:41,679 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2046094495] [2024-11-28 04:38:41,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2046094495] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:41,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:41,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-28 04:38:41,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1124985556] [2024-11-28 04:38:41,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:41,686 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-28 04:38:41,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:41,711 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-28 04:38:41,712 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-28 04:38:41,715 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-28 04:38:41,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:41,766 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2024-11-28 04:38:41,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-28 04:38:41,768 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-28 04:38:41,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:41,781 INFO L225 Difference]: With dead ends: 205 [2024-11-28 04:38:41,782 INFO L226 Difference]: Without dead ends: 98 [2024-11-28 04:38:41,787 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-28 04:38:41,791 INFO L435 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:41,795 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 04:38:41,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2024-11-28 04:38:41,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2024-11-28 04:38:41,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-11-28 04:38:41,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2024-11-28 04:38:41,856 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 32 [2024-11-28 04:38:41,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:41,858 INFO L471 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2024-11-28 04:38:41,858 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-28 04:38:41,859 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2024-11-28 04:38:41,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-28 04:38:41,864 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:41,864 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:41,865 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-28 04:38:41,865 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:41,866 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:41,866 INFO L85 PathProgramCache]: Analyzing trace with hash 600268821, now seen corresponding path program 1 times [2024-11-28 04:38:41,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:41,867 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [710533004] [2024-11-28 04:38:41,867 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:41,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:41,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:42,065 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:42,065 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:42,065 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [710533004] [2024-11-28 04:38:42,065 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [710533004] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:42,066 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:42,066 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 04:38:42,066 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717924693] [2024-11-28 04:38:42,066 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:42,067 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 04:38:42,067 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:42,068 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 04:38:42,068 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 04:38:42,069 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-28 04:38:42,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:42,089 INFO L93 Difference]: Finished difference Result 159 states and 207 transitions. [2024-11-28 04:38:42,090 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 04:38:42,090 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-11-28 04:38:42,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:42,092 INFO L225 Difference]: With dead ends: 159 [2024-11-28 04:38:42,092 INFO L226 Difference]: Without dead ends: 90 [2024-11-28 04:38:42,093 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 04:38:42,094 INFO L435 NwaCegarLoop]: 116 mSDtfsCounter, 16 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:42,094 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 212 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 04:38:42,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2024-11-28 04:38:42,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2024-11-28 04:38:42,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2024-11-28 04:38:42,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 117 transitions. [2024-11-28 04:38:42,121 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 117 transitions. Word has length 32 [2024-11-28 04:38:42,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:42,121 INFO L471 AbstractCegarLoop]: Abstraction has 90 states and 117 transitions. [2024-11-28 04:38:42,121 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-28 04:38:42,121 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 117 transitions. [2024-11-28 04:38:42,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-11-28 04:38:42,125 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:42,125 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:42,125 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-28 04:38:42,126 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:42,126 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:42,126 INFO L85 PathProgramCache]: Analyzing trace with hash -729472087, now seen corresponding path program 1 times [2024-11-28 04:38:42,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:42,127 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021508154] [2024-11-28 04:38:42,127 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:42,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:42,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:42,282 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:42,283 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:42,283 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021508154] [2024-11-28 04:38:42,283 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021508154] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:42,283 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:42,283 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 04:38:42,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591277020] [2024-11-28 04:38:42,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:42,284 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 04:38:42,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:42,285 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 04:38:42,285 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 04:38:42,285 INFO L87 Difference]: Start difference. First operand 90 states and 117 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-28 04:38:42,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:42,337 INFO L93 Difference]: Finished difference Result 253 states and 335 transitions. [2024-11-28 04:38:42,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 04:38:42,338 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 36 [2024-11-28 04:38:42,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:42,340 INFO L225 Difference]: With dead ends: 253 [2024-11-28 04:38:42,340 INFO L226 Difference]: Without dead ends: 171 [2024-11-28 04:38:42,341 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 04:38:42,342 INFO L435 NwaCegarLoop]: 133 mSDtfsCounter, 93 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:42,343 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 239 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 04:38:42,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2024-11-28 04:38:42,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 168. [2024-11-28 04:38:42,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 123 states have (on average 1.3495934959349594) internal successors, (166), 142 states have internal predecessors, (166), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2024-11-28 04:38:42,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 222 transitions. [2024-11-28 04:38:42,383 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 222 transitions. Word has length 36 [2024-11-28 04:38:42,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:42,383 INFO L471 AbstractCegarLoop]: Abstraction has 168 states and 222 transitions. [2024-11-28 04:38:42,384 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-28 04:38:42,384 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 222 transitions. [2024-11-28 04:38:42,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-11-28 04:38:42,386 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:42,386 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:42,386 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-28 04:38:42,386 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:42,390 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:42,391 INFO L85 PathProgramCache]: Analyzing trace with hash 1626019103, now seen corresponding path program 1 times [2024-11-28 04:38:42,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:42,391 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241179021] [2024-11-28 04:38:42,391 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:42,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:42,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:42,582 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-28 04:38:42,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:42,586 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241179021] [2024-11-28 04:38:42,586 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241179021] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:42,586 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:42,586 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-28 04:38:42,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [308795528] [2024-11-28 04:38:42,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:42,587 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-28 04:38:42,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:42,588 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-28 04:38:42,588 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-28 04:38:42,588 INFO L87 Difference]: Start difference. First operand 168 states and 222 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-28 04:38:42,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:42,904 INFO L93 Difference]: Finished difference Result 424 states and 577 transitions. [2024-11-28 04:38:42,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-28 04:38:42,908 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2024-11-28 04:38:42,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:42,915 INFO L225 Difference]: With dead ends: 424 [2024-11-28 04:38:42,915 INFO L226 Difference]: Without dead ends: 264 [2024-11-28 04:38:42,917 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-28 04:38:42,918 INFO L435 NwaCegarLoop]: 118 mSDtfsCounter, 77 mSDsluCounter, 389 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 507 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:42,919 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 507 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-28 04:38:42,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2024-11-28 04:38:42,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 263. [2024-11-28 04:38:42,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 263 states, 194 states have (on average 1.2989690721649485) internal successors, (252), 211 states have internal predecessors, (252), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-11-28 04:38:42,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 340 transitions. [2024-11-28 04:38:42,963 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 340 transitions. Word has length 40 [2024-11-28 04:38:42,964 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:42,964 INFO L471 AbstractCegarLoop]: Abstraction has 263 states and 340 transitions. [2024-11-28 04:38:42,964 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-28 04:38:42,964 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 340 transitions. [2024-11-28 04:38:42,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-11-28 04:38:42,967 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:42,967 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:42,967 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-28 04:38:42,967 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:42,968 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:42,968 INFO L85 PathProgramCache]: Analyzing trace with hash 541440504, now seen corresponding path program 1 times [2024-11-28 04:38:42,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:42,968 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586358082] [2024-11-28 04:38:42,968 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:42,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:42,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:43,173 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:43,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:43,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586358082] [2024-11-28 04:38:43,174 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586358082] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:43,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:43,174 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-28 04:38:43,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1857795844] [2024-11-28 04:38:43,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:43,175 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-28 04:38:43,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:43,175 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-28 04:38:43,176 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-28 04:38:43,176 INFO L87 Difference]: Start difference. First operand 263 states and 340 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-11-28 04:38:43,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:43,229 INFO L93 Difference]: Finished difference Result 524 states and 692 transitions. [2024-11-28 04:38:43,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-28 04:38:43,230 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2024-11-28 04:38:43,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:43,233 INFO L225 Difference]: With dead ends: 524 [2024-11-28 04:38:43,234 INFO L226 Difference]: Without dead ends: 269 [2024-11-28 04:38:43,236 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-28 04:38:43,237 INFO L435 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:43,237 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 450 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 04:38:43,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2024-11-28 04:38:43,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 269. [2024-11-28 04:38:43,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 200 states have (on average 1.29) internal successors, (258), 217 states have internal predecessors, (258), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-11-28 04:38:43,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 346 transitions. [2024-11-28 04:38:43,299 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 346 transitions. Word has length 55 [2024-11-28 04:38:43,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:43,300 INFO L471 AbstractCegarLoop]: Abstraction has 269 states and 346 transitions. [2024-11-28 04:38:43,300 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-11-28 04:38:43,300 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 346 transitions. [2024-11-28 04:38:43,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-11-28 04:38:43,302 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:43,302 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:43,307 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-28 04:38:43,307 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:43,307 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:43,308 INFO L85 PathProgramCache]: Analyzing trace with hash 964142330, now seen corresponding path program 1 times [2024-11-28 04:38:43,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:43,308 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [868365576] [2024-11-28 04:38:43,308 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:43,308 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:43,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:43,511 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:43,512 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:43,512 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [868365576] [2024-11-28 04:38:43,512 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [868365576] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:43,512 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:43,513 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-28 04:38:43,513 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416445817] [2024-11-28 04:38:43,513 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:43,513 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-28 04:38:43,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:43,514 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-28 04:38:43,515 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-28 04:38:43,515 INFO L87 Difference]: Start difference. First operand 269 states and 346 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-11-28 04:38:43,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:43,635 INFO L93 Difference]: Finished difference Result 538 states and 717 transitions. [2024-11-28 04:38:43,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-28 04:38:43,636 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2024-11-28 04:38:43,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:43,639 INFO L225 Difference]: With dead ends: 538 [2024-11-28 04:38:43,639 INFO L226 Difference]: Without dead ends: 277 [2024-11-28 04:38:43,645 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-28 04:38:43,647 INFO L435 NwaCegarLoop]: 122 mSDtfsCounter, 95 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:43,651 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 464 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 04:38:43,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2024-11-28 04:38:43,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 273. [2024-11-28 04:38:43,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 204 states have (on average 1.2843137254901962) internal successors, (262), 221 states have internal predecessors, (262), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-11-28 04:38:43,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 350 transitions. [2024-11-28 04:38:43,705 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 350 transitions. Word has length 55 [2024-11-28 04:38:43,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:43,706 INFO L471 AbstractCegarLoop]: Abstraction has 273 states and 350 transitions. [2024-11-28 04:38:43,708 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-11-28 04:38:43,709 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 350 transitions. [2024-11-28 04:38:43,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-11-28 04:38:43,711 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:43,711 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:43,711 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-28 04:38:43,712 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:43,712 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:43,716 INFO L85 PathProgramCache]: Analyzing trace with hash -841296004, now seen corresponding path program 1 times [2024-11-28 04:38:43,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:43,716 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1838482405] [2024-11-28 04:38:43,716 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:43,717 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:43,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:43,890 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:43,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:43,891 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1838482405] [2024-11-28 04:38:43,892 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1838482405] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:43,892 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:43,892 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-28 04:38:43,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1046877684] [2024-11-28 04:38:43,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:43,892 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-28 04:38:43,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:43,893 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-28 04:38:43,895 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-28 04:38:43,896 INFO L87 Difference]: Start difference. First operand 273 states and 350 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-11-28 04:38:44,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:44,160 INFO L93 Difference]: Finished difference Result 902 states and 1194 transitions. [2024-11-28 04:38:44,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-28 04:38:44,161 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2024-11-28 04:38:44,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:44,167 INFO L225 Difference]: With dead ends: 902 [2024-11-28 04:38:44,169 INFO L226 Difference]: Without dead ends: 637 [2024-11-28 04:38:44,172 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-28 04:38:44,173 INFO L435 NwaCegarLoop]: 201 mSDtfsCounter, 151 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:44,176 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 391 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-28 04:38:44,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2024-11-28 04:38:44,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 625. [2024-11-28 04:38:44,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 625 states, 464 states have (on average 1.2564655172413792) internal successors, (583), 497 states have internal predecessors, (583), 88 states have call successors, (88), 70 states have call predecessors, (88), 72 states have return successors, (138), 80 states have call predecessors, (138), 88 states have call successors, (138) [2024-11-28 04:38:44,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 809 transitions. [2024-11-28 04:38:44,294 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 809 transitions. Word has length 55 [2024-11-28 04:38:44,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:44,295 INFO L471 AbstractCegarLoop]: Abstraction has 625 states and 809 transitions. [2024-11-28 04:38:44,295 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-11-28 04:38:44,295 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 809 transitions. [2024-11-28 04:38:44,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-11-28 04:38:44,300 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:44,301 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:44,301 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-28 04:38:44,301 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:44,301 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:44,302 INFO L85 PathProgramCache]: Analyzing trace with hash 363442198, now seen corresponding path program 1 times [2024-11-28 04:38:44,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:44,303 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [147061343] [2024-11-28 04:38:44,303 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:44,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:44,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:44,689 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-28 04:38:44,690 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:44,690 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [147061343] [2024-11-28 04:38:44,690 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [147061343] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:44,690 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:44,690 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-28 04:38:44,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105441938] [2024-11-28 04:38:44,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:44,691 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-28 04:38:44,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:44,692 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-28 04:38:44,692 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-28 04:38:44,692 INFO L87 Difference]: Start difference. First operand 625 states and 809 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-11-28 04:38:45,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:45,525 INFO L93 Difference]: Finished difference Result 1839 states and 2465 transitions. [2024-11-28 04:38:45,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-28 04:38:45,526 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2024-11-28 04:38:45,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:45,536 INFO L225 Difference]: With dead ends: 1839 [2024-11-28 04:38:45,536 INFO L226 Difference]: Without dead ends: 1333 [2024-11-28 04:38:45,539 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-11-28 04:38:45,540 INFO L435 NwaCegarLoop]: 149 mSDtfsCounter, 382 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 638 SdHoareTripleChecker+Invalid, 462 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:45,540 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 638 Invalid, 462 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-11-28 04:38:45,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1333 states. [2024-11-28 04:38:45,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1333 to 1204. [2024-11-28 04:38:45,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1204 states, 889 states have (on average 1.232845894263217) internal successors, (1096), 953 states have internal predecessors, (1096), 165 states have call successors, (165), 123 states have call predecessors, (165), 149 states have return successors, (273), 162 states have call predecessors, (273), 165 states have call successors, (273) [2024-11-28 04:38:45,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1204 states to 1204 states and 1534 transitions. [2024-11-28 04:38:45,731 INFO L78 Accepts]: Start accepts. Automaton has 1204 states and 1534 transitions. Word has length 59 [2024-11-28 04:38:45,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:45,731 INFO L471 AbstractCegarLoop]: Abstraction has 1204 states and 1534 transitions. [2024-11-28 04:38:45,732 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-11-28 04:38:45,732 INFO L276 IsEmpty]: Start isEmpty. Operand 1204 states and 1534 transitions. [2024-11-28 04:38:45,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2024-11-28 04:38:45,735 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:45,735 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:45,739 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-28 04:38:45,739 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:45,739 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:45,740 INFO L85 PathProgramCache]: Analyzing trace with hash 1737840712, now seen corresponding path program 1 times [2024-11-28 04:38:45,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:45,740 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288867062] [2024-11-28 04:38:45,740 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:45,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:45,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:45,837 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-28 04:38:45,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:45,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288867062] [2024-11-28 04:38:45,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288867062] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 04:38:45,839 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 04:38:45,839 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-28 04:38:45,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [159421046] [2024-11-28 04:38:45,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 04:38:45,840 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-28 04:38:45,840 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:45,841 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-28 04:38:45,841 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-28 04:38:45,841 INFO L87 Difference]: Start difference. First operand 1204 states and 1534 transitions. Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-28 04:38:46,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:46,047 INFO L93 Difference]: Finished difference Result 1402 states and 1781 transitions. [2024-11-28 04:38:46,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-28 04:38:46,048 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 88 [2024-11-28 04:38:46,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:46,053 INFO L225 Difference]: With dead ends: 1402 [2024-11-28 04:38:46,053 INFO L226 Difference]: Without dead ends: 591 [2024-11-28 04:38:46,056 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-28 04:38:46,056 INFO L435 NwaCegarLoop]: 159 mSDtfsCounter, 148 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:46,057 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 277 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 04:38:46,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 591 states. [2024-11-28 04:38:46,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 591 to 591. [2024-11-28 04:38:46,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 437 states have (on average 1.1990846681922196) internal successors, (524), 466 states have internal predecessors, (524), 79 states have call successors, (79), 61 states have call predecessors, (79), 74 states have return successors, (133), 79 states have call predecessors, (133), 79 states have call successors, (133) [2024-11-28 04:38:46,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 736 transitions. [2024-11-28 04:38:46,142 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 736 transitions. Word has length 88 [2024-11-28 04:38:46,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:46,142 INFO L471 AbstractCegarLoop]: Abstraction has 591 states and 736 transitions. [2024-11-28 04:38:46,142 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-28 04:38:46,142 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 736 transitions. [2024-11-28 04:38:46,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2024-11-28 04:38:46,147 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:46,147 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:46,147 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-28 04:38:46,147 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:46,148 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:46,148 INFO L85 PathProgramCache]: Analyzing trace with hash 1623855363, now seen corresponding path program 1 times [2024-11-28 04:38:46,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:46,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040315519] [2024-11-28 04:38:46,148 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:46,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:46,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:46,446 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 8 proven. 19 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-28 04:38:46,446 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:46,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040315519] [2024-11-28 04:38:46,447 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040315519] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 04:38:46,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1637991678] [2024-11-28 04:38:46,447 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:46,447 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 04:38:46,448 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 04:38:46,452 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 04:38:46,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-28 04:38:46,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:46,589 INFO L256 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-28 04:38:46,600 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 04:38:46,868 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-28 04:38:46,868 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-28 04:38:47,206 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 17 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-28 04:38:47,208 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1637991678] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-28 04:38:47,208 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-28 04:38:47,209 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 15 [2024-11-28 04:38:47,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1017930523] [2024-11-28 04:38:47,209 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-28 04:38:47,210 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-11-28 04:38:47,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:47,211 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-11-28 04:38:47,211 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=169, Unknown=0, NotChecked=0, Total=210 [2024-11-28 04:38:47,212 INFO L87 Difference]: Start difference. First operand 591 states and 736 transitions. Second operand has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) [2024-11-28 04:38:48,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:48,015 INFO L93 Difference]: Finished difference Result 1327 states and 1715 transitions. [2024-11-28 04:38:48,016 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-11-28 04:38:48,016 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) Word has length 107 [2024-11-28 04:38:48,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:48,022 INFO L225 Difference]: With dead ends: 1327 [2024-11-28 04:38:48,022 INFO L226 Difference]: Without dead ends: 796 [2024-11-28 04:38:48,025 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 211 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 164 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=208, Invalid=604, Unknown=0, NotChecked=0, Total=812 [2024-11-28 04:38:48,026 INFO L435 NwaCegarLoop]: 208 mSDtfsCounter, 366 mSDsluCounter, 965 mSDsCounter, 0 mSdLazyCounter, 336 mSolverCounterSat, 144 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 1173 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 144 IncrementalHoareTripleChecker+Valid, 336 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:48,026 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 1173 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [144 Valid, 336 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-11-28 04:38:48,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 796 states. [2024-11-28 04:38:48,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 796 to 700. [2024-11-28 04:38:48,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 512 states have (on average 1.18359375) internal successors, (606), 550 states have internal predecessors, (606), 94 states have call successors, (94), 79 states have call predecessors, (94), 93 states have return successors, (138), 95 states have call predecessors, (138), 94 states have call successors, (138) [2024-11-28 04:38:48,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 838 transitions. [2024-11-28 04:38:48,126 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 838 transitions. Word has length 107 [2024-11-28 04:38:48,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:48,127 INFO L471 AbstractCegarLoop]: Abstraction has 700 states and 838 transitions. [2024-11-28 04:38:48,127 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) [2024-11-28 04:38:48,127 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 838 transitions. [2024-11-28 04:38:48,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2024-11-28 04:38:48,137 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 04:38:48,137 INFO L218 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:48,150 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-11-28 04:38:48,338 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-11-28 04:38:48,339 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 04:38:48,340 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 04:38:48,340 INFO L85 PathProgramCache]: Analyzing trace with hash -1041226963, now seen corresponding path program 1 times [2024-11-28 04:38:48,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 04:38:48,341 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396782885] [2024-11-28 04:38:48,341 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:48,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 04:38:48,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:48,651 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 66 proven. 2 refuted. 0 times theorem prover too weak. 123 trivial. 0 not checked. [2024-11-28 04:38:48,651 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 04:38:48,651 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396782885] [2024-11-28 04:38:48,652 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396782885] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 04:38:48,652 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [880762453] [2024-11-28 04:38:48,652 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 04:38:48,652 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 04:38:48,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 04:38:48,657 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 04:38:48,659 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-28 04:38:48,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 04:38:48,831 INFO L256 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-11-28 04:38:48,837 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 04:38:49,127 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 139 proven. 3 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2024-11-28 04:38:49,127 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-28 04:38:49,821 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 73 proven. 38 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2024-11-28 04:38:49,821 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [880762453] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-28 04:38:49,822 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-28 04:38:49,822 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 10, 11] total 22 [2024-11-28 04:38:49,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [318425316] [2024-11-28 04:38:49,822 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-28 04:38:49,823 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-11-28 04:38:49,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 04:38:49,824 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-11-28 04:38:49,825 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=363, Unknown=0, NotChecked=0, Total=462 [2024-11-28 04:38:49,825 INFO L87 Difference]: Start difference. First operand 700 states and 838 transitions. Second operand has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) [2024-11-28 04:38:50,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 04:38:50,935 INFO L93 Difference]: Finished difference Result 1495 states and 1860 transitions. [2024-11-28 04:38:50,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-11-28 04:38:50,936 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) Word has length 183 [2024-11-28 04:38:50,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 04:38:50,938 INFO L225 Difference]: With dead ends: 1495 [2024-11-28 04:38:50,938 INFO L226 Difference]: Without dead ends: 0 [2024-11-28 04:38:50,942 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 387 GetRequests, 353 SyntacticMatches, 3 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=247, Invalid=809, Unknown=0, NotChecked=0, Total=1056 [2024-11-28 04:38:50,943 INFO L435 NwaCegarLoop]: 78 mSDtfsCounter, 205 mSDsluCounter, 662 mSDsCounter, 0 mSdLazyCounter, 1036 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 740 SdHoareTripleChecker+Invalid, 1124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 1036 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-11-28 04:38:50,943 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 740 Invalid, 1124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 1036 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-11-28 04:38:50,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-28 04:38:50,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-28 04:38:50,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-28 04:38:50,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-28 04:38:50,945 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 183 [2024-11-28 04:38:50,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 04:38:50,946 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-28 04:38:50,946 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) [2024-11-28 04:38:50,946 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-28 04:38:50,946 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-28 04:38:50,949 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-28 04:38:50,960 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-11-28 04:38:51,150 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-11-28 04:38:51,152 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 04:38:51,154 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-28 04:38:59,070 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-28 04:38:59,085 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 04:38:59 BoogieIcfgContainer [2024-11-28 04:38:59,085 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-28 04:38:59,086 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-28 04:38:59,086 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-28 04:38:59,086 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-28 04:38:59,087 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 04:38:41" (3/4) ... [2024-11-28 04:38:59,089 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-28 04:38:59,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-11-28 04:38:59,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2024-11-28 04:38:59,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-11-28 04:38:59,103 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2024-11-28 04:38:59,104 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-28 04:38:59,104 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-28 04:38:59,104 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-28 04:38:59,105 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-28 04:38:59,202 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/witness.graphml [2024-11-28 04:38:59,202 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/witness.yml [2024-11-28 04:38:59,202 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-28 04:38:59,203 INFO L158 Benchmark]: Toolchain (without parser) took 19250.05ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 92.8MB in the beginning and 184.7MB in the end (delta: -91.9MB). Peak memory consumption was 142.1MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,203 INFO L158 Benchmark]: CDTParser took 0.41ms. Allocated memory is still 167.8MB. Free memory is still 104.5MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-28 04:38:59,204 INFO L158 Benchmark]: CACSL2BoogieTranslator took 566.35ms. Allocated memory is still 117.4MB. Free memory was 92.4MB in the beginning and 73.2MB in the end (delta: 19.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,204 INFO L158 Benchmark]: Boogie Procedure Inliner took 61.20ms. Allocated memory is still 117.4MB. Free memory was 73.2MB in the beginning and 71.4MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-28 04:38:59,204 INFO L158 Benchmark]: Boogie Preprocessor took 84.17ms. Allocated memory is still 117.4MB. Free memory was 71.4MB in the beginning and 69.4MB in the end (delta: 2.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,205 INFO L158 Benchmark]: RCFGBuilder took 636.36ms. Allocated memory is still 117.4MB. Free memory was 69.4MB in the beginning and 50.5MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,205 INFO L158 Benchmark]: TraceAbstraction took 17777.36ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 50.2MB in the beginning and 193.0MB in the end (delta: -142.8MB). Peak memory consumption was 169.2MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,206 INFO L158 Benchmark]: Witness Printer took 116.09ms. Allocated memory is still 352.3MB. Free memory was 193.0MB in the beginning and 184.7MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-28 04:38:59,207 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.41ms. Allocated memory is still 167.8MB. Free memory is still 104.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 566.35ms. Allocated memory is still 117.4MB. Free memory was 92.4MB in the beginning and 73.2MB in the end (delta: 19.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 61.20ms. Allocated memory is still 117.4MB. Free memory was 73.2MB in the beginning and 71.4MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 84.17ms. Allocated memory is still 117.4MB. Free memory was 71.4MB in the beginning and 69.4MB in the end (delta: 2.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 636.36ms. Allocated memory is still 117.4MB. Free memory was 69.4MB in the beginning and 50.5MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17777.36ms. Allocated memory was 117.4MB in the beginning and 352.3MB in the end (delta: 234.9MB). Free memory was 50.2MB in the beginning and 193.0MB in the end (delta: -142.8MB). Peak memory consumption was 169.2MB. Max. memory is 16.1GB. * Witness Printer took 116.09ms. Allocated memory is still 352.3MB. Free memory was 193.0MB in the beginning and 184.7MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [521] - GenericResultAtLocation [Line: 556]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [556] - GenericResultAtLocation [Line: 565]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] - GenericResultAtLocation [Line: 633]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] - GenericResultAtLocation [Line: 742]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] - GenericResultAtLocation [Line: 988]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [988] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1555 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1533 mSDsluCounter, 5228 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3693 mSDsCounter, 339 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1983 IncrementalHoareTripleChecker+Invalid, 2322 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 339 mSolverCounterUnsat, 1535 mSDtfsCounter, 1983 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 686 GetRequests, 589 SyntacticMatches, 7 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 331 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1204occurred in iteration=8, InterpolantAutomatonStates: 79, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 245 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 1032 NumberOfCodeBlocks, 1032 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1307 ConstructedInterpolants, 0 QuantifiedInterpolants, 2512 SizeOfPredicates, 2 NumberOfNonLiveVariables, 891 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 648/731 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 576]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2024-11-28 04:38:59,229 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b511d1e1-d1b4-462a-9367-3ca18a631b50/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE