./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 13:26:29,784 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 13:26:29,837 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 13:26:29,842 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 13:26:29,842 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 13:26:29,862 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 13:26:29,863 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 13:26:29,863 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 13:26:29,863 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 13:26:29,863 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 13:26:29,863 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 13:26:29,864 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 13:26:29,864 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 13:26:29,864 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 13:26:29,865 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 13:26:29,865 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 13:26:29,866 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 13:26:29,866 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 13:26:29,866 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 13:26:29,867 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 [2024-12-02 13:26:30,094 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 13:26:30,102 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 13:26:30,104 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 13:26:30,105 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 13:26:30,105 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 13:26:30,106 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2024-12-02 13:26:32,809 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/data/5da3fb0e8/41eb55988ba745fcb3df8842ec2405bc/FLAG019e585d1 [2024-12-02 13:26:33,018 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 13:26:33,019 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2024-12-02 13:26:33,028 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/data/5da3fb0e8/41eb55988ba745fcb3df8842ec2405bc/FLAG019e585d1 [2024-12-02 13:26:33,377 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/data/5da3fb0e8/41eb55988ba745fcb3df8842ec2405bc [2024-12-02 13:26:33,379 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 13:26:33,380 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 13:26:33,381 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 13:26:33,381 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 13:26:33,384 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 13:26:33,385 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,386 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@268c024f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33, skipping insertion in model container [2024-12-02 13:26:33,386 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,414 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 13:26:33,580 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2024-12-02 13:26:33,670 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 13:26:33,680 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 13:26:33,689 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2024-12-02 13:26:33,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] [2024-12-02 13:26:33,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [159] [2024-12-02 13:26:33,690 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [186] [2024-12-02 13:26:33,691 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [288] [2024-12-02 13:26:33,691 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [323] [2024-12-02 13:26:33,691 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] [2024-12-02 13:26:33,691 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [754] [2024-12-02 13:26:33,699 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2024-12-02 13:26:33,748 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 13:26:33,768 INFO L204 MainTranslator]: Completed translation [2024-12-02 13:26:33,768 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33 WrapperNode [2024-12-02 13:26:33,768 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 13:26:33,769 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 13:26:33,769 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 13:26:33,769 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 13:26:33,776 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,788 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,809 INFO L138 Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 184 [2024-12-02 13:26:33,810 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 13:26:33,810 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 13:26:33,810 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 13:26:33,811 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 13:26:33,821 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,821 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,824 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,837 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 13:26:33,837 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,837 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,841 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,843 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,847 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,848 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,849 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,851 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 13:26:33,852 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 13:26:33,852 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 13:26:33,852 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 13:26:33,853 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (1/1) ... [2024-12-02 13:26:33,859 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 13:26:33,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 13:26:33,885 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 13:26:33,888 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 13:26:33,912 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 13:26:33,912 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 13:26:33,912 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 13:26:33,912 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 13:26:33,913 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 13:26:33,913 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-12-02 13:26:33,913 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 13:26:33,913 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2024-12-02 13:26:33,913 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2024-12-02 13:26:33,913 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2024-12-02 13:26:33,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 13:26:33,914 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 13:26:33,914 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 13:26:33,914 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 13:26:33,914 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 13:26:33,984 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 13:26:33,986 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 13:26:34,197 INFO L? ?]: Removed 41 outVars from TransFormulas that were not future-live. [2024-12-02 13:26:34,198 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 13:26:34,207 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 13:26:34,207 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 13:26:34,207 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 01:26:34 BoogieIcfgContainer [2024-12-02 13:26:34,207 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 13:26:34,209 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 13:26:34,209 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 13:26:34,214 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 13:26:34,214 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 01:26:33" (1/3) ... [2024-12-02 13:26:34,215 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e6ae061 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 01:26:34, skipping insertion in model container [2024-12-02 13:26:34,215 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 01:26:33" (2/3) ... [2024-12-02 13:26:34,215 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e6ae061 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 01:26:34, skipping insertion in model container [2024-12-02 13:26:34,215 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 01:26:34" (3/3) ... [2024-12-02 13:26:34,216 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product45.cil.c [2024-12-02 13:26:34,230 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 13:26:34,232 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec1_product45.cil.c that has 9 procedures, 91 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 13:26:34,283 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 13:26:34,294 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4b2a1850, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 13:26:34,294 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 13:26:34,298 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 13:26:34,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 13:26:34,304 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:34,305 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:34,305 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:34,309 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:34,309 INFO L85 PathProgramCache]: Analyzing trace with hash 699489126, now seen corresponding path program 1 times [2024-12-02 13:26:34,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:34,315 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185787316] [2024-12-02 13:26:34,315 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:34,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:34,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:34,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:34,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:34,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185787316] [2024-12-02 13:26:34,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185787316] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:34,444 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:34,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 13:26:34,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [958073738] [2024-12-02 13:26:34,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:34,450 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 13:26:34,451 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:34,470 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 13:26:34,471 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 13:26:34,472 INFO L87 Difference]: Start difference. First operand has 91 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:34,494 INFO L93 Difference]: Finished difference Result 174 states and 237 transitions. [2024-12-02 13:26:34,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 13:26:34,495 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 13:26:34,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:34,501 INFO L225 Difference]: With dead ends: 174 [2024-12-02 13:26:34,501 INFO L226 Difference]: Without dead ends: 82 [2024-12-02 13:26:34,503 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 13:26:34,505 INFO L435 NwaCegarLoop]: 115 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:34,505 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 13:26:34,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2024-12-02 13:26:34,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2024-12-02 13:26:34,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2024-12-02 13:26:34,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2024-12-02 13:26:34,539 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 23 [2024-12-02 13:26:34,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:34,540 INFO L471 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2024-12-02 13:26:34,540 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,540 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2024-12-02 13:26:34,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 13:26:34,542 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:34,542 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:34,542 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 13:26:34,542 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:34,543 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:34,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1931251360, now seen corresponding path program 1 times [2024-12-02 13:26:34,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:34,543 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2098145363] [2024-12-02 13:26:34,543 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:34,543 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:34,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:34,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:34,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:34,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2098145363] [2024-12-02 13:26:34,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2098145363] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:34,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:34,639 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 13:26:34,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1511915760] [2024-12-02 13:26:34,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:34,640 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 13:26:34,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:34,641 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 13:26:34,641 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 13:26:34,641 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:34,658 INFO L93 Difference]: Finished difference Result 132 states and 170 transitions. [2024-12-02 13:26:34,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 13:26:34,658 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 13:26:34,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:34,659 INFO L225 Difference]: With dead ends: 132 [2024-12-02 13:26:34,660 INFO L226 Difference]: Without dead ends: 74 [2024-12-02 13:26:34,660 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 13:26:34,661 INFO L435 NwaCegarLoop]: 94 mSDtfsCounter, 12 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:34,662 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 13:26:34,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-12-02 13:26:34,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2024-12-02 13:26:34,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2024-12-02 13:26:34,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 95 transitions. [2024-12-02 13:26:34,671 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 95 transitions. Word has length 23 [2024-12-02 13:26:34,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:34,671 INFO L471 AbstractCegarLoop]: Abstraction has 74 states and 95 transitions. [2024-12-02 13:26:34,672 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,672 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 95 transitions. [2024-12-02 13:26:34,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-12-02 13:26:34,673 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:34,673 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:34,673 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 13:26:34,673 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:34,673 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:34,674 INFO L85 PathProgramCache]: Analyzing trace with hash 464091728, now seen corresponding path program 1 times [2024-12-02 13:26:34,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:34,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2011719273] [2024-12-02 13:26:34,674 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:34,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:34,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:34,764 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:34,764 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:34,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2011719273] [2024-12-02 13:26:34,764 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2011719273] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:34,764 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:34,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 13:26:34,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750389045] [2024-12-02 13:26:34,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:34,765 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 13:26:34,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:34,765 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 13:26:34,766 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 13:26:34,766 INFO L87 Difference]: Start difference. First operand 74 states and 95 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:34,784 INFO L93 Difference]: Finished difference Result 141 states and 184 transitions. [2024-12-02 13:26:34,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 13:26:34,784 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-12-02 13:26:34,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:34,786 INFO L225 Difference]: With dead ends: 141 [2024-12-02 13:26:34,786 INFO L226 Difference]: Without dead ends: 74 [2024-12-02 13:26:34,786 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 13:26:34,787 INFO L435 NwaCegarLoop]: 93 mSDtfsCounter, 78 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:34,787 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 93 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 13:26:34,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-12-02 13:26:34,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2024-12-02 13:26:34,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 55 states have (on average 1.309090909090909) internal successors, (72), 62 states have internal predecessors, (72), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2024-12-02 13:26:34,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 94 transitions. [2024-12-02 13:26:34,797 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 94 transitions. Word has length 27 [2024-12-02 13:26:34,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:34,797 INFO L471 AbstractCegarLoop]: Abstraction has 74 states and 94 transitions. [2024-12-02 13:26:34,797 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 13:26:34,798 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 94 transitions. [2024-12-02 13:26:34,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-12-02 13:26:34,799 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:34,799 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:34,799 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 13:26:34,799 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:34,800 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:34,800 INFO L85 PathProgramCache]: Analyzing trace with hash -82262195, now seen corresponding path program 1 times [2024-12-02 13:26:34,800 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:34,800 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873274121] [2024-12-02 13:26:34,800 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:34,800 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:34,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:34,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:34,882 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:34,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873274121] [2024-12-02 13:26:34,883 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873274121] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:34,883 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:34,883 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 13:26:34,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1627816465] [2024-12-02 13:26:34,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:34,883 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 13:26:34,883 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:34,884 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 13:26:34,884 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 13:26:34,884 INFO L87 Difference]: Start difference. First operand 74 states and 94 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 13:26:35,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:35,112 INFO L93 Difference]: Finished difference Result 217 states and 274 transitions. [2024-12-02 13:26:35,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 13:26:35,113 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 37 [2024-12-02 13:26:35,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:35,115 INFO L225 Difference]: With dead ends: 217 [2024-12-02 13:26:35,115 INFO L226 Difference]: Without dead ends: 150 [2024-12-02 13:26:35,115 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2024-12-02 13:26:35,116 INFO L435 NwaCegarLoop]: 101 mSDtfsCounter, 183 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:35,117 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 251 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-12-02 13:26:35,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2024-12-02 13:26:35,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 144. [2024-12-02 13:26:35,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 107 states have (on average 1.2523364485981308) internal successors, (134), 115 states have internal predecessors, (134), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2024-12-02 13:26:35,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 175 transitions. [2024-12-02 13:26:35,137 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 175 transitions. Word has length 37 [2024-12-02 13:26:35,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:35,138 INFO L471 AbstractCegarLoop]: Abstraction has 144 states and 175 transitions. [2024-12-02 13:26:35,138 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 13:26:35,138 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 175 transitions. [2024-12-02 13:26:35,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2024-12-02 13:26:35,139 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:35,139 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:35,139 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 13:26:35,139 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:35,140 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:35,140 INFO L85 PathProgramCache]: Analyzing trace with hash 156992963, now seen corresponding path program 1 times [2024-12-02 13:26:35,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:35,140 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1357082628] [2024-12-02 13:26:35,140 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:35,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:35,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:35,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:35,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:35,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1357082628] [2024-12-02 13:26:35,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1357082628] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:35,242 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:35,242 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 13:26:35,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912990643] [2024-12-02 13:26:35,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:35,242 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 13:26:35,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:35,243 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 13:26:35,243 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 13:26:35,243 INFO L87 Difference]: Start difference. First operand 144 states and 175 transitions. Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 13:26:35,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:35,268 INFO L93 Difference]: Finished difference Result 283 states and 352 transitions. [2024-12-02 13:26:35,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 13:26:35,269 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 43 [2024-12-02 13:26:35,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:35,271 INFO L225 Difference]: With dead ends: 283 [2024-12-02 13:26:35,271 INFO L226 Difference]: Without dead ends: 146 [2024-12-02 13:26:35,272 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 13:26:35,272 INFO L435 NwaCegarLoop]: 92 mSDtfsCounter, 0 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:35,273 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 270 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 13:26:35,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2024-12-02 13:26:35,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 146. [2024-12-02 13:26:35,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2024-12-02 13:26:35,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 177 transitions. [2024-12-02 13:26:35,293 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 177 transitions. Word has length 43 [2024-12-02 13:26:35,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:35,293 INFO L471 AbstractCegarLoop]: Abstraction has 146 states and 177 transitions. [2024-12-02 13:26:35,293 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 13:26:35,294 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 177 transitions. [2024-12-02 13:26:35,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2024-12-02 13:26:35,294 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:35,295 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:35,295 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 13:26:35,295 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:35,295 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:35,295 INFO L85 PathProgramCache]: Analyzing trace with hash 974641413, now seen corresponding path program 1 times [2024-12-02 13:26:35,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:35,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615380452] [2024-12-02 13:26:35,296 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:35,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:35,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:35,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 13:26:35,385 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:35,385 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615380452] [2024-12-02 13:26:35,385 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615380452] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:35,385 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:35,385 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 13:26:35,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136106245] [2024-12-02 13:26:35,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:35,386 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 13:26:35,386 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:35,386 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 13:26:35,386 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 13:26:35,387 INFO L87 Difference]: Start difference. First operand 146 states and 177 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 13:26:35,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:35,609 INFO L93 Difference]: Finished difference Result 150 states and 179 transitions. [2024-12-02 13:26:35,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-12-02 13:26:35,609 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 43 [2024-12-02 13:26:35,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:35,611 INFO L225 Difference]: With dead ends: 150 [2024-12-02 13:26:35,611 INFO L226 Difference]: Without dead ends: 148 [2024-12-02 13:26:35,611 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2024-12-02 13:26:35,612 INFO L435 NwaCegarLoop]: 77 mSDtfsCounter, 121 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:35,612 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 307 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-12-02 13:26:35,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2024-12-02 13:26:35,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 146. [2024-12-02 13:26:35,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2293577981651376) internal successors, (134), 117 states have internal predecessors, (134), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2024-12-02 13:26:35,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 175 transitions. [2024-12-02 13:26:35,628 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 175 transitions. Word has length 43 [2024-12-02 13:26:35,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:35,628 INFO L471 AbstractCegarLoop]: Abstraction has 146 states and 175 transitions. [2024-12-02 13:26:35,628 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 13:26:35,628 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 175 transitions. [2024-12-02 13:26:35,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-12-02 13:26:35,629 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:35,630 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:35,630 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 13:26:35,630 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:35,630 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:35,630 INFO L85 PathProgramCache]: Analyzing trace with hash 439436018, now seen corresponding path program 1 times [2024-12-02 13:26:35,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:35,631 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [160052196] [2024-12-02 13:26:35,631 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:35,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:35,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:35,707 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 13:26:35,707 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:35,707 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [160052196] [2024-12-02 13:26:35,707 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [160052196] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:35,707 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:35,707 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 13:26:35,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839198322] [2024-12-02 13:26:35,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:35,708 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 13:26:35,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:35,708 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 13:26:35,708 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 13:26:35,708 INFO L87 Difference]: Start difference. First operand 146 states and 175 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 13:26:35,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:35,736 INFO L93 Difference]: Finished difference Result 288 states and 353 transitions. [2024-12-02 13:26:35,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 13:26:35,737 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2024-12-02 13:26:35,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:35,738 INFO L225 Difference]: With dead ends: 288 [2024-12-02 13:26:35,738 INFO L226 Difference]: Without dead ends: 149 [2024-12-02 13:26:35,739 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 13:26:35,739 INFO L435 NwaCegarLoop]: 91 mSDtfsCounter, 0 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:35,740 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 358 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 13:26:35,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2024-12-02 13:26:35,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 149. [2024-12-02 13:26:35,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 112 states have (on average 1.2232142857142858) internal successors, (137), 120 states have internal predecessors, (137), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2024-12-02 13:26:35,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 178 transitions. [2024-12-02 13:26:35,757 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 178 transitions. Word has length 53 [2024-12-02 13:26:35,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:35,757 INFO L471 AbstractCegarLoop]: Abstraction has 149 states and 178 transitions. [2024-12-02 13:26:35,757 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 13:26:35,757 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 178 transitions. [2024-12-02 13:26:35,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-12-02 13:26:35,758 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:35,758 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:35,759 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 13:26:35,759 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:35,759 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:35,759 INFO L85 PathProgramCache]: Analyzing trace with hash 736827886, now seen corresponding path program 1 times [2024-12-02 13:26:35,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:35,760 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306047892] [2024-12-02 13:26:35,760 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:35,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:35,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:35,841 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 13:26:35,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:35,841 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306047892] [2024-12-02 13:26:35,841 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306047892] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:35,841 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:35,842 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 13:26:35,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823291318] [2024-12-02 13:26:35,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:35,842 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 13:26:35,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:35,843 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 13:26:35,843 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 13:26:35,843 INFO L87 Difference]: Start difference. First operand 149 states and 178 transitions. Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-12-02 13:26:35,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:35,954 INFO L93 Difference]: Finished difference Result 447 states and 555 transitions. [2024-12-02 13:26:35,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 13:26:35,955 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 53 [2024-12-02 13:26:35,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:35,957 INFO L225 Difference]: With dead ends: 447 [2024-12-02 13:26:35,958 INFO L226 Difference]: Without dead ends: 305 [2024-12-02 13:26:35,958 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 13:26:35,959 INFO L435 NwaCegarLoop]: 152 mSDtfsCounter, 116 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:35,959 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 293 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 13:26:35,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2024-12-02 13:26:35,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 298. [2024-12-02 13:26:35,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 223 states have (on average 1.2152466367713004) internal successors, (271), 237 states have internal predecessors, (271), 37 states have call successors, (37), 32 states have call predecessors, (37), 37 states have return successors, (56), 39 states have call predecessors, (56), 37 states have call successors, (56) [2024-12-02 13:26:35,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 364 transitions. [2024-12-02 13:26:35,995 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 364 transitions. Word has length 53 [2024-12-02 13:26:35,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:35,995 INFO L471 AbstractCegarLoop]: Abstraction has 298 states and 364 transitions. [2024-12-02 13:26:35,995 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-12-02 13:26:35,995 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 364 transitions. [2024-12-02 13:26:35,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-12-02 13:26:35,996 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:35,997 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:35,997 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 13:26:35,997 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:35,997 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:35,997 INFO L85 PathProgramCache]: Analyzing trace with hash -885286764, now seen corresponding path program 1 times [2024-12-02 13:26:35,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:35,998 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [136196675] [2024-12-02 13:26:35,998 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:35,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:36,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:36,133 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 13:26:36,134 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:36,134 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [136196675] [2024-12-02 13:26:36,134 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [136196675] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:36,134 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 13:26:36,134 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2024-12-02 13:26:36,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2087526595] [2024-12-02 13:26:36,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:36,134 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-12-02 13:26:36,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:36,135 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-12-02 13:26:36,135 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2024-12-02 13:26:36,135 INFO L87 Difference]: Start difference. First operand 298 states and 364 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 1 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 13:26:36,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:36,388 INFO L93 Difference]: Finished difference Result 844 states and 1075 transitions. [2024-12-02 13:26:36,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2024-12-02 13:26:36,389 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 1 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 57 [2024-12-02 13:26:36,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:36,392 INFO L225 Difference]: With dead ends: 844 [2024-12-02 13:26:36,392 INFO L226 Difference]: Without dead ends: 553 [2024-12-02 13:26:36,393 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2024-12-02 13:26:36,394 INFO L435 NwaCegarLoop]: 88 mSDtfsCounter, 75 mSDsluCounter, 559 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:36,394 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 647 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 13:26:36,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 553 states. [2024-12-02 13:26:36,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 553 to 553. [2024-12-02 13:26:36,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 553 states, 408 states have (on average 1.1887254901960784) internal successors, (485), 433 states have internal predecessors, (485), 73 states have call successors, (73), 63 states have call predecessors, (73), 71 states have return successors, (116), 76 states have call predecessors, (116), 73 states have call successors, (116) [2024-12-02 13:26:36,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 553 states to 553 states and 674 transitions. [2024-12-02 13:26:36,435 INFO L78 Accepts]: Start accepts. Automaton has 553 states and 674 transitions. Word has length 57 [2024-12-02 13:26:36,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:36,435 INFO L471 AbstractCegarLoop]: Abstraction has 553 states and 674 transitions. [2024-12-02 13:26:36,435 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 1 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 13:26:36,436 INFO L276 IsEmpty]: Start isEmpty. Operand 553 states and 674 transitions. [2024-12-02 13:26:36,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2024-12-02 13:26:36,438 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:36,438 INFO L218 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:36,438 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-12-02 13:26:36,439 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:36,439 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:36,439 INFO L85 PathProgramCache]: Analyzing trace with hash -477529870, now seen corresponding path program 1 times [2024-12-02 13:26:36,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:36,439 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254897326] [2024-12-02 13:26:36,439 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:36,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:36,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:36,640 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 18 proven. 13 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-12-02 13:26:36,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:36,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254897326] [2024-12-02 13:26:36,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254897326] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 13:26:36,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1973955282] [2024-12-02 13:26:36,641 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:36,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 13:26:36,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 13:26:36,643 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 13:26:36,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 13:26:36,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:36,743 INFO L256 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-12-02 13:26:36,750 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 13:26:36,958 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-12-02 13:26:36,958 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 13:26:36,958 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1973955282] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:36,958 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 13:26:36,958 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [13] total 19 [2024-12-02 13:26:36,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85254971] [2024-12-02 13:26:36,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:36,959 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 13:26:36,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:36,959 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 13:26:36,960 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=300, Unknown=0, NotChecked=0, Total=342 [2024-12-02 13:26:36,960 INFO L87 Difference]: Start difference. First operand 553 states and 674 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2024-12-02 13:26:37,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:37,136 INFO L93 Difference]: Finished difference Result 1099 states and 1341 transitions. [2024-12-02 13:26:37,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 13:26:37,136 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 112 [2024-12-02 13:26:37,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:37,140 INFO L225 Difference]: With dead ends: 1099 [2024-12-02 13:26:37,140 INFO L226 Difference]: Without dead ends: 553 [2024-12-02 13:26:37,142 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=300, Unknown=0, NotChecked=0, Total=342 [2024-12-02 13:26:37,142 INFO L435 NwaCegarLoop]: 165 mSDtfsCounter, 54 mSDsluCounter, 769 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 934 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:37,143 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 934 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 13:26:37,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 553 states. [2024-12-02 13:26:37,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 553 to 553. [2024-12-02 13:26:37,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 553 states, 408 states have (on average 1.1740196078431373) internal successors, (479), 433 states have internal predecessors, (479), 73 states have call successors, (73), 63 states have call predecessors, (73), 71 states have return successors, (105), 76 states have call predecessors, (105), 73 states have call successors, (105) [2024-12-02 13:26:37,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 553 states to 553 states and 657 transitions. [2024-12-02 13:26:37,193 INFO L78 Accepts]: Start accepts. Automaton has 553 states and 657 transitions. Word has length 112 [2024-12-02 13:26:37,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:37,194 INFO L471 AbstractCegarLoop]: Abstraction has 553 states and 657 transitions. [2024-12-02 13:26:37,194 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2024-12-02 13:26:37,194 INFO L276 IsEmpty]: Start isEmpty. Operand 553 states and 657 transitions. [2024-12-02 13:26:37,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2024-12-02 13:26:37,197 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 13:26:37,197 INFO L218 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:37,206 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 13:26:37,397 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-12-02 13:26:37,398 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 13:26:37,398 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 13:26:37,398 INFO L85 PathProgramCache]: Analyzing trace with hash -1704011972, now seen corresponding path program 1 times [2024-12-02 13:26:37,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 13:26:37,398 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775308432] [2024-12-02 13:26:37,399 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:37,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 13:26:37,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:37,591 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 14 proven. 11 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-12-02 13:26:37,591 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 13:26:37,591 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775308432] [2024-12-02 13:26:37,591 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775308432] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 13:26:37,591 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [634430288] [2024-12-02 13:26:37,591 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 13:26:37,591 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 13:26:37,591 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 13:26:37,593 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 13:26:37,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 13:26:37,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 13:26:37,694 INFO L256 TraceCheckSpWp]: Trace formula consists of 325 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-12-02 13:26:37,698 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 13:26:37,838 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-12-02 13:26:37,838 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 13:26:37,838 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [634430288] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 13:26:37,839 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 13:26:37,839 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 17 [2024-12-02 13:26:37,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136106663] [2024-12-02 13:26:37,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 13:26:37,839 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 13:26:37,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 13:26:37,840 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 13:26:37,840 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=229, Unknown=0, NotChecked=0, Total=272 [2024-12-02 13:26:37,840 INFO L87 Difference]: Start difference. First operand 553 states and 657 transitions. Second operand has 8 states, 8 states have (on average 9.25) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2024-12-02 13:26:37,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 13:26:37,984 INFO L93 Difference]: Finished difference Result 949 states and 1138 transitions. [2024-12-02 13:26:37,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 13:26:37,985 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.25) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 104 [2024-12-02 13:26:37,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 13:26:37,986 INFO L225 Difference]: With dead ends: 949 [2024-12-02 13:26:37,986 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 13:26:37,988 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=287, Unknown=0, NotChecked=0, Total=342 [2024-12-02 13:26:37,989 INFO L435 NwaCegarLoop]: 157 mSDtfsCounter, 54 mSDsluCounter, 707 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 864 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 13:26:37,989 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 864 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 13:26:37,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 13:26:37,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 13:26:37,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 13:26:37,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 13:26:37,990 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 104 [2024-12-02 13:26:37,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 13:26:37,990 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 13:26:37,991 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.25) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2024-12-02 13:26:37,991 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 13:26:37,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 13:26:37,993 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 13:26:38,001 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 13:26:38,194 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-12-02 13:26:38,196 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 13:26:38,197 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 13:26:40,444 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 13:26:40,453 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 01:26:40 BoogieIcfgContainer [2024-12-02 13:26:40,453 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 13:26:40,453 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 13:26:40,453 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 13:26:40,454 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 13:26:40,454 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 01:26:34" (3/4) ... [2024-12-02 13:26:40,455 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 13:26:40,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 13:26:40,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 13:26:40,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 13:26:40,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 13:26:40,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-12-02 13:26:40,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 13:26:40,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2024-12-02 13:26:40,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2024-12-02 13:26:40,466 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2024-12-02 13:26:40,466 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 13:26:40,467 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 13:26:40,467 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 13:26:40,467 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 13:26:40,551 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 13:26:40,551 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 13:26:40,551 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 13:26:40,552 INFO L158 Benchmark]: Toolchain (without parser) took 7172.11ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 91.8MB in the beginning and 78.3MB in the end (delta: 13.6MB). Peak memory consumption was 73.8MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,552 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 71.9MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 13:26:40,553 INFO L158 Benchmark]: CACSL2BoogieTranslator took 387.92ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 73.1MB in the end (delta: 18.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,553 INFO L158 Benchmark]: Boogie Procedure Inliner took 40.55ms. Allocated memory is still 117.4MB. Free memory was 73.1MB in the beginning and 71.4MB in the end (delta: 1.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,553 INFO L158 Benchmark]: Boogie Preprocessor took 41.21ms. Allocated memory is still 117.4MB. Free memory was 71.2MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 13:26:40,553 INFO L158 Benchmark]: RCFGBuilder took 355.07ms. Allocated memory is still 117.4MB. Free memory was 69.5MB in the beginning and 53.5MB in the end (delta: 16.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,553 INFO L158 Benchmark]: TraceAbstraction took 6243.59ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 52.9MB in the beginning and 84.7MB in the end (delta: -31.8MB). Peak memory consumption was 58.4MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,554 INFO L158 Benchmark]: Witness Printer took 97.90ms. Allocated memory is still 176.2MB. Free memory was 84.7MB in the beginning and 78.3MB in the end (delta: 6.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 13:26:40,555 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 71.9MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 387.92ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 73.1MB in the end (delta: 18.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 40.55ms. Allocated memory is still 117.4MB. Free memory was 73.1MB in the beginning and 71.4MB in the end (delta: 1.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.21ms. Allocated memory is still 117.4MB. Free memory was 71.2MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 355.07ms. Allocated memory is still 117.4MB. Free memory was 69.5MB in the beginning and 53.5MB in the end (delta: 16.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 6243.59ms. Allocated memory was 117.4MB in the beginning and 176.2MB in the end (delta: 58.7MB). Free memory was 52.9MB in the beginning and 84.7MB in the end (delta: -31.8MB). Peak memory consumption was 58.4MB. Max. memory is 16.1GB. * Witness Printer took 97.90ms. Allocated memory is still 176.2MB. Free memory was 84.7MB in the beginning and 78.3MB in the end (delta: 6.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] - GenericResultAtLocation [Line: 159]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [159] - GenericResultAtLocation [Line: 186]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [186] - GenericResultAtLocation [Line: 288]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [288] - GenericResultAtLocation [Line: 323]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [323] - GenericResultAtLocation [Line: 689]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] - GenericResultAtLocation [Line: 754]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [754] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.9s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 713 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 693 mSDsluCounter, 4305 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3080 mSDsCounter, 97 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 840 IncrementalHoareTripleChecker+Invalid, 937 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 97 mSolverCounterUnsat, 1225 mSDtfsCounter, 840 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 304 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=553occurred in iteration=9, InterpolantAutomatonStates: 68, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 15 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 791 NumberOfCodeBlocks, 791 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 778 ConstructedInterpolants, 0 QuantifiedInterpolants, 1332 SizeOfPredicates, 1 NumberOfNonLiveVariables, 669 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 173/197 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 699]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-12-02 13:26:40,571 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c0fd98a-0dc5-4840-a957-746aaf231c59/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE