./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 11:05:39,093 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 11:05:39,145 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 11:05:39,150 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 11:05:39,150 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 11:05:39,170 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 11:05:39,171 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 11:05:39,171 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 11:05:39,171 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 11:05:39,172 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 11:05:39,172 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 11:05:39,172 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 11:05:39,172 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 11:05:39,172 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 11:05:39,172 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 11:05:39,172 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 11:05:39,172 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 11:05:39,173 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 11:05:39,173 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 11:05:39,174 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 11:05:39,174 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 11:05:39,174 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 11:05:39,175 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 11:05:39,175 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 11:05:39,175 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 11:05:39,175 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2024-12-02 11:05:39,373 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 11:05:39,380 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 11:05:39,382 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 11:05:39,383 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 11:05:39,384 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 11:05:39,385 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2024-12-02 11:05:41,986 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/data/17baed904/33ec234d6e2c438cbbb822926b25d11f/FLAG2872bf29e [2024-12-02 11:05:42,242 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 11:05:42,243 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2024-12-02 11:05:42,252 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/data/17baed904/33ec234d6e2c438cbbb822926b25d11f/FLAG2872bf29e [2024-12-02 11:05:42,576 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/data/17baed904/33ec234d6e2c438cbbb822926b25d11f [2024-12-02 11:05:42,578 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 11:05:42,579 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 11:05:42,580 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 11:05:42,580 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 11:05:42,584 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 11:05:42,585 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,586 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2f22669d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42, skipping insertion in model container [2024-12-02 11:05:42,586 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,613 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 11:05:42,830 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2024-12-02 11:05:42,854 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 11:05:42,863 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 11:05:42,871 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2024-12-02 11:05:42,872 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] [2024-12-02 11:05:42,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] [2024-12-02 11:05:42,913 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2024-12-02 11:05:42,922 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 11:05:42,940 INFO L204 MainTranslator]: Completed translation [2024-12-02 11:05:42,940 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42 WrapperNode [2024-12-02 11:05:42,940 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 11:05:42,941 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 11:05:42,941 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 11:05:42,941 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 11:05:42,947 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,957 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,977 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 220 [2024-12-02 11:05:42,978 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 11:05:42,978 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 11:05:42,978 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 11:05:42,978 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 11:05:42,987 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,987 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:42,989 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,001 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 11:05:43,001 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,001 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,005 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,006 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,009 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,009 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,010 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,011 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 11:05:43,012 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 11:05:43,012 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 11:05:43,012 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 11:05:43,013 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (1/1) ... [2024-12-02 11:05:43,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 11:05:43,025 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 11:05:43,035 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 11:05:43,037 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 11:05:43,056 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 11:05:43,056 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 11:05:43,057 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 11:05:43,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 11:05:43,058 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 11:05:43,058 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 11:05:43,058 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 11:05:43,058 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 11:05:43,120 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 11:05:43,122 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 11:05:43,329 INFO L? ?]: Removed 49 outVars from TransFormulas that were not future-live. [2024-12-02 11:05:43,330 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 11:05:43,340 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 11:05:43,341 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 11:05:43,341 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 11:05:43 BoogieIcfgContainer [2024-12-02 11:05:43,341 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 11:05:43,343 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 11:05:43,344 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 11:05:43,348 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 11:05:43,348 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 11:05:42" (1/3) ... [2024-12-02 11:05:43,349 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c5c0c94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 11:05:43, skipping insertion in model container [2024-12-02 11:05:43,349 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 11:05:42" (2/3) ... [2024-12-02 11:05:43,349 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c5c0c94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 11:05:43, skipping insertion in model container [2024-12-02 11:05:43,349 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 11:05:43" (3/3) ... [2024-12-02 11:05:43,350 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2024-12-02 11:05:43,362 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 11:05:43,364 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec1_product60.cil.c that has 9 procedures, 97 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 11:05:43,413 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 11:05:43,424 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2f26a6b5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 11:05:43,425 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 11:05:43,429 INFO L276 IsEmpty]: Start isEmpty. Operand has 97 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 11:05:43,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 11:05:43,436 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:43,437 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:43,437 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:43,442 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:43,442 INFO L85 PathProgramCache]: Analyzing trace with hash 1990714412, now seen corresponding path program 1 times [2024-12-02 11:05:43,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:43,450 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397201395] [2024-12-02 11:05:43,450 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:43,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:43,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:43,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 11:05:43,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:43,589 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397201395] [2024-12-02 11:05:43,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397201395] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:43,590 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:43,590 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 11:05:43,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1146008578] [2024-12-02 11:05:43,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:43,595 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 11:05:43,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:43,611 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 11:05:43,612 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 11:05:43,613 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:43,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:43,639 INFO L93 Difference]: Finished difference Result 186 states and 253 transitions. [2024-12-02 11:05:43,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 11:05:43,640 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 11:05:43,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:43,646 INFO L225 Difference]: With dead ends: 186 [2024-12-02 11:05:43,647 INFO L226 Difference]: Without dead ends: 88 [2024-12-02 11:05:43,649 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 11:05:43,651 INFO L435 NwaCegarLoop]: 123 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:43,651 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:43,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2024-12-02 11:05:43,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2024-12-02 11:05:43,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2024-12-02 11:05:43,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 114 transitions. [2024-12-02 11:05:43,680 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 114 transitions. Word has length 23 [2024-12-02 11:05:43,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:43,680 INFO L471 AbstractCegarLoop]: Abstraction has 88 states and 114 transitions. [2024-12-02 11:05:43,680 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:43,680 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 114 transitions. [2024-12-02 11:05:43,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 11:05:43,682 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:43,682 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:43,682 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 11:05:43,682 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:43,683 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:43,683 INFO L85 PathProgramCache]: Analyzing trace with hash -1072490650, now seen corresponding path program 1 times [2024-12-02 11:05:43,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:43,683 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [596839797] [2024-12-02 11:05:43,683 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:43,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:43,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:43,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 11:05:43,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:43,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [596839797] [2024-12-02 11:05:43,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [596839797] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:43,778 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:43,778 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 11:05:43,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472350088] [2024-12-02 11:05:43,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:43,779 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 11:05:43,779 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:43,780 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 11:05:43,780 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 11:05:43,780 INFO L87 Difference]: Start difference. First operand 88 states and 114 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:43,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:43,798 INFO L93 Difference]: Finished difference Result 139 states and 179 transitions. [2024-12-02 11:05:43,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 11:05:43,799 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 11:05:43,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:43,800 INFO L225 Difference]: With dead ends: 139 [2024-12-02 11:05:43,800 INFO L226 Difference]: Without dead ends: 80 [2024-12-02 11:05:43,801 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 11:05:43,802 INFO L435 NwaCegarLoop]: 102 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:43,802 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 183 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:43,803 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2024-12-02 11:05:43,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2024-12-02 11:05:43,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2024-12-02 11:05:43,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2024-12-02 11:05:43,812 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 23 [2024-12-02 11:05:43,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:43,813 INFO L471 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2024-12-02 11:05:43,813 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:43,813 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2024-12-02 11:05:43,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-12-02 11:05:43,814 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:43,814 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:43,814 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 11:05:43,814 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:43,814 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:43,815 INFO L85 PathProgramCache]: Analyzing trace with hash 618955655, now seen corresponding path program 1 times [2024-12-02 11:05:43,815 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:43,815 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1394269382] [2024-12-02 11:05:43,815 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:43,815 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:43,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:43,937 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 11:05:43,937 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:43,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1394269382] [2024-12-02 11:05:43,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1394269382] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:43,938 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:43,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 11:05:43,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576332993] [2024-12-02 11:05:43,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:43,938 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 11:05:43,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:43,939 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 11:05:43,939 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 11:05:43,939 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:44,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:44,127 INFO L93 Difference]: Finished difference Result 265 states and 348 transitions. [2024-12-02 11:05:44,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 11:05:44,127 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-12-02 11:05:44,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:44,129 INFO L225 Difference]: With dead ends: 265 [2024-12-02 11:05:44,129 INFO L226 Difference]: Without dead ends: 192 [2024-12-02 11:05:44,130 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2024-12-02 11:05:44,131 INFO L435 NwaCegarLoop]: 116 mSDtfsCounter, 239 mSDsluCounter, 293 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:44,131 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 409 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 11:05:44,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2024-12-02 11:05:44,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 186. [2024-12-02 11:05:44,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 139 states have (on average 1.3597122302158273) internal successors, (189), 157 states have internal predecessors, (189), 27 states have call successors, (27), 19 states have call predecessors, (27), 19 states have return successors, (28), 19 states have call predecessors, (28), 27 states have call successors, (28) [2024-12-02 11:05:44,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 244 transitions. [2024-12-02 11:05:44,155 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 244 transitions. Word has length 28 [2024-12-02 11:05:44,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:44,155 INFO L471 AbstractCegarLoop]: Abstraction has 186 states and 244 transitions. [2024-12-02 11:05:44,155 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:44,156 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 244 transitions. [2024-12-02 11:05:44,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2024-12-02 11:05:44,157 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:44,157 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:44,157 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 11:05:44,157 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:44,158 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:44,158 INFO L85 PathProgramCache]: Analyzing trace with hash 410015106, now seen corresponding path program 1 times [2024-12-02 11:05:44,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:44,158 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1141775369] [2024-12-02 11:05:44,158 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:44,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:44,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:44,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 11:05:44,259 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:44,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1141775369] [2024-12-02 11:05:44,260 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1141775369] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:44,260 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:44,260 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 11:05:44,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576996493] [2024-12-02 11:05:44,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:44,260 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 11:05:44,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:44,261 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 11:05:44,261 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 11:05:44,261 INFO L87 Difference]: Start difference. First operand 186 states and 244 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:44,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:44,345 INFO L93 Difference]: Finished difference Result 442 states and 594 transitions. [2024-12-02 11:05:44,345 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 11:05:44,345 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2024-12-02 11:05:44,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:44,348 INFO L225 Difference]: With dead ends: 442 [2024-12-02 11:05:44,348 INFO L226 Difference]: Without dead ends: 263 [2024-12-02 11:05:44,349 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 11:05:44,350 INFO L435 NwaCegarLoop]: 97 mSDtfsCounter, 56 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:44,350 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 350 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:44,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2024-12-02 11:05:44,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 261. [2024-12-02 11:05:44,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 196 states have (on average 1.3061224489795917) internal successors, (256), 215 states have internal predecessors, (256), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 11:05:44,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 334 transitions. [2024-12-02 11:05:44,383 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 334 transitions. Word has length 31 [2024-12-02 11:05:44,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:44,383 INFO L471 AbstractCegarLoop]: Abstraction has 261 states and 334 transitions. [2024-12-02 11:05:44,383 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 11:05:44,384 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 334 transitions. [2024-12-02 11:05:44,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 11:05:44,385 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:44,385 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:44,385 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 11:05:44,386 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:44,386 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:44,386 INFO L85 PathProgramCache]: Analyzing trace with hash 129876421, now seen corresponding path program 1 times [2024-12-02 11:05:44,386 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:44,386 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953260861] [2024-12-02 11:05:44,386 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:44,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:44,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:44,456 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 11:05:44,456 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:44,456 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953260861] [2024-12-02 11:05:44,456 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953260861] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:44,456 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:44,456 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 11:05:44,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502438531] [2024-12-02 11:05:44,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:44,457 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 11:05:44,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:44,457 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 11:05:44,457 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 11:05:44,457 INFO L87 Difference]: Start difference. First operand 261 states and 334 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 11:05:44,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:44,485 INFO L93 Difference]: Finished difference Result 519 states and 685 transitions. [2024-12-02 11:05:44,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 11:05:44,485 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2024-12-02 11:05:44,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:44,488 INFO L225 Difference]: With dead ends: 519 [2024-12-02 11:05:44,488 INFO L226 Difference]: Without dead ends: 265 [2024-12-02 11:05:44,489 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 11:05:44,490 INFO L435 NwaCegarLoop]: 101 mSDtfsCounter, 0 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:44,490 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 297 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:44,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2024-12-02 11:05:44,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 265. [2024-12-02 11:05:44,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 200 states have (on average 1.3) internal successors, (260), 219 states have internal predecessors, (260), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 11:05:44,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 338 transitions. [2024-12-02 11:05:44,514 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 338 transitions. Word has length 50 [2024-12-02 11:05:44,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:44,514 INFO L471 AbstractCegarLoop]: Abstraction has 265 states and 338 transitions. [2024-12-02 11:05:44,515 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 11:05:44,515 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 338 transitions. [2024-12-02 11:05:44,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 11:05:44,516 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:44,516 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:44,516 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 11:05:44,517 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:44,517 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:44,517 INFO L85 PathProgramCache]: Analyzing trace with hash 67836807, now seen corresponding path program 1 times [2024-12-02 11:05:44,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:44,518 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469665755] [2024-12-02 11:05:44,518 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:44,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:44,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:44,585 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 11:05:44,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:44,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469665755] [2024-12-02 11:05:44,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469665755] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:44,585 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:44,585 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 11:05:44,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641050838] [2024-12-02 11:05:44,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:44,586 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 11:05:44,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:44,586 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 11:05:44,586 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 11:05:44,587 INFO L87 Difference]: Start difference. First operand 265 states and 338 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 11:05:44,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:44,618 INFO L93 Difference]: Finished difference Result 529 states and 695 transitions. [2024-12-02 11:05:44,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 11:05:44,619 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2024-12-02 11:05:44,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:44,622 INFO L225 Difference]: With dead ends: 529 [2024-12-02 11:05:44,622 INFO L226 Difference]: Without dead ends: 271 [2024-12-02 11:05:44,623 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 11:05:44,624 INFO L435 NwaCegarLoop]: 100 mSDtfsCounter, 0 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:44,624 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 394 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:44,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2024-12-02 11:05:44,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 271. [2024-12-02 11:05:44,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 206 states have (on average 1.2912621359223302) internal successors, (266), 225 states have internal predecessors, (266), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 11:05:44,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 344 transitions. [2024-12-02 11:05:44,649 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 344 transitions. Word has length 50 [2024-12-02 11:05:44,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:44,650 INFO L471 AbstractCegarLoop]: Abstraction has 271 states and 344 transitions. [2024-12-02 11:05:44,650 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 11:05:44,650 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 344 transitions. [2024-12-02 11:05:44,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 11:05:44,651 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:44,651 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:44,651 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 11:05:44,651 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:44,652 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:44,652 INFO L85 PathProgramCache]: Analyzing trace with hash -379596669, now seen corresponding path program 1 times [2024-12-02 11:05:44,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:44,652 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1808459204] [2024-12-02 11:05:44,652 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:44,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:44,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:44,731 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 11:05:44,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:44,731 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1808459204] [2024-12-02 11:05:44,731 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1808459204] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:44,731 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:44,732 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 11:05:44,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379825853] [2024-12-02 11:05:44,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:44,732 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 11:05:44,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:44,733 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 11:05:44,733 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 11:05:44,733 INFO L87 Difference]: Start difference. First operand 271 states and 344 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 11:05:44,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:44,865 INFO L93 Difference]: Finished difference Result 898 states and 1177 transitions. [2024-12-02 11:05:44,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 11:05:44,866 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2024-12-02 11:05:44,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:44,871 INFO L225 Difference]: With dead ends: 898 [2024-12-02 11:05:44,871 INFO L226 Difference]: Without dead ends: 634 [2024-12-02 11:05:44,872 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 11:05:44,873 INFO L435 NwaCegarLoop]: 168 mSDtfsCounter, 129 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:44,873 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 326 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 11:05:44,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 634 states. [2024-12-02 11:05:44,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 634 to 620. [2024-12-02 11:05:44,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 620 states, 469 states have (on average 1.2686567164179106) internal successors, (595), 505 states have internal predecessors, (595), 77 states have call successors, (77), 71 states have call predecessors, (77), 73 states have return successors, (120), 73 states have call predecessors, (120), 77 states have call successors, (120) [2024-12-02 11:05:44,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 620 states to 620 states and 792 transitions. [2024-12-02 11:05:44,929 INFO L78 Accepts]: Start accepts. Automaton has 620 states and 792 transitions. Word has length 50 [2024-12-02 11:05:44,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:44,929 INFO L471 AbstractCegarLoop]: Abstraction has 620 states and 792 transitions. [2024-12-02 11:05:44,930 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 11:05:44,930 INFO L276 IsEmpty]: Start isEmpty. Operand 620 states and 792 transitions. [2024-12-02 11:05:44,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-12-02 11:05:44,932 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:44,932 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:44,932 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 11:05:44,932 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:44,932 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:44,932 INFO L85 PathProgramCache]: Analyzing trace with hash 1067729565, now seen corresponding path program 1 times [2024-12-02 11:05:44,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:44,933 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770711749] [2024-12-02 11:05:44,933 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:44,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:44,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:45,034 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 11:05:45,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:45,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1770711749] [2024-12-02 11:05:45,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1770711749] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:45,035 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:45,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 11:05:45,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296919837] [2024-12-02 11:05:45,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:45,035 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 11:05:45,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:45,036 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 11:05:45,036 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 11:05:45,036 INFO L87 Difference]: Start difference. First operand 620 states and 792 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 11:05:45,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:45,208 INFO L93 Difference]: Finished difference Result 1818 states and 2394 transitions. [2024-12-02 11:05:45,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 11:05:45,209 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2024-12-02 11:05:45,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:45,214 INFO L225 Difference]: With dead ends: 1818 [2024-12-02 11:05:45,214 INFO L226 Difference]: Without dead ends: 1205 [2024-12-02 11:05:45,216 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-12-02 11:05:45,216 INFO L435 NwaCegarLoop]: 101 mSDtfsCounter, 72 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:45,216 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 461 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 11:05:45,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1205 states. [2024-12-02 11:05:45,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1205 to 1205. [2024-12-02 11:05:45,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1205 states, 904 states have (on average 1.2455752212389382) internal successors, (1126), 975 states have internal predecessors, (1126), 154 states have call successors, (154), 142 states have call predecessors, (154), 146 states have return successors, (253), 146 states have call predecessors, (253), 154 states have call successors, (253) [2024-12-02 11:05:45,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1205 states to 1205 states and 1533 transitions. [2024-12-02 11:05:45,294 INFO L78 Accepts]: Start accepts. Automaton has 1205 states and 1533 transitions. Word has length 54 [2024-12-02 11:05:45,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:45,295 INFO L471 AbstractCegarLoop]: Abstraction has 1205 states and 1533 transitions. [2024-12-02 11:05:45,295 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 11:05:45,295 INFO L276 IsEmpty]: Start isEmpty. Operand 1205 states and 1533 transitions. [2024-12-02 11:05:45,298 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-12-02 11:05:45,298 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:45,298 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:45,298 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 11:05:45,298 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:45,299 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:45,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1336496263, now seen corresponding path program 1 times [2024-12-02 11:05:45,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:45,299 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54736172] [2024-12-02 11:05:45,299 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:45,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:45,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:45,404 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 11:05:45,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:45,404 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54736172] [2024-12-02 11:05:45,404 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54736172] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 11:05:45,404 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [914633408] [2024-12-02 11:05:45,404 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:45,404 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 11:05:45,404 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 11:05:45,406 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 11:05:45,407 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 11:05:45,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:45,485 INFO L256 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 11:05:45,489 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 11:05:45,641 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 11:05:45,641 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 11:05:45,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [914633408] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:45,641 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 11:05:45,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [8] total 13 [2024-12-02 11:05:45,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [419052081] [2024-12-02 11:05:45,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:45,642 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-12-02 11:05:45,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:45,642 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-12-02 11:05:45,643 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2024-12-02 11:05:45,643 INFO L87 Difference]: Start difference. First operand 1205 states and 1533 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2024-12-02 11:05:45,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:45,835 INFO L93 Difference]: Finished difference Result 2399 states and 3061 transitions. [2024-12-02 11:05:45,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 11:05:45,836 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2024-12-02 11:05:45,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:45,843 INFO L225 Difference]: With dead ends: 2399 [2024-12-02 11:05:45,843 INFO L226 Difference]: Without dead ends: 1201 [2024-12-02 11:05:45,847 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2024-12-02 11:05:45,847 INFO L435 NwaCegarLoop]: 184 mSDtfsCounter, 67 mSDsluCounter, 714 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 898 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:45,848 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 898 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 11:05:45,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1201 states. [2024-12-02 11:05:45,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1201 to 1201. [2024-12-02 11:05:45,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1201 states, 900 states have (on average 1.23) internal successors, (1107), 969 states have internal predecessors, (1107), 154 states have call successors, (154), 142 states have call predecessors, (154), 146 states have return successors, (228), 146 states have call predecessors, (228), 154 states have call successors, (228) [2024-12-02 11:05:45,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1201 states to 1201 states and 1489 transitions. [2024-12-02 11:05:45,946 INFO L78 Accepts]: Start accepts. Automaton has 1201 states and 1489 transitions. Word has length 58 [2024-12-02 11:05:45,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:45,946 INFO L471 AbstractCegarLoop]: Abstraction has 1201 states and 1489 transitions. [2024-12-02 11:05:45,946 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2024-12-02 11:05:45,946 INFO L276 IsEmpty]: Start isEmpty. Operand 1201 states and 1489 transitions. [2024-12-02 11:05:45,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2024-12-02 11:05:45,952 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:45,952 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:45,962 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 11:05:46,153 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2024-12-02 11:05:46,153 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:46,154 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:46,154 INFO L85 PathProgramCache]: Analyzing trace with hash -937574075, now seen corresponding path program 1 times [2024-12-02 11:05:46,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:46,154 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120024527] [2024-12-02 11:05:46,154 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:46,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:46,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:46,345 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 2 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-12-02 11:05:46,346 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:46,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120024527] [2024-12-02 11:05:46,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120024527] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 11:05:46,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1704379921] [2024-12-02 11:05:46,346 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:46,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 11:05:46,346 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 11:05:46,348 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 11:05:46,349 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 11:05:46,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:46,448 INFO L256 TraceCheckSpWp]: Trace formula consists of 320 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-12-02 11:05:46,452 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 11:05:46,542 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 11:05:46,542 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 11:05:46,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1704379921] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:46,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 11:05:46,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 7 [2024-12-02 11:05:46,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238854955] [2024-12-02 11:05:46,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:46,543 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 11:05:46,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:46,544 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 11:05:46,544 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2024-12-02 11:05:46,544 INFO L87 Difference]: Start difference. First operand 1201 states and 1489 transitions. Second operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 11:05:46,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:46,768 INFO L93 Difference]: Finished difference Result 3155 states and 4103 transitions. [2024-12-02 11:05:46,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 11:05:46,769 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 96 [2024-12-02 11:05:46,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:46,783 INFO L225 Difference]: With dead ends: 3155 [2024-12-02 11:05:46,783 INFO L226 Difference]: Without dead ends: 2201 [2024-12-02 11:05:46,788 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2024-12-02 11:05:46,788 INFO L435 NwaCegarLoop]: 151 mSDtfsCounter, 126 mSDsluCounter, 440 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:46,789 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 591 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 11:05:46,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2201 states. [2024-12-02 11:05:46,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2201 to 1995. [2024-12-02 11:05:46,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1995 states, 1486 states have (on average 1.2281292059219382) internal successors, (1825), 1591 states have internal predecessors, (1825), 264 states have call successors, (264), 248 states have call predecessors, (264), 244 states have return successors, (434), 232 states have call predecessors, (434), 264 states have call successors, (434) [2024-12-02 11:05:46,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1995 states to 1995 states and 2523 transitions. [2024-12-02 11:05:46,969 INFO L78 Accepts]: Start accepts. Automaton has 1995 states and 2523 transitions. Word has length 96 [2024-12-02 11:05:46,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:46,970 INFO L471 AbstractCegarLoop]: Abstraction has 1995 states and 2523 transitions. [2024-12-02 11:05:46,970 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 11:05:46,970 INFO L276 IsEmpty]: Start isEmpty. Operand 1995 states and 2523 transitions. [2024-12-02 11:05:46,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2024-12-02 11:05:46,973 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 11:05:46,973 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:46,982 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 11:05:47,174 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 11:05:47,174 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 11:05:47,175 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 11:05:47,175 INFO L85 PathProgramCache]: Analyzing trace with hash 1551954887, now seen corresponding path program 1 times [2024-12-02 11:05:47,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 11:05:47,175 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199978807] [2024-12-02 11:05:47,175 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 11:05:47,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 11:05:47,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 11:05:47,309 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-12-02 11:05:47,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 11:05:47,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199978807] [2024-12-02 11:05:47,309 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199978807] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 11:05:47,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 11:05:47,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-12-02 11:05:47,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1857688710] [2024-12-02 11:05:47,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 11:05:47,310 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-12-02 11:05:47,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 11:05:47,310 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-12-02 11:05:47,310 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-12-02 11:05:47,311 INFO L87 Difference]: Start difference. First operand 1995 states and 2523 transitions. Second operand has 7 states, 7 states have (on average 9.142857142857142) internal successors, (64), 7 states have internal predecessors, (64), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-12-02 11:05:47,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 11:05:47,404 INFO L93 Difference]: Finished difference Result 2671 states and 3357 transitions. [2024-12-02 11:05:47,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 11:05:47,405 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.142857142857142) internal successors, (64), 7 states have internal predecessors, (64), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 96 [2024-12-02 11:05:47,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 11:05:47,408 INFO L225 Difference]: With dead ends: 2671 [2024-12-02 11:05:47,408 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 11:05:47,413 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-12-02 11:05:47,414 INFO L435 NwaCegarLoop]: 88 mSDtfsCounter, 0 mSDsluCounter, 433 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 521 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 11:05:47,414 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 521 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 11:05:47,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 11:05:47,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 11:05:47,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 11:05:47,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 11:05:47,416 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2024-12-02 11:05:47,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 11:05:47,416 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 11:05:47,416 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.142857142857142) internal successors, (64), 7 states have internal predecessors, (64), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-12-02 11:05:47,417 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 11:05:47,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 11:05:47,419 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 11:05:47,419 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2024-12-02 11:05:47,422 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 11:05:47,423 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 11:05:51,654 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 11:05:51,665 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 11:05:51 BoogieIcfgContainer [2024-12-02 11:05:51,665 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 11:05:51,666 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 11:05:51,666 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 11:05:51,666 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 11:05:51,667 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 11:05:43" (3/4) ... [2024-12-02 11:05:51,668 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 11:05:51,671 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 11:05:51,672 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 11:05:51,676 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2024-12-02 11:05:51,677 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 11:05:51,677 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 11:05:51,678 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 11:05:51,678 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 11:05:51,764 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 11:05:51,764 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 11:05:51,764 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 11:05:51,765 INFO L158 Benchmark]: Toolchain (without parser) took 9186.09ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 91.5MB in the beginning and 117.1MB in the end (delta: -25.6MB). Peak memory consumption was 100.4MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,765 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 73.1MB. There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 11:05:51,766 INFO L158 Benchmark]: CACSL2BoogieTranslator took 360.75ms. Allocated memory is still 117.4MB. Free memory was 91.3MB in the beginning and 72.4MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,766 INFO L158 Benchmark]: Boogie Procedure Inliner took 36.39ms. Allocated memory is still 117.4MB. Free memory was 72.4MB in the beginning and 70.4MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,766 INFO L158 Benchmark]: Boogie Preprocessor took 33.53ms. Allocated memory is still 117.4MB. Free memory was 70.4MB in the beginning and 68.5MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 11:05:51,766 INFO L158 Benchmark]: RCFGBuilder took 328.99ms. Allocated memory is still 117.4MB. Free memory was 68.5MB in the beginning and 51.5MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,767 INFO L158 Benchmark]: TraceAbstraction took 8321.78ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 50.9MB in the beginning and 125.2MB in the end (delta: -74.3MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,767 INFO L158 Benchmark]: Witness Printer took 98.56ms. Allocated memory is still 243.3MB. Free memory was 125.2MB in the beginning and 117.1MB in the end (delta: 8.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 11:05:51,769 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 73.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 360.75ms. Allocated memory is still 117.4MB. Free memory was 91.3MB in the beginning and 72.4MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 36.39ms. Allocated memory is still 117.4MB. Free memory was 72.4MB in the beginning and 70.4MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.53ms. Allocated memory is still 117.4MB. Free memory was 70.4MB in the beginning and 68.5MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 328.99ms. Allocated memory is still 117.4MB. Free memory was 68.5MB in the beginning and 51.5MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8321.78ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 50.9MB in the beginning and 125.2MB in the end (delta: -74.3MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. * Witness Printer took 98.56ms. Allocated memory is still 243.3MB. Free memory was 125.2MB in the beginning and 117.1MB in the end (delta: 8.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 153]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] - GenericResultAtLocation [Line: 262]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] - GenericResultAtLocation [Line: 290]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] - GenericResultAtLocation [Line: 656]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] - GenericResultAtLocation [Line: 665]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] - GenericResultAtLocation [Line: 736]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] - GenericResultAtLocation [Line: 976]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 97 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.0s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 713 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 706 mSDsluCounter, 4553 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3222 mSDsCounter, 59 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 484 IncrementalHoareTripleChecker+Invalid, 543 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 59 mSolverCounterUnsat, 1331 mSDtfsCounter, 484 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 221 GetRequests, 172 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1995occurred in iteration=10, InterpolantAutomatonStates: 56, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 228 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 713 NumberOfCodeBlocks, 713 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 700 ConstructedInterpolants, 0 QuantifiedInterpolants, 1253 SizeOfPredicates, 2 NumberOfNonLiveVariables, 551 ConjunctsInSsa, 19 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 104/108 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (splverifierCounter == 0)) && (0 != systemActive))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 677]: Location Invariant Derived location invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-12-02 11:05:51,786 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e45cff95-9647-4498-bf82-ccaade261a6b/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE