./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 12:05:05,248 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 12:05:05,318 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 12:05:05,324 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 12:05:05,325 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 12:05:05,351 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 12:05:05,351 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 12:05:05,352 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 12:05:05,352 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 12:05:05,352 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 12:05:05,352 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 12:05:05,352 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 12:05:05,353 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 12:05:05,353 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 12:05:05,353 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 12:05:05,353 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 12:05:05,353 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 12:05:05,354 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 12:05:05,355 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 12:05:05,355 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 12:05:05,355 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 12:05:05,356 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 12:05:05,356 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 12:05:05,357 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 12:05:05,357 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 12:05:05,357 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 [2024-12-02 12:05:05,652 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 12:05:05,660 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 12:05:05,662 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 12:05:05,663 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 12:05:05,664 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 12:05:05,665 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2024-12-02 12:05:09,005 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/data/77f60603b/34864ad42d054a31b9e4488ea10c8c2a/FLAGbab452f88 [2024-12-02 12:05:09,250 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 12:05:09,251 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2024-12-02 12:05:09,263 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/data/77f60603b/34864ad42d054a31b9e4488ea10c8c2a/FLAGbab452f88 [2024-12-02 12:05:09,279 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/data/77f60603b/34864ad42d054a31b9e4488ea10c8c2a [2024-12-02 12:05:09,282 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 12:05:09,284 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 12:05:09,285 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 12:05:09,285 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 12:05:09,289 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 12:05:09,290 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,291 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ca913 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09, skipping insertion in model container [2024-12-02 12:05:09,291 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,325 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 12:05:09,637 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2024-12-02 12:05:09,643 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 12:05:09,656 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 12:05:09,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2024-12-02 12:05:09,668 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [277] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [448] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [483] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [849] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [953] [2024-12-02 12:05:09,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [962] [2024-12-02 12:05:09,725 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2024-12-02 12:05:09,728 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 12:05:09,750 INFO L204 MainTranslator]: Completed translation [2024-12-02 12:05:09,751 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09 WrapperNode [2024-12-02 12:05:09,751 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 12:05:09,752 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 12:05:09,752 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 12:05:09,752 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 12:05:09,760 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,774 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,796 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 211 [2024-12-02 12:05:09,796 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 12:05:09,797 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 12:05:09,797 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 12:05:09,797 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 12:05:09,809 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,809 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,812 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,829 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 12:05:09,829 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,829 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,834 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,836 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,840 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,842 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,842 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,844 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 12:05:09,845 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 12:05:09,845 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 12:05:09,845 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 12:05:09,846 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (1/1) ... [2024-12-02 12:05:09,851 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 12:05:09,864 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 12:05:09,878 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 12:05:09,881 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 12:05:09,904 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 12:05:09,905 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 12:05:09,905 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 12:05:09,905 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 12:05:09,905 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 12:05:09,905 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 12:05:09,905 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 12:05:09,905 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 12:05:09,905 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 12:05:09,905 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 12:05:09,906 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 12:05:09,906 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-12-02 12:05:09,906 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-12-02 12:05:09,906 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 12:05:09,906 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 12:05:09,906 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 12:05:09,906 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 12:05:09,906 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 12:05:09,906 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 12:05:09,906 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 12:05:09,985 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 12:05:09,988 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 12:05:10,269 INFO L? ?]: Removed 45 outVars from TransFormulas that were not future-live. [2024-12-02 12:05:10,269 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 12:05:10,282 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 12:05:10,283 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 12:05:10,283 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:05:10 BoogieIcfgContainer [2024-12-02 12:05:10,283 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 12:05:10,286 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 12:05:10,286 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 12:05:10,292 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 12:05:10,292 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 12:05:09" (1/3) ... [2024-12-02 12:05:10,293 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c1f1c32 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:05:10, skipping insertion in model container [2024-12-02 12:05:10,293 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:05:09" (2/3) ... [2024-12-02 12:05:10,293 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c1f1c32 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:05:10, skipping insertion in model container [2024-12-02 12:05:10,294 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:05:10" (3/3) ... [2024-12-02 12:05:10,295 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.c [2024-12-02 12:05:10,312 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 12:05:10,314 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product51.cil.c that has 9 procedures, 97 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 12:05:10,378 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 12:05:10,392 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@74665969, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 12:05:10,392 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 12:05:10,396 INFO L276 IsEmpty]: Start isEmpty. Operand has 97 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 12:05:10,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-12-02 12:05:10,405 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:10,406 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:10,406 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:10,411 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:10,411 INFO L85 PathProgramCache]: Analyzing trace with hash 737966605, now seen corresponding path program 1 times [2024-12-02 12:05:10,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:10,418 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [186104580] [2024-12-02 12:05:10,419 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:10,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:10,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:10,729 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:10,729 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:10,730 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [186104580] [2024-12-02 12:05:10,730 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [186104580] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:10,730 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:10,731 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 12:05:10,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640500803] [2024-12-02 12:05:10,734 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:10,737 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 12:05:10,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:10,754 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 12:05:10,755 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 12:05:10,757 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 12:05:10,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:10,822 INFO L93 Difference]: Finished difference Result 272 states and 374 transitions. [2024-12-02 12:05:10,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 12:05:10,824 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 36 [2024-12-02 12:05:10,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:10,833 INFO L225 Difference]: With dead ends: 272 [2024-12-02 12:05:10,834 INFO L226 Difference]: Without dead ends: 167 [2024-12-02 12:05:10,838 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 12:05:10,842 INFO L435 NwaCegarLoop]: 138 mSDtfsCounter, 99 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 249 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:10,843 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 249 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 12:05:10,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2024-12-02 12:05:10,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 164. [2024-12-02 12:05:10,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 121 states have (on average 1.3388429752066116) internal successors, (162), 136 states have internal predecessors, (162), 28 states have call successors, (28), 16 states have call predecessors, (28), 14 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2024-12-02 12:05:10,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 216 transitions. [2024-12-02 12:05:10,903 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 216 transitions. Word has length 36 [2024-12-02 12:05:10,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:10,904 INFO L471 AbstractCegarLoop]: Abstraction has 164 states and 216 transitions. [2024-12-02 12:05:10,904 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 12:05:10,904 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 216 transitions. [2024-12-02 12:05:10,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-12-02 12:05:10,908 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:10,908 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:10,908 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 12:05:10,909 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:10,909 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:10,910 INFO L85 PathProgramCache]: Analyzing trace with hash 1488669532, now seen corresponding path program 1 times [2024-12-02 12:05:10,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:10,910 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624795786] [2024-12-02 12:05:10,910 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:10,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:10,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:11,051 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:11,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:11,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624795786] [2024-12-02 12:05:11,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624795786] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:11,052 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:11,052 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 12:05:11,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [739148511] [2024-12-02 12:05:11,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:11,054 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 12:05:11,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:11,055 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 12:05:11,055 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 12:05:11,055 INFO L87 Difference]: Start difference. First operand 164 states and 216 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-12-02 12:05:11,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:11,500 INFO L93 Difference]: Finished difference Result 538 states and 750 transitions. [2024-12-02 12:05:11,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 12:05:11,501 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 46 [2024-12-02 12:05:11,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:11,506 INFO L225 Difference]: With dead ends: 538 [2024-12-02 12:05:11,506 INFO L226 Difference]: Without dead ends: 382 [2024-12-02 12:05:11,510 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2024-12-02 12:05:11,511 INFO L435 NwaCegarLoop]: 155 mSDtfsCounter, 238 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:11,511 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 378 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-12-02 12:05:11,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2024-12-02 12:05:11,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 344. [2024-12-02 12:05:11,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 257 states have (on average 1.2684824902723735) internal successors, (326), 267 states have internal predecessors, (326), 51 states have call successors, (51), 35 states have call predecessors, (51), 35 states have return successors, (75), 51 states have call predecessors, (75), 47 states have call successors, (75) [2024-12-02 12:05:11,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 452 transitions. [2024-12-02 12:05:11,571 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 452 transitions. Word has length 46 [2024-12-02 12:05:11,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:11,572 INFO L471 AbstractCegarLoop]: Abstraction has 344 states and 452 transitions. [2024-12-02 12:05:11,572 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-12-02 12:05:11,572 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 452 transitions. [2024-12-02 12:05:11,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-12-02 12:05:11,574 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:11,574 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:11,575 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 12:05:11,575 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:11,575 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:11,575 INFO L85 PathProgramCache]: Analyzing trace with hash -871115453, now seen corresponding path program 1 times [2024-12-02 12:05:11,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:11,576 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648994068] [2024-12-02 12:05:11,576 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:11,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:11,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:11,731 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 12:05:11,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:11,731 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648994068] [2024-12-02 12:05:11,731 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648994068] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:11,731 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:11,731 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 12:05:11,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97793619] [2024-12-02 12:05:11,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:11,732 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 12:05:11,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:11,733 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 12:05:11,733 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 12:05:11,733 INFO L87 Difference]: Start difference. First operand 344 states and 452 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 12:05:11,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:11,907 INFO L93 Difference]: Finished difference Result 676 states and 908 transitions. [2024-12-02 12:05:11,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 12:05:11,908 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2024-12-02 12:05:11,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:11,912 INFO L225 Difference]: With dead ends: 676 [2024-12-02 12:05:11,912 INFO L226 Difference]: Without dead ends: 340 [2024-12-02 12:05:11,915 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-12-02 12:05:11,916 INFO L435 NwaCegarLoop]: 120 mSDtfsCounter, 81 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 517 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:11,916 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 517 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 12:05:11,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340 states. [2024-12-02 12:05:11,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340 to 340. [2024-12-02 12:05:11,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 253 states have (on average 1.2411067193675889) internal successors, (314), 263 states have internal predecessors, (314), 51 states have call successors, (51), 35 states have call predecessors, (51), 35 states have return successors, (75), 51 states have call predecessors, (75), 47 states have call successors, (75) [2024-12-02 12:05:11,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 440 transitions. [2024-12-02 12:05:11,960 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 440 transitions. Word has length 40 [2024-12-02 12:05:11,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:11,960 INFO L471 AbstractCegarLoop]: Abstraction has 340 states and 440 transitions. [2024-12-02 12:05:11,961 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 12:05:11,961 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 440 transitions. [2024-12-02 12:05:11,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-12-02 12:05:11,963 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:11,963 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:11,963 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 12:05:11,963 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:11,964 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:11,964 INFO L85 PathProgramCache]: Analyzing trace with hash 1281913099, now seen corresponding path program 1 times [2024-12-02 12:05:11,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:11,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301049618] [2024-12-02 12:05:11,964 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:11,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:11,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:12,024 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:12,025 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:12,025 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301049618] [2024-12-02 12:05:12,025 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301049618] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:12,025 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:12,025 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 12:05:12,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [131306425] [2024-12-02 12:05:12,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:12,026 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 12:05:12,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:12,026 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 12:05:12,026 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 12:05:12,027 INFO L87 Difference]: Start difference. First operand 340 states and 440 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-12-02 12:05:12,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:12,048 INFO L93 Difference]: Finished difference Result 544 states and 673 transitions. [2024-12-02 12:05:12,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 12:05:12,049 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 46 [2024-12-02 12:05:12,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:12,052 INFO L225 Difference]: With dead ends: 544 [2024-12-02 12:05:12,053 INFO L226 Difference]: Without dead ends: 288 [2024-12-02 12:05:12,054 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 12:05:12,055 INFO L435 NwaCegarLoop]: 102 mSDtfsCounter, 16 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:12,055 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 12:05:12,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2024-12-02 12:05:12,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 288. [2024-12-02 12:05:12,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 217 states have (on average 1.262672811059908) internal successors, (274), 231 states have internal predecessors, (274), 35 states have call successors, (35), 29 states have call predecessors, (35), 35 states have return successors, (45), 37 states have call predecessors, (45), 35 states have call successors, (45) [2024-12-02 12:05:12,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 354 transitions. [2024-12-02 12:05:12,079 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 354 transitions. Word has length 46 [2024-12-02 12:05:12,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:12,080 INFO L471 AbstractCegarLoop]: Abstraction has 288 states and 354 transitions. [2024-12-02 12:05:12,080 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-12-02 12:05:12,080 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 354 transitions. [2024-12-02 12:05:12,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 12:05:12,081 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:12,082 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:12,082 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 12:05:12,082 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:12,082 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:12,082 INFO L85 PathProgramCache]: Analyzing trace with hash 906476081, now seen corresponding path program 1 times [2024-12-02 12:05:12,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:12,083 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021291694] [2024-12-02 12:05:12,083 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:12,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:12,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:12,183 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:12,183 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:12,183 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021291694] [2024-12-02 12:05:12,183 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021291694] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:12,184 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:12,184 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 12:05:12,184 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049287008] [2024-12-02 12:05:12,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:12,185 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 12:05:12,185 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:12,185 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 12:05:12,185 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 12:05:12,186 INFO L87 Difference]: Start difference. First operand 288 states and 354 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:12,225 INFO L93 Difference]: Finished difference Result 574 states and 714 transitions. [2024-12-02 12:05:12,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 12:05:12,226 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2024-12-02 12:05:12,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:12,229 INFO L225 Difference]: With dead ends: 574 [2024-12-02 12:05:12,229 INFO L226 Difference]: Without dead ends: 294 [2024-12-02 12:05:12,231 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 12:05:12,231 INFO L435 NwaCegarLoop]: 100 mSDtfsCounter, 0 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:12,232 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 394 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 12:05:12,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2024-12-02 12:05:12,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2024-12-02 12:05:12,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 223 states have (on average 1.2556053811659194) internal successors, (280), 237 states have internal predecessors, (280), 35 states have call successors, (35), 29 states have call predecessors, (35), 35 states have return successors, (45), 37 states have call predecessors, (45), 35 states have call successors, (45) [2024-12-02 12:05:12,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 360 transitions. [2024-12-02 12:05:12,263 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 360 transitions. Word has length 50 [2024-12-02 12:05:12,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:12,264 INFO L471 AbstractCegarLoop]: Abstraction has 294 states and 360 transitions. [2024-12-02 12:05:12,264 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,264 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 360 transitions. [2024-12-02 12:05:12,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 12:05:12,265 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:12,266 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:12,266 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 12:05:12,266 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:12,266 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:12,267 INFO L85 PathProgramCache]: Analyzing trace with hash -782467661, now seen corresponding path program 1 times [2024-12-02 12:05:12,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:12,267 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469625249] [2024-12-02 12:05:12,267 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:12,267 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:12,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:12,355 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:12,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:12,356 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469625249] [2024-12-02 12:05:12,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469625249] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:12,356 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:12,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 12:05:12,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066348889] [2024-12-02 12:05:12,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:12,357 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 12:05:12,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:12,357 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 12:05:12,357 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:12,358 INFO L87 Difference]: Start difference. First operand 294 states and 360 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:12,397 INFO L93 Difference]: Finished difference Result 584 states and 730 transitions. [2024-12-02 12:05:12,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 12:05:12,398 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2024-12-02 12:05:12,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:12,401 INFO L225 Difference]: With dead ends: 584 [2024-12-02 12:05:12,401 INFO L226 Difference]: Without dead ends: 298 [2024-12-02 12:05:12,402 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:12,403 INFO L435 NwaCegarLoop]: 101 mSDtfsCounter, 0 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:12,403 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 297 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 12:05:12,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2024-12-02 12:05:12,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 298. [2024-12-02 12:05:12,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 227 states have (on average 1.251101321585903) internal successors, (284), 241 states have internal predecessors, (284), 35 states have call successors, (35), 29 states have call predecessors, (35), 35 states have return successors, (45), 37 states have call predecessors, (45), 35 states have call successors, (45) [2024-12-02 12:05:12,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 364 transitions. [2024-12-02 12:05:12,429 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 364 transitions. Word has length 50 [2024-12-02 12:05:12,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:12,429 INFO L471 AbstractCegarLoop]: Abstraction has 298 states and 364 transitions. [2024-12-02 12:05:12,430 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,430 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 364 transitions. [2024-12-02 12:05:12,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-12-02 12:05:12,431 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:12,431 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:12,431 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 12:05:12,431 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:12,431 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:12,432 INFO L85 PathProgramCache]: Analyzing trace with hash -359765835, now seen corresponding path program 1 times [2024-12-02 12:05:12,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:12,432 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452086208] [2024-12-02 12:05:12,432 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:12,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:12,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:12,525 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:12,525 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:12,525 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452086208] [2024-12-02 12:05:12,525 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452086208] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:12,525 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:12,525 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 12:05:12,525 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692480966] [2024-12-02 12:05:12,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:12,526 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 12:05:12,526 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:12,527 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 12:05:12,527 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:12,527 INFO L87 Difference]: Start difference. First operand 298 states and 364 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:12,700 INFO L93 Difference]: Finished difference Result 941 states and 1184 transitions. [2024-12-02 12:05:12,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 12:05:12,701 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2024-12-02 12:05:12,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:12,705 INFO L225 Difference]: With dead ends: 941 [2024-12-02 12:05:12,705 INFO L226 Difference]: Without dead ends: 651 [2024-12-02 12:05:12,706 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:12,707 INFO L435 NwaCegarLoop]: 173 mSDtfsCounter, 132 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:12,707 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 337 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 12:05:12,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 651 states. [2024-12-02 12:05:12,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 651 to 639. [2024-12-02 12:05:12,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 639 states, 484 states have (on average 1.2293388429752066) internal successors, (595), 511 states have internal predecessors, (595), 78 states have call successors, (78), 66 states have call predecessors, (78), 76 states have return successors, (116), 82 states have call predecessors, (116), 78 states have call successors, (116) [2024-12-02 12:05:12,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 639 states to 639 states and 789 transitions. [2024-12-02 12:05:12,772 INFO L78 Accepts]: Start accepts. Automaton has 639 states and 789 transitions. Word has length 50 [2024-12-02 12:05:12,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:12,772 INFO L471 AbstractCegarLoop]: Abstraction has 639 states and 789 transitions. [2024-12-02 12:05:12,773 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 12:05:12,773 INFO L276 IsEmpty]: Start isEmpty. Operand 639 states and 789 transitions. [2024-12-02 12:05:12,774 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-12-02 12:05:12,774 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:12,774 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:12,774 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 12:05:12,774 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:12,774 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:12,774 INFO L85 PathProgramCache]: Analyzing trace with hash 1360264219, now seen corresponding path program 1 times [2024-12-02 12:05:12,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:12,775 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1618036024] [2024-12-02 12:05:12,775 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:12,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:12,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:12,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 12:05:12,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:12,986 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1618036024] [2024-12-02 12:05:12,986 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1618036024] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:12,986 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:12,986 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-12-02 12:05:12,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [325868269] [2024-12-02 12:05:12,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:12,986 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 12:05:12,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:12,987 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 12:05:12,987 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-12-02 12:05:12,988 INFO L87 Difference]: Start difference. First operand 639 states and 789 transitions. Second operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 12:05:13,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:13,472 INFO L93 Difference]: Finished difference Result 1746 states and 2229 transitions. [2024-12-02 12:05:13,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-12-02 12:05:13,473 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 54 [2024-12-02 12:05:13,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:13,479 INFO L225 Difference]: With dead ends: 1746 [2024-12-02 12:05:13,479 INFO L226 Difference]: Without dead ends: 1216 [2024-12-02 12:05:13,481 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-12-02 12:05:13,481 INFO L435 NwaCegarLoop]: 132 mSDtfsCounter, 321 mSDsluCounter, 433 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 329 SdHoareTripleChecker+Valid, 565 SdHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:13,482 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [329 Valid, 565 Invalid, 344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-12-02 12:05:13,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1216 states. [2024-12-02 12:05:13,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1216 to 1103. [2024-12-02 12:05:13,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1103 states, 832 states have (on average 1.2163461538461537) internal successors, (1012), 881 states have internal predecessors, (1012), 134 states have call successors, (134), 116 states have call predecessors, (134), 136 states have return successors, (192), 140 states have call predecessors, (192), 134 states have call successors, (192) [2024-12-02 12:05:13,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1103 states to 1103 states and 1338 transitions. [2024-12-02 12:05:13,566 INFO L78 Accepts]: Start accepts. Automaton has 1103 states and 1338 transitions. Word has length 54 [2024-12-02 12:05:13,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:13,566 INFO L471 AbstractCegarLoop]: Abstraction has 1103 states and 1338 transitions. [2024-12-02 12:05:13,566 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 12:05:13,567 INFO L276 IsEmpty]: Start isEmpty. Operand 1103 states and 1338 transitions. [2024-12-02 12:05:13,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2024-12-02 12:05:13,569 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:13,569 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:13,569 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 12:05:13,570 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:13,570 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:13,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1826696922, now seen corresponding path program 1 times [2024-12-02 12:05:13,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:13,571 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173367856] [2024-12-02 12:05:13,571 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:13,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:13,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:13,623 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 12:05:13,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:13,623 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173367856] [2024-12-02 12:05:13,623 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173367856] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 12:05:13,623 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 12:05:13,624 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 12:05:13,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139652759] [2024-12-02 12:05:13,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 12:05:13,624 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 12:05:13,624 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:13,625 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 12:05:13,625 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:13,625 INFO L87 Difference]: Start difference. First operand 1103 states and 1338 transitions. Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-12-02 12:05:13,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:13,744 INFO L93 Difference]: Finished difference Result 1316 states and 1603 transitions. [2024-12-02 12:05:13,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 12:05:13,745 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 83 [2024-12-02 12:05:13,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:13,748 INFO L225 Difference]: With dead ends: 1316 [2024-12-02 12:05:13,748 INFO L226 Difference]: Without dead ends: 539 [2024-12-02 12:05:13,750 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 12:05:13,751 INFO L435 NwaCegarLoop]: 145 mSDtfsCounter, 134 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:13,751 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 255 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 12:05:13,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2024-12-02 12:05:13,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 539. [2024-12-02 12:05:13,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 539 states, 407 states have (on average 1.1842751842751842) internal successors, (482), 430 states have internal predecessors, (482), 65 states have call successors, (65), 56 states have call predecessors, (65), 66 states have return successors, (94), 68 states have call predecessors, (94), 65 states have call successors, (94) [2024-12-02 12:05:13,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 539 states to 539 states and 641 transitions. [2024-12-02 12:05:13,785 INFO L78 Accepts]: Start accepts. Automaton has 539 states and 641 transitions. Word has length 83 [2024-12-02 12:05:13,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:13,786 INFO L471 AbstractCegarLoop]: Abstraction has 539 states and 641 transitions. [2024-12-02 12:05:13,786 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-12-02 12:05:13,786 INFO L276 IsEmpty]: Start isEmpty. Operand 539 states and 641 transitions. [2024-12-02 12:05:13,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2024-12-02 12:05:13,787 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:13,787 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:13,787 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-12-02 12:05:13,787 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:13,788 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:13,788 INFO L85 PathProgramCache]: Analyzing trace with hash 1433848528, now seen corresponding path program 1 times [2024-12-02 12:05:13,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:13,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2104991974] [2024-12-02 12:05:13,788 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:13,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:13,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:13,906 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 9 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-12-02 12:05:13,906 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:13,906 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2104991974] [2024-12-02 12:05:13,906 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2104991974] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 12:05:13,906 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2123724618] [2024-12-02 12:05:13,906 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:13,907 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 12:05:13,907 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 12:05:13,909 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 12:05:13,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 12:05:14,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:14,027 INFO L256 TraceCheckSpWp]: Trace formula consists of 316 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 12:05:14,034 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 12:05:14,227 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 12:05:14,227 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 12:05:14,464 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 17 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2024-12-02 12:05:14,464 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2123724618] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 12:05:14,464 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 12:05:14,464 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 6] total 12 [2024-12-02 12:05:14,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45695722] [2024-12-02 12:05:14,464 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 12:05:14,465 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2024-12-02 12:05:14,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:14,466 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2024-12-02 12:05:14,466 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2024-12-02 12:05:14,466 INFO L87 Difference]: Start difference. First operand 539 states and 641 transitions. Second operand has 12 states, 12 states have (on average 10.333333333333334) internal successors, (124), 11 states have internal predecessors, (124), 6 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (17), 7 states have call predecessors, (17), 6 states have call successors, (17) [2024-12-02 12:05:15,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:15,038 INFO L93 Difference]: Finished difference Result 1190 states and 1467 transitions. [2024-12-02 12:05:15,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2024-12-02 12:05:15,039 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 10.333333333333334) internal successors, (124), 11 states have internal predecessors, (124), 6 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (17), 7 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2024-12-02 12:05:15,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:15,044 INFO L225 Difference]: With dead ends: 1190 [2024-12-02 12:05:15,044 INFO L226 Difference]: Without dead ends: 706 [2024-12-02 12:05:15,047 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 211 GetRequests, 185 SyntacticMatches, 4 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 72 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=126, Invalid=426, Unknown=0, NotChecked=0, Total=552 [2024-12-02 12:05:15,047 INFO L435 NwaCegarLoop]: 191 mSDtfsCounter, 257 mSDsluCounter, 1208 mSDsCounter, 0 mSdLazyCounter, 280 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 259 SdHoareTripleChecker+Valid, 1399 SdHoareTripleChecker+Invalid, 361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 280 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:15,048 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [259 Valid, 1399 Invalid, 361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 280 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-12-02 12:05:15,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2024-12-02 12:05:15,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 609. [2024-12-02 12:05:15,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 609 states, 457 states have (on average 1.1794310722100656) internal successors, (539), 487 states have internal predecessors, (539), 76 states have call successors, (76), 67 states have call predecessors, (76), 75 states have return successors, (101), 75 states have call predecessors, (101), 76 states have call successors, (101) [2024-12-02 12:05:15,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 609 states to 609 states and 716 transitions. [2024-12-02 12:05:15,124 INFO L78 Accepts]: Start accepts. Automaton has 609 states and 716 transitions. Word has length 94 [2024-12-02 12:05:15,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:15,124 INFO L471 AbstractCegarLoop]: Abstraction has 609 states and 716 transitions. [2024-12-02 12:05:15,124 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 10.333333333333334) internal successors, (124), 11 states have internal predecessors, (124), 6 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (17), 7 states have call predecessors, (17), 6 states have call successors, (17) [2024-12-02 12:05:15,124 INFO L276 IsEmpty]: Start isEmpty. Operand 609 states and 716 transitions. [2024-12-02 12:05:15,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 168 [2024-12-02 12:05:15,128 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 12:05:15,128 INFO L218 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:15,140 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 12:05:15,329 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-12-02 12:05:15,329 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 12:05:15,330 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 12:05:15,330 INFO L85 PathProgramCache]: Analyzing trace with hash 1093321653, now seen corresponding path program 1 times [2024-12-02 12:05:15,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 12:05:15,330 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1080059613] [2024-12-02 12:05:15,330 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:15,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 12:05:15,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:15,609 INFO L134 CoverageAnalysis]: Checked inductivity of 180 backedges. 66 proven. 2 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-12-02 12:05:15,609 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 12:05:15,609 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1080059613] [2024-12-02 12:05:15,610 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1080059613] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 12:05:15,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1629097184] [2024-12-02 12:05:15,610 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 12:05:15,610 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 12:05:15,610 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 12:05:15,612 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 12:05:15,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 12:05:15,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 12:05:15,767 INFO L256 TraceCheckSpWp]: Trace formula consists of 502 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-12-02 12:05:15,773 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 12:05:16,032 INFO L134 CoverageAnalysis]: Checked inductivity of 180 backedges. 132 proven. 3 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2024-12-02 12:05:16,032 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 12:05:16,625 INFO L134 CoverageAnalysis]: Checked inductivity of 180 backedges. 73 proven. 40 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2024-12-02 12:05:16,625 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1629097184] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 12:05:16,625 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 12:05:16,626 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 10, 11] total 22 [2024-12-02 12:05:16,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1092753016] [2024-12-02 12:05:16,626 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 12:05:16,627 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-12-02 12:05:16,627 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 12:05:16,627 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-12-02 12:05:16,627 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=363, Unknown=0, NotChecked=0, Total=462 [2024-12-02 12:05:16,628 INFO L87 Difference]: Start difference. First operand 609 states and 716 transitions. Second operand has 22 states, 22 states have (on average 9.272727272727273) internal successors, (204), 21 states have internal predecessors, (204), 9 states have call successors, (29), 6 states have call predecessors, (29), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2024-12-02 12:05:17,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 12:05:17,362 INFO L93 Difference]: Finished difference Result 1331 states and 1627 transitions. [2024-12-02 12:05:17,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-12-02 12:05:17,363 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.272727272727273) internal successors, (204), 21 states have internal predecessors, (204), 9 states have call successors, (29), 6 states have call predecessors, (29), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) Word has length 167 [2024-12-02 12:05:17,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 12:05:17,364 INFO L225 Difference]: With dead ends: 1331 [2024-12-02 12:05:17,364 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 12:05:17,366 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 355 GetRequests, 321 SyntacticMatches, 3 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=247, Invalid=809, Unknown=0, NotChecked=0, Total=1056 [2024-12-02 12:05:17,367 INFO L435 NwaCegarLoop]: 80 mSDtfsCounter, 377 mSDsluCounter, 621 mSDsCounter, 0 mSdLazyCounter, 783 mSolverCounterSat, 157 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 701 SdHoareTripleChecker+Invalid, 940 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 157 IncrementalHoareTripleChecker+Valid, 783 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-12-02 12:05:17,367 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [380 Valid, 701 Invalid, 940 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [157 Valid, 783 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-12-02 12:05:17,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 12:05:17,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 12:05:17,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 12:05:17,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 12:05:17,368 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 167 [2024-12-02 12:05:17,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 12:05:17,369 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 12:05:17,369 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.272727272727273) internal successors, (204), 21 states have internal predecessors, (204), 9 states have call successors, (29), 6 states have call predecessors, (29), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2024-12-02 12:05:17,369 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 12:05:17,369 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 12:05:17,371 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 12:05:17,381 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-12-02 12:05:17,571 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 12:05:17,573 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 12:05:17,575 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 12:05:24,749 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 12:05:24,763 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 12:05:24 BoogieIcfgContainer [2024-12-02 12:05:24,763 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 12:05:24,764 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 12:05:24,764 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 12:05:24,764 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 12:05:24,765 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:05:10" (3/4) ... [2024-12-02 12:05:24,767 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 12:05:24,772 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-12-02 12:05:24,779 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2024-12-02 12:05:24,779 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 12:05:24,780 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 12:05:24,780 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 12:05:24,780 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 12:05:24,887 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 12:05:24,888 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 12:05:24,888 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 12:05:24,889 INFO L158 Benchmark]: Toolchain (without parser) took 15605.50ms. Allocated memory was 117.4MB in the beginning and 201.3MB in the end (delta: 83.9MB). Free memory was 92.3MB in the beginning and 118.2MB in the end (delta: -26.0MB). Peak memory consumption was 58.5MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,889 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 72.4MB in the end (delta: 87.4kB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 12:05:24,889 INFO L158 Benchmark]: CACSL2BoogieTranslator took 466.10ms. Allocated memory is still 117.4MB. Free memory was 92.1MB in the beginning and 73.0MB in the end (delta: 19.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,889 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.51ms. Allocated memory is still 117.4MB. Free memory was 73.0MB in the beginning and 71.1MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,889 INFO L158 Benchmark]: Boogie Preprocessor took 47.03ms. Allocated memory is still 117.4MB. Free memory was 71.1MB in the beginning and 69.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 12:05:24,890 INFO L158 Benchmark]: RCFGBuilder took 438.46ms. Allocated memory is still 117.4MB. Free memory was 69.2MB in the beginning and 52.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,890 INFO L158 Benchmark]: TraceAbstraction took 14477.31ms. Allocated memory was 117.4MB in the beginning and 201.3MB in the end (delta: 83.9MB). Free memory was 51.5MB in the beginning and 124.2MB in the end (delta: -72.7MB). Peak memory consumption was 85.4MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,890 INFO L158 Benchmark]: Witness Printer took 123.93ms. Allocated memory is still 201.3MB. Free memory was 124.2MB in the beginning and 118.2MB in the end (delta: 6.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 12:05:24,892 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 72.4MB in the end (delta: 87.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 466.10ms. Allocated memory is still 117.4MB. Free memory was 92.1MB in the beginning and 73.0MB in the end (delta: 19.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.51ms. Allocated memory is still 117.4MB. Free memory was 73.0MB in the beginning and 71.1MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.03ms. Allocated memory is still 117.4MB. Free memory was 71.1MB in the beginning and 69.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 438.46ms. Allocated memory is still 117.4MB. Free memory was 69.2MB in the beginning and 52.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 14477.31ms. Allocated memory was 117.4MB in the beginning and 201.3MB in the end (delta: 83.9MB). Free memory was 51.5MB in the beginning and 124.2MB in the end (delta: -72.7MB). Peak memory consumption was 85.4MB. Max. memory is 16.1GB. * Witness Printer took 123.93ms. Allocated memory is still 201.3MB. Free memory was 124.2MB in the beginning and 118.2MB in the end (delta: 6.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 277]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [277] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] - GenericResultAtLocation [Line: 448]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [448] - GenericResultAtLocation [Line: 483]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [483] - GenericResultAtLocation [Line: 849]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [849] - GenericResultAtLocation [Line: 953]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [953] - GenericResultAtLocation [Line: 962]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [962] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 97 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.2s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1680 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1655 mSDsluCounter, 5276 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3839 mSDsCounter, 392 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1696 IncrementalHoareTripleChecker+Invalid, 2088 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 392 mSolverCounterUnsat, 1437 mSDtfsCounter, 1696 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 626 GetRequests, 531 SyntacticMatches, 7 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 241 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1103occurred in iteration=8, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 263 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 977 NumberOfCodeBlocks, 977 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1223 ConstructedInterpolants, 0 QuantifiedInterpolants, 2279 SizeOfPredicates, 2 NumberOfNonLiveVariables, 818 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 615/686 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 391]: Location Invariant Derived location invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-12-02 12:05:24,915 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5f873cc-1d6b-483c-8a27-02e82817db0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE