./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 05:50:18,724 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 05:50:18,778 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 05:50:18,783 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 05:50:18,783 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 05:50:18,804 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 05:50:18,805 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 05:50:18,805 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 05:50:18,805 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 05:50:18,805 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 05:50:18,805 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 05:50:18,805 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 05:50:18,806 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 05:50:18,806 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 05:50:18,806 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 05:50:18,806 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 05:50:18,806 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 05:50:18,806 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 05:50:18,806 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 05:50:18,807 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 05:50:18,807 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 05:50:18,808 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 05:50:18,808 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 05:50:18,808 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 05:50:18,809 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2024-12-02 05:50:19,057 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 05:50:19,065 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 05:50:19,067 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 05:50:19,068 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 05:50:19,068 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 05:50:19,069 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2024-12-02 05:50:21,823 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/data/0abafa190/0ffd9f0a268f42c7a72bc4171e374517/FLAG10a50e48b [2024-12-02 05:50:22,025 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 05:50:22,026 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2024-12-02 05:50:22,037 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/data/0abafa190/0ffd9f0a268f42c7a72bc4171e374517/FLAG10a50e48b [2024-12-02 05:50:22,051 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/data/0abafa190/0ffd9f0a268f42c7a72bc4171e374517 [2024-12-02 05:50:22,053 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 05:50:22,054 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 05:50:22,055 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 05:50:22,055 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 05:50:22,059 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 05:50:22,059 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,060 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3be6844c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22, skipping insertion in model container [2024-12-02 05:50:22,060 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,085 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 05:50:22,273 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2024-12-02 05:50:22,308 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 05:50:22,317 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 05:50:22,323 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [521] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [556] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] [2024-12-02 05:50:22,325 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [988] [2024-12-02 05:50:22,364 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2024-12-02 05:50:22,378 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 05:50:22,393 INFO L204 MainTranslator]: Completed translation [2024-12-02 05:50:22,393 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22 WrapperNode [2024-12-02 05:50:22,393 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 05:50:22,394 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 05:50:22,394 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 05:50:22,394 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 05:50:22,399 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,408 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,428 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 237 [2024-12-02 05:50:22,428 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 05:50:22,429 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 05:50:22,429 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 05:50:22,429 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 05:50:22,437 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,438 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,439 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,452 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 05:50:22,452 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,452 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,456 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,457 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,461 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,462 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,463 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,465 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 05:50:22,466 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 05:50:22,466 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 05:50:22,466 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 05:50:22,466 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (1/1) ... [2024-12-02 05:50:22,471 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 05:50:22,480 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 05:50:22,489 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 05:50:22,492 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 05:50:22,514 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 05:50:22,514 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 05:50:22,514 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 05:50:22,514 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 05:50:22,514 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 05:50:22,515 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 05:50:22,515 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 05:50:22,578 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 05:50:22,579 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 05:50:22,840 INFO L? ?]: Removed 51 outVars from TransFormulas that were not future-live. [2024-12-02 05:50:22,840 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 05:50:22,851 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 05:50:22,851 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 05:50:22,851 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 05:50:22 BoogieIcfgContainer [2024-12-02 05:50:22,851 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 05:50:22,853 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 05:50:22,853 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 05:50:22,858 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 05:50:22,859 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 05:50:22" (1/3) ... [2024-12-02 05:50:22,859 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a00a5d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 05:50:22, skipping insertion in model container [2024-12-02 05:50:22,859 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 05:50:22" (2/3) ... [2024-12-02 05:50:22,859 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a00a5d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 05:50:22, skipping insertion in model container [2024-12-02 05:50:22,860 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 05:50:22" (3/3) ... [2024-12-02 05:50:22,861 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2024-12-02 05:50:22,877 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 05:50:22,879 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product55.cil.c that has 10 procedures, 107 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 05:50:22,936 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 05:50:22,948 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@349d69f2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 05:50:22,948 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 05:50:22,951 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2024-12-02 05:50:22,960 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-12-02 05:50:22,961 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:22,961 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:22,962 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:22,966 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:22,966 INFO L85 PathProgramCache]: Analyzing trace with hash 1002309339, now seen corresponding path program 1 times [2024-12-02 05:50:22,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:22,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204964025] [2024-12-02 05:50:22,974 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:22,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:23,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:23,139 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:23,140 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:23,140 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204964025] [2024-12-02 05:50:23,141 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204964025] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:23,141 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:23,141 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 05:50:23,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204936208] [2024-12-02 05:50:23,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:23,146 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 05:50:23,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:23,163 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 05:50:23,164 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 05:50:23,166 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 05:50:23,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:23,192 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2024-12-02 05:50:23,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 05:50:23,194 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-12-02 05:50:23,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:23,202 INFO L225 Difference]: With dead ends: 205 [2024-12-02 05:50:23,202 INFO L226 Difference]: Without dead ends: 98 [2024-12-02 05:50:23,206 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 05:50:23,209 INFO L435 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:23,210 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 05:50:23,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2024-12-02 05:50:23,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2024-12-02 05:50:23,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-12-02 05:50:23,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2024-12-02 05:50:23,244 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 32 [2024-12-02 05:50:23,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:23,245 INFO L471 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2024-12-02 05:50:23,245 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 05:50:23,245 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2024-12-02 05:50:23,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-12-02 05:50:23,247 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:23,247 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:23,247 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 05:50:23,247 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:23,247 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:23,247 INFO L85 PathProgramCache]: Analyzing trace with hash 600268821, now seen corresponding path program 1 times [2024-12-02 05:50:23,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:23,248 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572983711] [2024-12-02 05:50:23,248 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:23,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:23,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:23,353 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:23,353 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:23,353 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572983711] [2024-12-02 05:50:23,353 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572983711] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:23,353 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:23,353 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 05:50:23,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595148354] [2024-12-02 05:50:23,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:23,354 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 05:50:23,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:23,355 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 05:50:23,355 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 05:50:23,356 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 05:50:23,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:23,376 INFO L93 Difference]: Finished difference Result 159 states and 207 transitions. [2024-12-02 05:50:23,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 05:50:23,376 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-12-02 05:50:23,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:23,378 INFO L225 Difference]: With dead ends: 159 [2024-12-02 05:50:23,378 INFO L226 Difference]: Without dead ends: 90 [2024-12-02 05:50:23,378 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 05:50:23,379 INFO L435 NwaCegarLoop]: 116 mSDtfsCounter, 16 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:23,380 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 212 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 05:50:23,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2024-12-02 05:50:23,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2024-12-02 05:50:23,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 05:50:23,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 117 transitions. [2024-12-02 05:50:23,390 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 117 transitions. Word has length 32 [2024-12-02 05:50:23,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:23,391 INFO L471 AbstractCegarLoop]: Abstraction has 90 states and 117 transitions. [2024-12-02 05:50:23,391 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 05:50:23,391 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 117 transitions. [2024-12-02 05:50:23,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-12-02 05:50:23,392 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:23,392 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:23,392 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 05:50:23,392 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:23,393 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:23,393 INFO L85 PathProgramCache]: Analyzing trace with hash -729472087, now seen corresponding path program 1 times [2024-12-02 05:50:23,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:23,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1508978367] [2024-12-02 05:50:23,393 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:23,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:23,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:23,488 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:23,488 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:23,488 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1508978367] [2024-12-02 05:50:23,488 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1508978367] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:23,488 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:23,488 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 05:50:23,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081447768] [2024-12-02 05:50:23,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:23,489 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 05:50:23,489 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:23,490 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 05:50:23,490 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 05:50:23,490 INFO L87 Difference]: Start difference. First operand 90 states and 117 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 05:50:23,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:23,519 INFO L93 Difference]: Finished difference Result 253 states and 335 transitions. [2024-12-02 05:50:23,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 05:50:23,519 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 36 [2024-12-02 05:50:23,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:23,521 INFO L225 Difference]: With dead ends: 253 [2024-12-02 05:50:23,521 INFO L226 Difference]: Without dead ends: 171 [2024-12-02 05:50:23,522 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 05:50:23,523 INFO L435 NwaCegarLoop]: 133 mSDtfsCounter, 93 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:23,523 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 239 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 05:50:23,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2024-12-02 05:50:23,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 168. [2024-12-02 05:50:23,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 123 states have (on average 1.3495934959349594) internal successors, (166), 142 states have internal predecessors, (166), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2024-12-02 05:50:23,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 222 transitions. [2024-12-02 05:50:23,543 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 222 transitions. Word has length 36 [2024-12-02 05:50:23,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:23,544 INFO L471 AbstractCegarLoop]: Abstraction has 168 states and 222 transitions. [2024-12-02 05:50:23,544 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 05:50:23,544 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 222 transitions. [2024-12-02 05:50:23,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-12-02 05:50:23,546 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:23,546 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:23,547 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 05:50:23,547 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:23,547 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:23,547 INFO L85 PathProgramCache]: Analyzing trace with hash 1626019103, now seen corresponding path program 1 times [2024-12-02 05:50:23,547 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:23,547 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123905886] [2024-12-02 05:50:23,547 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:23,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:23,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:23,657 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 05:50:23,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:23,657 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123905886] [2024-12-02 05:50:23,657 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123905886] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:23,657 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:23,657 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 05:50:23,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1853838267] [2024-12-02 05:50:23,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:23,657 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 05:50:23,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:23,658 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 05:50:23,658 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 05:50:23,658 INFO L87 Difference]: Start difference. First operand 168 states and 222 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 05:50:23,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:23,862 INFO L93 Difference]: Finished difference Result 424 states and 577 transitions. [2024-12-02 05:50:23,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 05:50:23,863 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2024-12-02 05:50:23,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:23,865 INFO L225 Difference]: With dead ends: 424 [2024-12-02 05:50:23,865 INFO L226 Difference]: Without dead ends: 264 [2024-12-02 05:50:23,866 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-12-02 05:50:23,867 INFO L435 NwaCegarLoop]: 118 mSDtfsCounter, 77 mSDsluCounter, 389 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 507 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:23,868 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 507 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 05:50:23,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2024-12-02 05:50:23,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 263. [2024-12-02 05:50:23,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 263 states, 194 states have (on average 1.2989690721649485) internal successors, (252), 211 states have internal predecessors, (252), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 05:50:23,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 340 transitions. [2024-12-02 05:50:23,898 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 340 transitions. Word has length 40 [2024-12-02 05:50:23,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:23,898 INFO L471 AbstractCegarLoop]: Abstraction has 263 states and 340 transitions. [2024-12-02 05:50:23,898 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 05:50:23,898 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 340 transitions. [2024-12-02 05:50:23,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-12-02 05:50:23,900 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:23,900 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:23,900 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 05:50:23,900 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:23,901 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:23,901 INFO L85 PathProgramCache]: Analyzing trace with hash 541440504, now seen corresponding path program 1 times [2024-12-02 05:50:23,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:23,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567549062] [2024-12-02 05:50:23,901 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:23,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:23,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:24,007 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:24,007 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:24,007 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567549062] [2024-12-02 05:50:24,007 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567549062] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:24,008 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:24,008 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 05:50:24,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1065899023] [2024-12-02 05:50:24,008 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:24,008 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 05:50:24,008 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:24,009 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 05:50:24,009 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 05:50:24,009 INFO L87 Difference]: Start difference. First operand 263 states and 340 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 05:50:24,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:24,049 INFO L93 Difference]: Finished difference Result 524 states and 692 transitions. [2024-12-02 05:50:24,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 05:50:24,049 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2024-12-02 05:50:24,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:24,052 INFO L225 Difference]: With dead ends: 524 [2024-12-02 05:50:24,052 INFO L226 Difference]: Without dead ends: 269 [2024-12-02 05:50:24,053 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 05:50:24,054 INFO L435 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:24,054 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 450 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 05:50:24,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2024-12-02 05:50:24,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 269. [2024-12-02 05:50:24,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 200 states have (on average 1.29) internal successors, (258), 217 states have internal predecessors, (258), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 05:50:24,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 346 transitions. [2024-12-02 05:50:24,079 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 346 transitions. Word has length 55 [2024-12-02 05:50:24,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:24,079 INFO L471 AbstractCegarLoop]: Abstraction has 269 states and 346 transitions. [2024-12-02 05:50:24,079 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 05:50:24,079 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 346 transitions. [2024-12-02 05:50:24,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-12-02 05:50:24,081 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:24,081 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:24,081 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 05:50:24,081 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:24,081 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:24,082 INFO L85 PathProgramCache]: Analyzing trace with hash 964142330, now seen corresponding path program 1 times [2024-12-02 05:50:24,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:24,082 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1148380008] [2024-12-02 05:50:24,082 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:24,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:24,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:24,166 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:24,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:24,167 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1148380008] [2024-12-02 05:50:24,167 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1148380008] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:24,167 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:24,167 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 05:50:24,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1978646436] [2024-12-02 05:50:24,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:24,167 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 05:50:24,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:24,168 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 05:50:24,168 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 05:50:24,168 INFO L87 Difference]: Start difference. First operand 269 states and 346 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 05:50:24,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:24,229 INFO L93 Difference]: Finished difference Result 538 states and 717 transitions. [2024-12-02 05:50:24,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 05:50:24,229 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2024-12-02 05:50:24,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:24,232 INFO L225 Difference]: With dead ends: 538 [2024-12-02 05:50:24,232 INFO L226 Difference]: Without dead ends: 277 [2024-12-02 05:50:24,233 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 05:50:24,234 INFO L435 NwaCegarLoop]: 122 mSDtfsCounter, 95 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:24,234 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 464 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 05:50:24,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2024-12-02 05:50:24,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 273. [2024-12-02 05:50:24,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 204 states have (on average 1.2843137254901962) internal successors, (262), 221 states have internal predecessors, (262), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 05:50:24,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 350 transitions. [2024-12-02 05:50:24,261 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 350 transitions. Word has length 55 [2024-12-02 05:50:24,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:24,261 INFO L471 AbstractCegarLoop]: Abstraction has 273 states and 350 transitions. [2024-12-02 05:50:24,261 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 05:50:24,262 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 350 transitions. [2024-12-02 05:50:24,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-12-02 05:50:24,262 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:24,263 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:24,263 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 05:50:24,263 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:24,263 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:24,263 INFO L85 PathProgramCache]: Analyzing trace with hash -841296004, now seen corresponding path program 1 times [2024-12-02 05:50:24,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:24,263 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107949054] [2024-12-02 05:50:24,263 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:24,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:24,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:24,358 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:24,358 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:24,358 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107949054] [2024-12-02 05:50:24,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107949054] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:24,358 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:24,358 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 05:50:24,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578259984] [2024-12-02 05:50:24,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:24,359 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 05:50:24,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:24,359 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 05:50:24,360 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 05:50:24,360 INFO L87 Difference]: Start difference. First operand 273 states and 350 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 05:50:24,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:24,530 INFO L93 Difference]: Finished difference Result 902 states and 1194 transitions. [2024-12-02 05:50:24,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 05:50:24,531 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2024-12-02 05:50:24,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:24,535 INFO L225 Difference]: With dead ends: 902 [2024-12-02 05:50:24,536 INFO L226 Difference]: Without dead ends: 637 [2024-12-02 05:50:24,537 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 05:50:24,538 INFO L435 NwaCegarLoop]: 201 mSDtfsCounter, 151 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:24,538 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 391 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 05:50:24,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2024-12-02 05:50:24,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 625. [2024-12-02 05:50:24,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 625 states, 464 states have (on average 1.2564655172413792) internal successors, (583), 497 states have internal predecessors, (583), 88 states have call successors, (88), 70 states have call predecessors, (88), 72 states have return successors, (138), 80 states have call predecessors, (138), 88 states have call successors, (138) [2024-12-02 05:50:24,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 809 transitions. [2024-12-02 05:50:24,620 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 809 transitions. Word has length 55 [2024-12-02 05:50:24,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:24,620 INFO L471 AbstractCegarLoop]: Abstraction has 625 states and 809 transitions. [2024-12-02 05:50:24,620 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 05:50:24,621 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 809 transitions. [2024-12-02 05:50:24,622 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-12-02 05:50:24,622 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:24,622 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:24,623 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 05:50:24,623 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:24,623 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:24,623 INFO L85 PathProgramCache]: Analyzing trace with hash 363442198, now seen corresponding path program 1 times [2024-12-02 05:50:24,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:24,623 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845560193] [2024-12-02 05:50:24,623 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:24,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:24,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:24,869 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 05:50:24,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:24,869 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845560193] [2024-12-02 05:50:24,869 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845560193] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:24,869 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:24,869 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-12-02 05:50:24,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1134215628] [2024-12-02 05:50:24,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:24,870 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 05:50:24,870 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:24,870 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 05:50:24,871 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-12-02 05:50:24,871 INFO L87 Difference]: Start difference. First operand 625 states and 809 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 05:50:25,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:25,491 INFO L93 Difference]: Finished difference Result 1839 states and 2465 transitions. [2024-12-02 05:50:25,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-12-02 05:50:25,491 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2024-12-02 05:50:25,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:25,500 INFO L225 Difference]: With dead ends: 1839 [2024-12-02 05:50:25,500 INFO L226 Difference]: Without dead ends: 1333 [2024-12-02 05:50:25,503 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-12-02 05:50:25,504 INFO L435 NwaCegarLoop]: 149 mSDtfsCounter, 382 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 638 SdHoareTripleChecker+Invalid, 462 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:25,504 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 638 Invalid, 462 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-12-02 05:50:25,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1333 states. [2024-12-02 05:50:25,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1333 to 1204. [2024-12-02 05:50:25,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1204 states, 889 states have (on average 1.232845894263217) internal successors, (1096), 953 states have internal predecessors, (1096), 165 states have call successors, (165), 123 states have call predecessors, (165), 149 states have return successors, (273), 162 states have call predecessors, (273), 165 states have call successors, (273) [2024-12-02 05:50:25,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1204 states to 1204 states and 1534 transitions. [2024-12-02 05:50:25,618 INFO L78 Accepts]: Start accepts. Automaton has 1204 states and 1534 transitions. Word has length 59 [2024-12-02 05:50:25,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:25,618 INFO L471 AbstractCegarLoop]: Abstraction has 1204 states and 1534 transitions. [2024-12-02 05:50:25,618 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 05:50:25,618 INFO L276 IsEmpty]: Start isEmpty. Operand 1204 states and 1534 transitions. [2024-12-02 05:50:25,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2024-12-02 05:50:25,621 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:25,621 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:25,621 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 05:50:25,621 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:25,622 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:25,622 INFO L85 PathProgramCache]: Analyzing trace with hash 1737840712, now seen corresponding path program 1 times [2024-12-02 05:50:25,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:25,622 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [645841957] [2024-12-02 05:50:25,622 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:25,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:25,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:25,677 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 05:50:25,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:25,677 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [645841957] [2024-12-02 05:50:25,677 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [645841957] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 05:50:25,677 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 05:50:25,677 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 05:50:25,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788323287] [2024-12-02 05:50:25,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 05:50:25,678 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 05:50:25,678 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:25,678 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 05:50:25,678 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 05:50:25,678 INFO L87 Difference]: Start difference. First operand 1204 states and 1534 transitions. Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-12-02 05:50:25,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:25,827 INFO L93 Difference]: Finished difference Result 1402 states and 1781 transitions. [2024-12-02 05:50:25,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 05:50:25,827 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 88 [2024-12-02 05:50:25,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:25,832 INFO L225 Difference]: With dead ends: 1402 [2024-12-02 05:50:25,832 INFO L226 Difference]: Without dead ends: 591 [2024-12-02 05:50:25,834 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 05:50:25,835 INFO L435 NwaCegarLoop]: 159 mSDtfsCounter, 148 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:25,835 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 277 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 05:50:25,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 591 states. [2024-12-02 05:50:25,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 591 to 591. [2024-12-02 05:50:25,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 437 states have (on average 1.1990846681922196) internal successors, (524), 466 states have internal predecessors, (524), 79 states have call successors, (79), 61 states have call predecessors, (79), 74 states have return successors, (133), 79 states have call predecessors, (133), 79 states have call successors, (133) [2024-12-02 05:50:25,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 736 transitions. [2024-12-02 05:50:25,898 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 736 transitions. Word has length 88 [2024-12-02 05:50:25,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:25,898 INFO L471 AbstractCegarLoop]: Abstraction has 591 states and 736 transitions. [2024-12-02 05:50:25,898 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-12-02 05:50:25,899 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 736 transitions. [2024-12-02 05:50:25,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2024-12-02 05:50:25,900 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:25,900 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:25,900 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-12-02 05:50:25,901 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:25,901 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:25,901 INFO L85 PathProgramCache]: Analyzing trace with hash 1623855363, now seen corresponding path program 1 times [2024-12-02 05:50:25,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:25,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271315086] [2024-12-02 05:50:25,901 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:25,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:25,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:26,099 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 8 proven. 19 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 05:50:26,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:26,099 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271315086] [2024-12-02 05:50:26,099 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271315086] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 05:50:26,099 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1063158245] [2024-12-02 05:50:26,099 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:26,100 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 05:50:26,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 05:50:26,102 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 05:50:26,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 05:50:26,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:26,210 INFO L256 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 05:50:26,217 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 05:50:26,428 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 05:50:26,429 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 05:50:26,672 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 17 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 05:50:26,672 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1063158245] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 05:50:26,672 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 05:50:26,672 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 15 [2024-12-02 05:50:26,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [199500115] [2024-12-02 05:50:26,672 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 05:50:26,673 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-12-02 05:50:26,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:26,673 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-12-02 05:50:26,674 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=169, Unknown=0, NotChecked=0, Total=210 [2024-12-02 05:50:26,674 INFO L87 Difference]: Start difference. First operand 591 states and 736 transitions. Second operand has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) [2024-12-02 05:50:27,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:27,239 INFO L93 Difference]: Finished difference Result 1327 states and 1715 transitions. [2024-12-02 05:50:27,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-12-02 05:50:27,240 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) Word has length 107 [2024-12-02 05:50:27,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:27,245 INFO L225 Difference]: With dead ends: 1327 [2024-12-02 05:50:27,245 INFO L226 Difference]: Without dead ends: 796 [2024-12-02 05:50:27,247 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 211 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 164 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=208, Invalid=604, Unknown=0, NotChecked=0, Total=812 [2024-12-02 05:50:27,247 INFO L435 NwaCegarLoop]: 208 mSDtfsCounter, 366 mSDsluCounter, 965 mSDsCounter, 0 mSdLazyCounter, 336 mSolverCounterSat, 144 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 1173 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 144 IncrementalHoareTripleChecker+Valid, 336 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:27,248 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 1173 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [144 Valid, 336 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-12-02 05:50:27,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 796 states. [2024-12-02 05:50:27,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 796 to 700. [2024-12-02 05:50:27,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 512 states have (on average 1.18359375) internal successors, (606), 550 states have internal predecessors, (606), 94 states have call successors, (94), 79 states have call predecessors, (94), 93 states have return successors, (138), 95 states have call predecessors, (138), 94 states have call successors, (138) [2024-12-02 05:50:27,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 838 transitions. [2024-12-02 05:50:27,286 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 838 transitions. Word has length 107 [2024-12-02 05:50:27,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:27,286 INFO L471 AbstractCegarLoop]: Abstraction has 700 states and 838 transitions. [2024-12-02 05:50:27,286 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.133333333333333) internal successors, (152), 13 states have internal predecessors, (152), 7 states have call successors, (23), 4 states have call predecessors, (23), 8 states have return successors, (22), 10 states have call predecessors, (22), 7 states have call successors, (22) [2024-12-02 05:50:27,286 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 838 transitions. [2024-12-02 05:50:27,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2024-12-02 05:50:27,289 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 05:50:27,289 INFO L218 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:27,300 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 05:50:27,489 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 05:50:27,490 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 05:50:27,490 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 05:50:27,490 INFO L85 PathProgramCache]: Analyzing trace with hash -1041226963, now seen corresponding path program 1 times [2024-12-02 05:50:27,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 05:50:27,490 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [114195604] [2024-12-02 05:50:27,490 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:27,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 05:50:27,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:27,724 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 66 proven. 2 refuted. 0 times theorem prover too weak. 123 trivial. 0 not checked. [2024-12-02 05:50:27,724 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 05:50:27,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [114195604] [2024-12-02 05:50:27,724 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [114195604] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 05:50:27,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1023089861] [2024-12-02 05:50:27,724 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 05:50:27,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 05:50:27,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 05:50:27,726 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 05:50:27,728 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 05:50:27,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 05:50:27,850 INFO L256 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-12-02 05:50:27,855 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 05:50:28,051 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 139 proven. 3 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2024-12-02 05:50:28,051 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 05:50:28,513 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 73 proven. 38 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2024-12-02 05:50:28,513 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1023089861] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 05:50:28,513 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 05:50:28,513 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 10, 11] total 22 [2024-12-02 05:50:28,513 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831813430] [2024-12-02 05:50:28,513 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 05:50:28,514 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-12-02 05:50:28,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 05:50:28,515 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-12-02 05:50:28,515 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=363, Unknown=0, NotChecked=0, Total=462 [2024-12-02 05:50:28,515 INFO L87 Difference]: Start difference. First operand 700 states and 838 transitions. Second operand has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) [2024-12-02 05:50:29,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 05:50:29,249 INFO L93 Difference]: Finished difference Result 1495 states and 1860 transitions. [2024-12-02 05:50:29,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-12-02 05:50:29,250 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) Word has length 183 [2024-12-02 05:50:29,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 05:50:29,252 INFO L225 Difference]: With dead ends: 1495 [2024-12-02 05:50:29,252 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 05:50:29,255 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 387 GetRequests, 353 SyntacticMatches, 3 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=247, Invalid=809, Unknown=0, NotChecked=0, Total=1056 [2024-12-02 05:50:29,256 INFO L435 NwaCegarLoop]: 78 mSDtfsCounter, 205 mSDsluCounter, 662 mSDsCounter, 0 mSdLazyCounter, 1036 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 740 SdHoareTripleChecker+Invalid, 1124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 1036 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-12-02 05:50:29,256 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 740 Invalid, 1124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 1036 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-12-02 05:50:29,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 05:50:29,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 05:50:29,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 05:50:29,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 05:50:29,258 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 183 [2024-12-02 05:50:29,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 05:50:29,258 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 05:50:29,258 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.409090909090908) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (32), 6 states have call predecessors, (32), 9 states have return successors, (34), 8 states have call predecessors, (34), 9 states have call successors, (34) [2024-12-02 05:50:29,258 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 05:50:29,258 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 05:50:29,260 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 05:50:29,270 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 05:50:29,461 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 05:50:29,464 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 05:50:29,466 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 05:50:35,591 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 05:50:35,603 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 05:50:35 BoogieIcfgContainer [2024-12-02 05:50:35,603 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 05:50:35,604 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 05:50:35,604 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 05:50:35,604 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 05:50:35,605 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 05:50:22" (3/4) ... [2024-12-02 05:50:35,606 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 05:50:35,610 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 05:50:35,611 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 05:50:35,611 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 05:50:35,611 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-12-02 05:50:35,615 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2024-12-02 05:50:35,616 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 05:50:35,616 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 05:50:35,617 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 05:50:35,617 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 05:50:35,701 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 05:50:35,701 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 05:50:35,701 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 05:50:35,702 INFO L158 Benchmark]: Toolchain (without parser) took 13647.97ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 91.5MB in the beginning and 127.7MB in the end (delta: -36.2MB). Peak memory consumption was 92.1MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,702 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 71.9MB in the end (delta: 86.7kB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 05:50:35,703 INFO L158 Benchmark]: CACSL2BoogieTranslator took 338.69ms. Allocated memory is still 117.4MB. Free memory was 91.3MB in the beginning and 72.1MB in the end (delta: 19.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,703 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.29ms. Allocated memory is still 117.4MB. Free memory was 72.1MB in the beginning and 70.2MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,703 INFO L158 Benchmark]: Boogie Preprocessor took 36.09ms. Allocated memory is still 117.4MB. Free memory was 70.2MB in the beginning and 68.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 05:50:35,703 INFO L158 Benchmark]: RCFGBuilder took 385.98ms. Allocated memory is still 117.4MB. Free memory was 68.0MB in the beginning and 50.2MB in the end (delta: 17.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,704 INFO L158 Benchmark]: TraceAbstraction took 12750.18ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 49.6MB in the beginning and 136.0MB in the end (delta: -86.4MB). Peak memory consumption was 110.9MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,704 INFO L158 Benchmark]: Witness Printer took 97.37ms. Allocated memory is still 243.3MB. Free memory was 136.0MB in the beginning and 127.7MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 05:50:35,706 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 71.9MB in the end (delta: 86.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 338.69ms. Allocated memory is still 117.4MB. Free memory was 91.3MB in the beginning and 72.1MB in the end (delta: 19.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.29ms. Allocated memory is still 117.4MB. Free memory was 72.1MB in the beginning and 70.2MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.09ms. Allocated memory is still 117.4MB. Free memory was 70.2MB in the beginning and 68.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 385.98ms. Allocated memory is still 117.4MB. Free memory was 68.0MB in the beginning and 50.2MB in the end (delta: 17.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 12750.18ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 49.6MB in the beginning and 136.0MB in the end (delta: -86.4MB). Peak memory consumption was 110.9MB. Max. memory is 16.1GB. * Witness Printer took 97.37ms. Allocated memory is still 243.3MB. Free memory was 136.0MB in the beginning and 127.7MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [521] - GenericResultAtLocation [Line: 556]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [556] - GenericResultAtLocation [Line: 565]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] - GenericResultAtLocation [Line: 633]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] - GenericResultAtLocation [Line: 742]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] - GenericResultAtLocation [Line: 988]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [988] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.5s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1555 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1533 mSDsluCounter, 5228 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3693 mSDsCounter, 339 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1983 IncrementalHoareTripleChecker+Invalid, 2322 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 339 mSolverCounterUnsat, 1535 mSDtfsCounter, 1983 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 686 GetRequests, 589 SyntacticMatches, 7 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 331 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1204occurred in iteration=8, InterpolantAutomatonStates: 79, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 245 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1032 NumberOfCodeBlocks, 1032 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1307 ConstructedInterpolants, 0 QuantifiedInterpolants, 2512 SizeOfPredicates, 2 NumberOfNonLiveVariables, 891 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 648/731 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 576]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2024-12-02 05:50:35,724 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_24d46169-2e59-424d-a5a1-1dad6a68eb43/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE