./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 15:34:21,266 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 15:34:21,320 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 15:34:21,325 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 15:34:21,325 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 15:34:21,348 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 15:34:21,348 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 15:34:21,348 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 15:34:21,349 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 15:34:21,349 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 15:34:21,349 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 15:34:21,349 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 15:34:21,349 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 15:34:21,349 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 15:34:21,349 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 15:34:21,350 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 15:34:21,350 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 15:34:21,351 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:34:21,351 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 15:34:21,351 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:34:21,351 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 15:34:21,352 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2024-12-02 15:34:21,577 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 15:34:21,585 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 15:34:21,587 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 15:34:21,589 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 15:34:21,589 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 15:34:21,590 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2024-12-02 15:34:24,231 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/data/9f7f27f64/b65c6c43c704469aa5e6b13845c775d9/FLAGc32daed01 [2024-12-02 15:34:24,456 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 15:34:24,457 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2024-12-02 15:34:24,469 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/data/9f7f27f64/b65c6c43c704469aa5e6b13845c775d9/FLAGc32daed01 [2024-12-02 15:34:24,800 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/data/9f7f27f64/b65c6c43c704469aa5e6b13845c775d9 [2024-12-02 15:34:24,802 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 15:34:24,804 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 15:34:24,805 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 15:34:24,805 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 15:34:24,810 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 15:34:24,810 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:34:24" (1/1) ... [2024-12-02 15:34:24,811 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@53fcfc63 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:24, skipping insertion in model container [2024-12-02 15:34:24,812 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:34:24" (1/1) ... [2024-12-02 15:34:24,840 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 15:34:25,044 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2024-12-02 15:34:25,106 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 15:34:25,116 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 15:34:25,124 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2024-12-02 15:34:25,125 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] [2024-12-02 15:34:25,125 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] [2024-12-02 15:34:25,125 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] [2024-12-02 15:34:25,126 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] [2024-12-02 15:34:25,126 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] [2024-12-02 15:34:25,126 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] [2024-12-02 15:34:25,126 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] [2024-12-02 15:34:25,146 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2024-12-02 15:34:25,176 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 15:34:25,196 INFO L204 MainTranslator]: Completed translation [2024-12-02 15:34:25,197 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25 WrapperNode [2024-12-02 15:34:25,197 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 15:34:25,198 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 15:34:25,198 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 15:34:25,198 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 15:34:25,206 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,218 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,236 INFO L138 Inliner]: procedures = 60, calls = 108, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 240 [2024-12-02 15:34:25,237 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 15:34:25,237 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 15:34:25,237 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 15:34:25,237 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 15:34:25,247 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,247 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,250 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,264 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 15:34:25,265 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,265 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,270 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,271 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,275 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,276 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,278 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,280 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 15:34:25,281 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 15:34:25,281 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 15:34:25,281 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 15:34:25,282 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (1/1) ... [2024-12-02 15:34:25,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:34:25,300 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:34:25,309 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 15:34:25,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 15:34:25,330 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 15:34:25,330 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 15:34:25,330 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 15:34:25,331 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2024-12-02 15:34:25,331 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2024-12-02 15:34:25,332 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 15:34:25,332 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 15:34:25,332 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 15:34:25,332 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 15:34:25,332 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 15:34:25,332 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 15:34:25,332 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 15:34:25,394 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 15:34:25,396 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 15:34:25,649 INFO L? ?]: Removed 51 outVars from TransFormulas that were not future-live. [2024-12-02 15:34:25,649 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 15:34:25,661 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 15:34:25,661 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 15:34:25,662 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:34:25 BoogieIcfgContainer [2024-12-02 15:34:25,662 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 15:34:25,664 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 15:34:25,664 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 15:34:25,669 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 15:34:25,669 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 03:34:24" (1/3) ... [2024-12-02 15:34:25,670 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@510b16ae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:34:25, skipping insertion in model container [2024-12-02 15:34:25,670 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:34:25" (2/3) ... [2024-12-02 15:34:25,670 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@510b16ae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:34:25, skipping insertion in model container [2024-12-02 15:34:25,670 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:34:25" (3/3) ... [2024-12-02 15:34:25,672 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2024-12-02 15:34:25,688 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 15:34:25,689 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec5_product56.cil.c that has 10 procedures, 108 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 15:34:25,749 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 15:34:25,760 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@19c0da73, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 15:34:25,760 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 15:34:25,763 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2024-12-02 15:34:25,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-12-02 15:34:25,770 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:25,771 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:25,771 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:25,775 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:25,776 INFO L85 PathProgramCache]: Analyzing trace with hash 1075136898, now seen corresponding path program 1 times [2024-12-02 15:34:25,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:25,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636133651] [2024-12-02 15:34:25,782 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:25,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:25,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:25,938 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:25,939 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:25,939 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636133651] [2024-12-02 15:34:25,939 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636133651] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:25,939 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:25,940 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 15:34:25,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390445830] [2024-12-02 15:34:25,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:25,945 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 15:34:25,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:25,960 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 15:34:25,961 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 15:34:25,963 INFO L87 Difference]: Start difference. First operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 15:34:25,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:25,989 INFO L93 Difference]: Finished difference Result 207 states and 282 transitions. [2024-12-02 15:34:25,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 15:34:25,991 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-12-02 15:34:25,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:25,999 INFO L225 Difference]: With dead ends: 207 [2024-12-02 15:34:25,999 INFO L226 Difference]: Without dead ends: 99 [2024-12-02 15:34:26,002 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 15:34:26,004 INFO L435 NwaCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:26,004 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:34:26,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2024-12-02 15:34:26,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2024-12-02 15:34:26,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 83 states have internal predecessors, (96), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-12-02 15:34:26,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 129 transitions. [2024-12-02 15:34:26,036 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 129 transitions. Word has length 32 [2024-12-02 15:34:26,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:26,037 INFO L471 AbstractCegarLoop]: Abstraction has 99 states and 129 transitions. [2024-12-02 15:34:26,037 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 15:34:26,037 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 129 transitions. [2024-12-02 15:34:26,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-12-02 15:34:26,038 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:26,039 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:26,039 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 15:34:26,039 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:26,039 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:26,040 INFO L85 PathProgramCache]: Analyzing trace with hash 673096380, now seen corresponding path program 1 times [2024-12-02 15:34:26,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:26,040 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094390150] [2024-12-02 15:34:26,040 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:26,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:26,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:26,144 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:26,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:26,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094390150] [2024-12-02 15:34:26,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094390150] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:26,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:26,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 15:34:26,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [381246935] [2024-12-02 15:34:26,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:26,146 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 15:34:26,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:26,147 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 15:34:26,147 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:34:26,148 INFO L87 Difference]: Start difference. First operand 99 states and 129 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 15:34:26,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:26,166 INFO L93 Difference]: Finished difference Result 160 states and 208 transitions. [2024-12-02 15:34:26,166 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 15:34:26,166 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2024-12-02 15:34:26,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:26,167 INFO L225 Difference]: With dead ends: 160 [2024-12-02 15:34:26,167 INFO L226 Difference]: Without dead ends: 91 [2024-12-02 15:34:26,168 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:34:26,168 INFO L435 NwaCegarLoop]: 117 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:26,169 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 213 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:34:26,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2024-12-02 15:34:26,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2024-12-02 15:34:26,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 15:34:26,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2024-12-02 15:34:26,177 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 32 [2024-12-02 15:34:26,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:26,177 INFO L471 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2024-12-02 15:34:26,177 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 15:34:26,177 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2024-12-02 15:34:26,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-12-02 15:34:26,178 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:26,178 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:26,179 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 15:34:26,179 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:26,179 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:26,179 INFO L85 PathProgramCache]: Analyzing trace with hash -569956059, now seen corresponding path program 1 times [2024-12-02 15:34:26,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:26,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386318726] [2024-12-02 15:34:26,179 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:26,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:26,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:26,258 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:26,258 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:26,259 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386318726] [2024-12-02 15:34:26,259 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [386318726] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:26,259 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:26,259 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 15:34:26,259 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250405423] [2024-12-02 15:34:26,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:26,259 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 15:34:26,259 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:26,260 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 15:34:26,260 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:34:26,260 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 15:34:26,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:26,296 INFO L93 Difference]: Finished difference Result 255 states and 337 transitions. [2024-12-02 15:34:26,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 15:34:26,296 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2024-12-02 15:34:26,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:26,298 INFO L225 Difference]: With dead ends: 255 [2024-12-02 15:34:26,298 INFO L226 Difference]: Without dead ends: 172 [2024-12-02 15:34:26,299 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:34:26,300 INFO L435 NwaCegarLoop]: 134 mSDtfsCounter, 106 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:26,300 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 239 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:34:26,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2024-12-02 15:34:26,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 169. [2024-12-02 15:34:26,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 124 states have (on average 1.346774193548387) internal successors, (167), 143 states have internal predecessors, (167), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2024-12-02 15:34:26,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 223 transitions. [2024-12-02 15:34:26,319 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 223 transitions. Word has length 37 [2024-12-02 15:34:26,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:26,319 INFO L471 AbstractCegarLoop]: Abstraction has 169 states and 223 transitions. [2024-12-02 15:34:26,320 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 15:34:26,320 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 223 transitions. [2024-12-02 15:34:26,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-12-02 15:34:26,321 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:26,321 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:26,322 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 15:34:26,322 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:26,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:26,322 INFO L85 PathProgramCache]: Analyzing trace with hash 1788273631, now seen corresponding path program 1 times [2024-12-02 15:34:26,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:26,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [439690165] [2024-12-02 15:34:26,322 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:26,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:26,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:26,432 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 15:34:26,432 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:26,432 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [439690165] [2024-12-02 15:34:26,432 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [439690165] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:26,432 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:26,432 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 15:34:26,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635679302] [2024-12-02 15:34:26,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:26,433 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 15:34:26,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:26,433 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 15:34:26,433 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 15:34:26,434 INFO L87 Difference]: Start difference. First operand 169 states and 223 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 15:34:26,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:26,644 INFO L93 Difference]: Finished difference Result 427 states and 580 transitions. [2024-12-02 15:34:26,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 15:34:26,645 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2024-12-02 15:34:26,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:26,647 INFO L225 Difference]: With dead ends: 427 [2024-12-02 15:34:26,648 INFO L226 Difference]: Without dead ends: 266 [2024-12-02 15:34:26,649 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-12-02 15:34:26,650 INFO L435 NwaCegarLoop]: 119 mSDtfsCounter, 78 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 512 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:26,650 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 512 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:34:26,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2024-12-02 15:34:26,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 265. [2024-12-02 15:34:26,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 196 states have (on average 1.2959183673469388) internal successors, (254), 213 states have internal predecessors, (254), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 15:34:26,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 342 transitions. [2024-12-02 15:34:26,682 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 342 transitions. Word has length 40 [2024-12-02 15:34:26,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:26,683 INFO L471 AbstractCegarLoop]: Abstraction has 265 states and 342 transitions. [2024-12-02 15:34:26,683 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 15:34:26,683 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 342 transitions. [2024-12-02 15:34:26,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-12-02 15:34:26,685 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:26,685 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:26,686 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 15:34:26,686 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:26,686 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:26,687 INFO L85 PathProgramCache]: Analyzing trace with hash 1126193926, now seen corresponding path program 1 times [2024-12-02 15:34:26,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:26,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1049298035] [2024-12-02 15:34:26,687 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:26,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:26,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:26,786 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:26,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:26,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1049298035] [2024-12-02 15:34:26,786 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1049298035] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:26,786 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:26,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 15:34:26,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [169135824] [2024-12-02 15:34:26,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:26,787 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 15:34:26,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:26,787 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 15:34:26,787 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:34:26,787 INFO L87 Difference]: Start difference. First operand 265 states and 342 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 15:34:26,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:26,825 INFO L93 Difference]: Finished difference Result 528 states and 696 transitions. [2024-12-02 15:34:26,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 15:34:26,826 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2024-12-02 15:34:26,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:26,829 INFO L225 Difference]: With dead ends: 528 [2024-12-02 15:34:26,829 INFO L226 Difference]: Without dead ends: 271 [2024-12-02 15:34:26,830 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:34:26,830 INFO L435 NwaCegarLoop]: 115 mSDtfsCounter, 0 mSDsluCounter, 339 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 454 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:26,831 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 454 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:34:26,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2024-12-02 15:34:26,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 271. [2024-12-02 15:34:26,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 202 states have (on average 1.2871287128712872) internal successors, (260), 219 states have internal predecessors, (260), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 15:34:26,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 348 transitions. [2024-12-02 15:34:26,853 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 348 transitions. Word has length 56 [2024-12-02 15:34:26,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:26,854 INFO L471 AbstractCegarLoop]: Abstraction has 271 states and 348 transitions. [2024-12-02 15:34:26,854 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 15:34:26,854 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 348 transitions. [2024-12-02 15:34:26,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-12-02 15:34:26,855 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:26,855 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:26,855 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 15:34:26,855 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:26,856 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:26,856 INFO L85 PathProgramCache]: Analyzing trace with hash 1548895752, now seen corresponding path program 1 times [2024-12-02 15:34:26,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:26,856 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376740399] [2024-12-02 15:34:26,856 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:26,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:26,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:26,938 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:26,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:26,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376740399] [2024-12-02 15:34:26,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376740399] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:26,938 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:26,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 15:34:26,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092903197] [2024-12-02 15:34:26,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:26,939 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 15:34:26,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:26,939 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 15:34:26,939 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:34:26,939 INFO L87 Difference]: Start difference. First operand 271 states and 348 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 15:34:26,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:26,995 INFO L93 Difference]: Finished difference Result 542 states and 721 transitions. [2024-12-02 15:34:26,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 15:34:26,996 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2024-12-02 15:34:26,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:26,998 INFO L225 Difference]: With dead ends: 542 [2024-12-02 15:34:26,998 INFO L226 Difference]: Without dead ends: 279 [2024-12-02 15:34:26,999 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 15:34:27,000 INFO L435 NwaCegarLoop]: 123 mSDtfsCounter, 108 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:27,000 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 466 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:34:27,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2024-12-02 15:34:27,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 275. [2024-12-02 15:34:27,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 206 states have (on average 1.2815533980582525) internal successors, (264), 223 states have internal predecessors, (264), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2024-12-02 15:34:27,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 352 transitions. [2024-12-02 15:34:27,026 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 352 transitions. Word has length 56 [2024-12-02 15:34:27,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:27,027 INFO L471 AbstractCegarLoop]: Abstraction has 275 states and 352 transitions. [2024-12-02 15:34:27,027 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 15:34:27,027 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 352 transitions. [2024-12-02 15:34:27,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-12-02 15:34:27,028 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:27,028 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:27,028 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 15:34:27,028 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:27,029 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:27,029 INFO L85 PathProgramCache]: Analyzing trace with hash -256542582, now seen corresponding path program 1 times [2024-12-02 15:34:27,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:27,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [526159374] [2024-12-02 15:34:27,029 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:27,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:27,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:27,109 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:27,110 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:27,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [526159374] [2024-12-02 15:34:27,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [526159374] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:27,110 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:27,110 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 15:34:27,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150119088] [2024-12-02 15:34:27,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:27,110 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 15:34:27,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:27,111 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 15:34:27,111 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:34:27,111 INFO L87 Difference]: Start difference. First operand 275 states and 352 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 15:34:27,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:27,268 INFO L93 Difference]: Finished difference Result 909 states and 1201 transitions. [2024-12-02 15:34:27,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 15:34:27,269 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2024-12-02 15:34:27,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:27,273 INFO L225 Difference]: With dead ends: 909 [2024-12-02 15:34:27,273 INFO L226 Difference]: Without dead ends: 642 [2024-12-02 15:34:27,275 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:34:27,275 INFO L435 NwaCegarLoop]: 203 mSDtfsCounter, 152 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:27,275 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 395 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:34:27,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 642 states. [2024-12-02 15:34:27,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 642 to 630. [2024-12-02 15:34:27,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 630 states, 469 states have (on average 1.2537313432835822) internal successors, (588), 502 states have internal predecessors, (588), 88 states have call successors, (88), 70 states have call predecessors, (88), 72 states have return successors, (138), 80 states have call predecessors, (138), 88 states have call successors, (138) [2024-12-02 15:34:27,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 630 states and 814 transitions. [2024-12-02 15:34:27,351 INFO L78 Accepts]: Start accepts. Automaton has 630 states and 814 transitions. Word has length 56 [2024-12-02 15:34:27,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:27,352 INFO L471 AbstractCegarLoop]: Abstraction has 630 states and 814 transitions. [2024-12-02 15:34:27,352 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-12-02 15:34:27,352 INFO L276 IsEmpty]: Start isEmpty. Operand 630 states and 814 transitions. [2024-12-02 15:34:27,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-12-02 15:34:27,354 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:27,354 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:27,354 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 15:34:27,354 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:27,354 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:27,354 INFO L85 PathProgramCache]: Analyzing trace with hash 1934463664, now seen corresponding path program 1 times [2024-12-02 15:34:27,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:27,355 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021135924] [2024-12-02 15:34:27,355 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:27,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:27,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:27,582 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:34:27,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:27,582 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021135924] [2024-12-02 15:34:27,582 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021135924] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:27,582 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:27,583 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-12-02 15:34:27,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900793365] [2024-12-02 15:34:27,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:27,583 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 15:34:27,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:27,584 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 15:34:27,584 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-12-02 15:34:27,584 INFO L87 Difference]: Start difference. First operand 630 states and 814 transitions. Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 15:34:28,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:28,110 INFO L93 Difference]: Finished difference Result 1854 states and 2480 transitions. [2024-12-02 15:34:28,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-12-02 15:34:28,111 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2024-12-02 15:34:28,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:28,116 INFO L225 Difference]: With dead ends: 1854 [2024-12-02 15:34:28,116 INFO L226 Difference]: Without dead ends: 1344 [2024-12-02 15:34:28,118 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-12-02 15:34:28,118 INFO L435 NwaCegarLoop]: 151 mSDtfsCounter, 427 mSDsluCounter, 433 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 584 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:28,118 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 584 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-12-02 15:34:28,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1344 states. [2024-12-02 15:34:28,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1344 to 1213. [2024-12-02 15:34:28,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1213 states, 898 states have (on average 1.230512249443207) internal successors, (1105), 962 states have internal predecessors, (1105), 165 states have call successors, (165), 123 states have call predecessors, (165), 149 states have return successors, (273), 162 states have call predecessors, (273), 165 states have call successors, (273) [2024-12-02 15:34:28,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1213 states to 1213 states and 1543 transitions. [2024-12-02 15:34:28,189 INFO L78 Accepts]: Start accepts. Automaton has 1213 states and 1543 transitions. Word has length 60 [2024-12-02 15:34:28,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:28,189 INFO L471 AbstractCegarLoop]: Abstraction has 1213 states and 1543 transitions. [2024-12-02 15:34:28,189 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 15:34:28,189 INFO L276 IsEmpty]: Start isEmpty. Operand 1213 states and 1543 transitions. [2024-12-02 15:34:28,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2024-12-02 15:34:28,191 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:28,191 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:28,192 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 15:34:28,192 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:28,192 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:28,192 INFO L85 PathProgramCache]: Analyzing trace with hash -124259497, now seen corresponding path program 1 times [2024-12-02 15:34:28,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:28,192 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1993709244] [2024-12-02 15:34:28,192 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:28,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:28,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:28,238 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 15:34:28,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:28,238 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1993709244] [2024-12-02 15:34:28,238 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1993709244] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:34:28,238 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:34:28,238 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 15:34:28,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [465951636] [2024-12-02 15:34:28,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:34:28,239 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 15:34:28,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:28,239 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 15:34:28,239 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:34:28,239 INFO L87 Difference]: Start difference. First operand 1213 states and 1543 transitions. Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-12-02 15:34:28,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:28,371 INFO L93 Difference]: Finished difference Result 2007 states and 2547 transitions. [2024-12-02 15:34:28,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 15:34:28,372 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 89 [2024-12-02 15:34:28,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:28,375 INFO L225 Difference]: With dead ends: 2007 [2024-12-02 15:34:28,375 INFO L226 Difference]: Without dead ends: 802 [2024-12-02 15:34:28,377 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:34:28,377 INFO L435 NwaCegarLoop]: 160 mSDtfsCounter, 147 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:28,378 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 277 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:34:28,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 802 states. [2024-12-02 15:34:28,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 802 to 792. [2024-12-02 15:34:28,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 792 states, 592 states have (on average 1.2195945945945945) internal successors, (722), 634 states have internal predecessors, (722), 105 states have call successors, (105), 80 states have call predecessors, (105), 94 states have return successors, (160), 105 states have call predecessors, (160), 105 states have call successors, (160) [2024-12-02 15:34:28,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 792 states to 792 states and 987 transitions. [2024-12-02 15:34:28,420 INFO L78 Accepts]: Start accepts. Automaton has 792 states and 987 transitions. Word has length 89 [2024-12-02 15:34:28,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:28,421 INFO L471 AbstractCegarLoop]: Abstraction has 792 states and 987 transitions. [2024-12-02 15:34:28,421 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-12-02 15:34:28,421 INFO L276 IsEmpty]: Start isEmpty. Operand 792 states and 987 transitions. [2024-12-02 15:34:28,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2024-12-02 15:34:28,422 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:28,422 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:28,422 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-12-02 15:34:28,422 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:28,422 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:28,423 INFO L85 PathProgramCache]: Analyzing trace with hash -203806363, now seen corresponding path program 1 times [2024-12-02 15:34:28,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:28,423 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [661827389] [2024-12-02 15:34:28,423 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:28,423 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:28,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:28,565 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 15 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 15:34:28,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:28,566 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [661827389] [2024-12-02 15:34:28,566 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [661827389] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 15:34:28,566 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1444419638] [2024-12-02 15:34:28,566 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:28,566 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 15:34:28,566 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:34:28,568 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 15:34:28,569 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 15:34:28,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:28,669 INFO L256 TraceCheckSpWp]: Trace formula consists of 356 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 15:34:28,675 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 15:34:28,857 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:34:28,857 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 15:34:29,112 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-12-02 15:34:29,112 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1444419638] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 15:34:29,112 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 15:34:29,112 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 15 [2024-12-02 15:34:29,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [523271969] [2024-12-02 15:34:29,112 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 15:34:29,113 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-12-02 15:34:29,113 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:29,113 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-12-02 15:34:29,113 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=169, Unknown=0, NotChecked=0, Total=210 [2024-12-02 15:34:29,114 INFO L87 Difference]: Start difference. First operand 792 states and 987 transitions. Second operand has 15 states, 15 states have (on average 9.466666666666667) internal successors, (142), 13 states have internal predecessors, (142), 7 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (21), 9 states have call predecessors, (21), 7 states have call successors, (21) [2024-12-02 15:34:29,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:29,829 INFO L93 Difference]: Finished difference Result 1823 states and 2334 transitions. [2024-12-02 15:34:29,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-12-02 15:34:29,830 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.466666666666667) internal successors, (142), 13 states have internal predecessors, (142), 7 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (21), 9 states have call predecessors, (21), 7 states have call successors, (21) Word has length 109 [2024-12-02 15:34:29,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:29,835 INFO L225 Difference]: With dead ends: 1823 [2024-12-02 15:34:29,835 INFO L226 Difference]: Without dead ends: 1126 [2024-12-02 15:34:29,838 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 215 SyntacticMatches, 4 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 270 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=260, Invalid=862, Unknown=0, NotChecked=0, Total=1122 [2024-12-02 15:34:29,838 INFO L435 NwaCegarLoop]: 242 mSDtfsCounter, 397 mSDsluCounter, 1444 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 402 SdHoareTripleChecker+Valid, 1686 SdHoareTripleChecker+Invalid, 575 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:29,839 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [402 Valid, 1686 Invalid, 575 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 438 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-12-02 15:34:29,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1126 states. [2024-12-02 15:34:29,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1126 to 973. [2024-12-02 15:34:29,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 973 states, 717 states have (on average 1.203626220362622) internal successors, (863), 776 states have internal predecessors, (863), 132 states have call successors, (132), 110 states have call predecessors, (132), 123 states have return successors, (178), 127 states have call predecessors, (178), 132 states have call successors, (178) [2024-12-02 15:34:29,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 973 states to 973 states and 1173 transitions. [2024-12-02 15:34:29,936 INFO L78 Accepts]: Start accepts. Automaton has 973 states and 1173 transitions. Word has length 109 [2024-12-02 15:34:29,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:29,936 INFO L471 AbstractCegarLoop]: Abstraction has 973 states and 1173 transitions. [2024-12-02 15:34:29,936 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.466666666666667) internal successors, (142), 13 states have internal predecessors, (142), 7 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (21), 9 states have call predecessors, (21), 7 states have call successors, (21) [2024-12-02 15:34:29,936 INFO L276 IsEmpty]: Start isEmpty. Operand 973 states and 1173 transitions. [2024-12-02 15:34:29,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2024-12-02 15:34:29,941 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:34:29,941 INFO L218 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:29,952 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 15:34:30,141 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-12-02 15:34:30,142 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:34:30,142 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:34:30,142 INFO L85 PathProgramCache]: Analyzing trace with hash -1809052159, now seen corresponding path program 1 times [2024-12-02 15:34:30,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:34:30,142 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898527215] [2024-12-02 15:34:30,143 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:30,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:34:30,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:30,419 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 73 proven. 2 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2024-12-02 15:34:30,419 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:34:30,419 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898527215] [2024-12-02 15:34:30,419 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898527215] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 15:34:30,419 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [672265336] [2024-12-02 15:34:30,419 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:34:30,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 15:34:30,419 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:34:30,421 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 15:34:30,423 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 15:34:30,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:34:30,557 INFO L256 TraceCheckSpWp]: Trace formula consists of 560 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-12-02 15:34:30,562 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 15:34:30,822 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 147 proven. 3 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-12-02 15:34:30,822 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 15:34:31,342 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 78 proven. 41 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2024-12-02 15:34:31,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [672265336] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 15:34:31,342 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 15:34:31,342 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 10, 11] total 23 [2024-12-02 15:34:31,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1239014255] [2024-12-02 15:34:31,342 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 15:34:31,343 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2024-12-02 15:34:31,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:34:31,344 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2024-12-02 15:34:31,344 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=106, Invalid=400, Unknown=0, NotChecked=0, Total=506 [2024-12-02 15:34:31,344 INFO L87 Difference]: Start difference. First operand 973 states and 1173 transitions. Second operand has 23 states, 23 states have (on average 9.434782608695652) internal successors, (217), 22 states have internal predecessors, (217), 9 states have call successors, (35), 7 states have call predecessors, (35), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2024-12-02 15:34:32,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:34:32,359 INFO L93 Difference]: Finished difference Result 2163 states and 2700 transitions. [2024-12-02 15:34:32,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-12-02 15:34:32,360 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.434782608695652) internal successors, (217), 22 states have internal predecessors, (217), 9 states have call successors, (35), 7 states have call predecessors, (35), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) Word has length 191 [2024-12-02 15:34:32,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:34:32,362 INFO L225 Difference]: With dead ends: 2163 [2024-12-02 15:34:32,362 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 15:34:32,366 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 407 GetRequests, 370 SyntacticMatches, 3 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 185 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=281, Invalid=979, Unknown=0, NotChecked=0, Total=1260 [2024-12-02 15:34:32,366 INFO L435 NwaCegarLoop]: 108 mSDtfsCounter, 367 mSDsluCounter, 1030 mSDsCounter, 0 mSdLazyCounter, 1417 mSolverCounterSat, 145 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 373 SdHoareTripleChecker+Valid, 1138 SdHoareTripleChecker+Invalid, 1562 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 145 IncrementalHoareTripleChecker+Valid, 1417 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-12-02 15:34:32,367 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [373 Valid, 1138 Invalid, 1562 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [145 Valid, 1417 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-12-02 15:34:32,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 15:34:32,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 15:34:32,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 15:34:32,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 15:34:32,369 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 191 [2024-12-02 15:34:32,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:34:32,369 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 15:34:32,369 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.434782608695652) internal successors, (217), 22 states have internal predecessors, (217), 9 states have call successors, (35), 7 states have call predecessors, (35), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2024-12-02 15:34:32,369 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 15:34:32,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 15:34:32,372 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 15:34:32,380 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 15:34:32,572 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-12-02 15:34:32,574 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:34:32,576 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 15:34:39,162 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 15:34:39,173 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 03:34:39 BoogieIcfgContainer [2024-12-02 15:34:39,173 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 15:34:39,173 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 15:34:39,173 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 15:34:39,173 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 15:34:39,174 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:34:25" (3/4) ... [2024-12-02 15:34:39,176 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2024-12-02 15:34:39,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2024-12-02 15:34:39,185 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2024-12-02 15:34:39,185 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 15:34:39,186 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 15:34:39,186 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 15:34:39,186 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 15:34:39,257 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 15:34:39,257 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 15:34:39,257 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 15:34:39,258 INFO L158 Benchmark]: Toolchain (without parser) took 14454.01ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 91.9MB in the beginning and 202.5MB in the end (delta: -110.6MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,258 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 72.3MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 15:34:39,258 INFO L158 Benchmark]: CACSL2BoogieTranslator took 392.42ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 72.5MB in the end (delta: 19.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,258 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.49ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 70.5MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,258 INFO L158 Benchmark]: Boogie Preprocessor took 42.61ms. Allocated memory is still 117.4MB. Free memory was 70.5MB in the beginning and 68.6MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 15:34:39,259 INFO L158 Benchmark]: RCFGBuilder took 381.20ms. Allocated memory is still 117.4MB. Free memory was 68.6MB in the beginning and 50.5MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,259 INFO L158 Benchmark]: TraceAbstraction took 13508.91ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 50.0MB in the beginning and 210.8MB in the end (delta: -160.8MB). Peak memory consumption was 111.7MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,259 INFO L158 Benchmark]: Witness Printer took 83.87ms. Allocated memory is still 243.3MB. Free memory was 210.8MB in the beginning and 202.5MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 15:34:39,261 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 72.3MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 392.42ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 72.5MB in the end (delta: 19.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.49ms. Allocated memory is still 117.4MB. Free memory was 72.5MB in the beginning and 70.5MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.61ms. Allocated memory is still 117.4MB. Free memory was 70.5MB in the beginning and 68.6MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 381.20ms. Allocated memory is still 117.4MB. Free memory was 68.6MB in the beginning and 50.5MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13508.91ms. Allocated memory was 117.4MB in the beginning and 243.3MB in the end (delta: 125.8MB). Free memory was 50.0MB in the beginning and 210.8MB in the end (delta: -160.8MB). Peak memory consumption was 111.7MB. Max. memory is 16.1GB. * Witness Printer took 83.87ms. Allocated memory is still 243.3MB. Free memory was 210.8MB in the beginning and 202.5MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] - GenericResultAtLocation [Line: 418]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [418] - GenericResultAtLocation [Line: 488]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [488] - GenericResultAtLocation [Line: 526]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [526] - GenericResultAtLocation [Line: 535]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [535] - GenericResultAtLocation [Line: 584]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [584] - GenericResultAtLocation [Line: 950]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [950] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.8s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1828 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1799 mSDsluCounter, 6102 SdHoareTripleChecker+Invalid, 1.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4492 mSDsCounter, 406 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2434 IncrementalHoareTripleChecker+Invalid, 2840 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 406 mSolverCounterUnsat, 1610 mSDtfsCounter, 2434 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 715 GetRequests, 610 SyntacticMatches, 7 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 475 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1213occurred in iteration=8, InterpolantAutomatonStates: 90, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 314 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1058 NumberOfCodeBlocks, 1058 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1343 ConstructedInterpolants, 0 QuantifiedInterpolants, 2497 SizeOfPredicates, 2 NumberOfNonLiveVariables, 916 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 685/765 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 429]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-12-02 15:34:39,275 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bd1991fb-173c-450b-b8da-57f2d1f4b8b5/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE