./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4f9af400 extending candidate: java ['java'] extending candidate: /usr/bin/java ['java', '/usr/bin/java'] extending candidate: /opt/oracle-jdk-bin-*/bin/java ['java', '/usr/bin/java'] extending candidate: /opt/openjdk-*/bin/java ['java', '/usr/bin/java'] extending candidate: /usr/lib/jvm/java-*-openjdk-amd64/bin/java ['java', '/usr/bin/java', '/usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java', '/usr/lib/jvm/java-17-openjdk-amd64/bin/java', '/usr/lib/jvm/java-11-openjdk-amd64/bin/java', '/usr/lib/jvm/java-1.17.0-openjdk-amd64/bin/java'] ['/root/.sdkman/candidates/java/21.0.5-tem/bin/java', '-Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config', '-Xmx15G', '-Xms4m', '-jar', '/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar', '-data', '@noDefault', '-ultimatedata', '/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data', '-tc', '/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml', '-i', '../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c', '-s', '/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf', '--cacsl2boogietranslator.entry.function', 'main', '--witnessprinter.witness.directory', '/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux', '--witnessprinter.witness.filename', 'witness', '--witnessprinter.write.witness.besides.input.file', 'false', '--witnessprinter.graph.data.specification', 'CHECK( init(main()), LTL(G ! call(reach_error())) )\n\n', '--witnessprinter.graph.data.producer', 'Automizer', '--witnessprinter.graph.data.architecture', '32bit', '--witnessprinter.graph.data.programhash', '0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67'] Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.3.0-?-4f9af40 [2024-11-06 23:42:36,612 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-06 23:42:36,713 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-06 23:42:36,718 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-06 23:42:36,718 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-06 23:42:36,745 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-06 23:42:36,746 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-06 23:42:36,746 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-06 23:42:36,746 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-06 23:42:36,746 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-06 23:42:36,746 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-06 23:42:36,747 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Use SBE=true [2024-11-06 23:42:36,747 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-06 23:42:36,747 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-06 23:42:36,748 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-06 23:42:36,748 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-06 23:42:36,750 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-06 23:42:36,751 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-06 23:42:36,751 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-06 23:42:36,751 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-06 23:42:36,751 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-06 23:42:36,751 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-06 23:42:36,752 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2024-11-06 23:42:37,071 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-06 23:42:37,084 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-06 23:42:37,087 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-06 23:42:37,088 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-06 23:42:37,088 INFO L274 PluginConnector]: CDTParser initialized [2024-11-06 23:42:37,089 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2024-11-06 23:42:38,398 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-06 23:42:38,718 INFO L384 CDTParser]: Found 1 translation units. [2024-11-06 23:42:38,723 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2024-11-06 23:42:38,741 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/bdd7108e9/26f7ab6e739f4fc68022d5b6c9e0fd94/FLAGd770ffd60 [2024-11-06 23:42:38,759 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/bdd7108e9/26f7ab6e739f4fc68022d5b6c9e0fd94 [2024-11-06 23:42:38,761 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-06 23:42:38,762 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-06 23:42:38,764 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-06 23:42:38,764 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-06 23:42:38,768 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-06 23:42:38,768 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:42:38" (1/1) ... [2024-11-06 23:42:38,769 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6448de18 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:38, skipping insertion in model container [2024-11-06 23:42:38,769 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:42:38" (1/1) ... [2024-11-06 23:42:38,805 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-06 23:42:39,061 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2024-11-06 23:42:39,094 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-06 23:42:39,105 INFO L200 MainTranslator]: Completed pre-run [2024-11-06 23:42:39,114 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2024-11-06 23:42:39,115 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] [2024-11-06 23:42:39,115 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] [2024-11-06 23:42:39,115 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] [2024-11-06 23:42:39,116 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] [2024-11-06 23:42:39,116 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] [2024-11-06 23:42:39,116 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] [2024-11-06 23:42:39,116 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] [2024-11-06 23:42:39,182 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2024-11-06 23:42:39,196 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-06 23:42:39,219 INFO L204 MainTranslator]: Completed translation [2024-11-06 23:42:39,220 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39 WrapperNode [2024-11-06 23:42:39,220 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-06 23:42:39,220 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-06 23:42:39,220 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-06 23:42:39,221 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-06 23:42:39,225 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,239 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,261 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 221 [2024-11-06 23:42:39,262 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-06 23:42:39,262 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-06 23:42:39,262 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-06 23:42:39,262 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-06 23:42:39,272 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,273 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,275 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,289 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-06 23:42:39,289 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,290 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,295 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,300 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,302 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,303 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,304 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-06 23:42:39,305 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-06 23:42:39,305 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-06 23:42:39,305 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-06 23:42:39,306 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (1/1) ... [2024-11-06 23:42:39,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-06 23:42:39,323 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2024-11-06 23:42:39,337 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-06 23:42:39,341 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-06 23:42:39,364 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-11-06 23:42:39,364 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-06 23:42:39,364 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-06 23:42:39,364 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-06 23:42:39,364 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-11-06 23:42:39,364 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-11-06 23:42:39,365 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-06 23:42:39,365 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-06 23:42:39,365 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-11-06 23:42:39,365 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-11-06 23:42:39,365 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-06 23:42:39,365 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-06 23:42:39,365 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-06 23:42:39,365 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-06 23:42:39,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-06 23:42:39,438 INFO L238 CfgBuilder]: Building ICFG [2024-11-06 23:42:39,441 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-06 23:42:39,700 INFO L? ?]: Removed 49 outVars from TransFormulas that were not future-live. [2024-11-06 23:42:39,702 INFO L287 CfgBuilder]: Performing block encoding [2024-11-06 23:42:39,712 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-06 23:42:39,712 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-06 23:42:39,713 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:42:39 BoogieIcfgContainer [2024-11-06 23:42:39,713 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-06 23:42:39,717 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-06 23:42:39,717 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-06 23:42:39,721 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-06 23:42:39,722 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:42:38" (1/3) ... [2024-11-06 23:42:39,723 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47a257ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:42:39, skipping insertion in model container [2024-11-06 23:42:39,723 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:42:39" (2/3) ... [2024-11-06 23:42:39,723 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47a257ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:42:39, skipping insertion in model container [2024-11-06 23:42:39,723 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:42:39" (3/3) ... [2024-11-06 23:42:39,724 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2024-11-06 23:42:39,737 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-06 23:42:39,737 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-06 23:42:39,779 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-06 23:42:39,787 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2950f3e4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-06 23:42:39,787 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-06 23:42:39,791 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2024-11-06 23:42:39,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-11-06 23:42:39,801 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:39,802 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:39,802 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:39,807 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:39,807 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2024-11-06 23:42:39,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:39,813 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606231978] [2024-11-06 23:42:39,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:39,813 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:39,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:39,956 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-11-06 23:42:39,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:39,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-06 23:42:39,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:39,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606231978] [2024-11-06 23:42:39,975 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [606231978] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:39,975 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:39,975 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-06 23:42:39,976 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983723315] [2024-11-06 23:42:39,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:39,980 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-06 23:42:39,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:39,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-06 23:42:39,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-06 23:42:39,999 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:40,036 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2024-11-06 23:42:40,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-06 23:42:40,038 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-11-06 23:42:40,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:40,044 INFO L225 Difference]: With dead ends: 190 [2024-11-06 23:42:40,046 INFO L226 Difference]: Without dead ends: 90 [2024-11-06 23:42:40,050 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-06 23:42:40,053 INFO L432 NwaCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:40,055 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-06 23:42:40,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2024-11-06 23:42:40,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2024-11-06 23:42:40,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2024-11-06 23:42:40,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2024-11-06 23:42:40,103 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2024-11-06 23:42:40,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:40,105 INFO L471 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2024-11-06 23:42:40,105 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,105 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2024-11-06 23:42:40,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-11-06 23:42:40,106 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:40,107 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:40,107 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-06 23:42:40,107 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:40,109 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:40,110 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2024-11-06 23:42:40,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:40,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60677902] [2024-11-06 23:42:40,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:40,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:40,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,223 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-11-06 23:42:40,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,231 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-06 23:42:40,231 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:40,232 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60677902] [2024-11-06 23:42:40,232 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60677902] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:40,232 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:40,232 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-06 23:42:40,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943001070] [2024-11-06 23:42:40,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:40,233 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-06 23:42:40,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:40,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-06 23:42:40,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-06 23:42:40,235 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:40,261 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2024-11-06 23:42:40,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-06 23:42:40,263 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2024-11-06 23:42:40,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:40,264 INFO L225 Difference]: With dead ends: 141 [2024-11-06 23:42:40,264 INFO L226 Difference]: Without dead ends: 81 [2024-11-06 23:42:40,265 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-06 23:42:40,266 INFO L432 NwaCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:40,266 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-06 23:42:40,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2024-11-06 23:42:40,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2024-11-06 23:42:40,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2024-11-06 23:42:40,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2024-11-06 23:42:40,283 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2024-11-06 23:42:40,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:40,284 INFO L471 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2024-11-06 23:42:40,284 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,284 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2024-11-06 23:42:40,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2024-11-06 23:42:40,285 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:40,285 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:40,286 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-06 23:42:40,287 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:40,287 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:40,287 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2024-11-06 23:42:40,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:40,288 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862229995] [2024-11-06 23:42:40,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:40,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:40,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,389 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:40,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-06 23:42:40,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:40,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862229995] [2024-11-06 23:42:40,393 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862229995] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:40,394 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:40,394 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-06 23:42:40,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597441066] [2024-11-06 23:42:40,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:40,397 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-06 23:42:40,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:40,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-06 23:42:40,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-06 23:42:40,397 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:40,461 INFO L93 Difference]: Finished difference Result 227 states and 297 transitions. [2024-11-06 23:42:40,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-06 23:42:40,463 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2024-11-06 23:42:40,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:40,464 INFO L225 Difference]: With dead ends: 227 [2024-11-06 23:42:40,465 INFO L226 Difference]: Without dead ends: 153 [2024-11-06 23:42:40,465 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-06 23:42:40,466 INFO L432 NwaCegarLoop]: 119 mSDtfsCounter, 96 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:40,468 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 211 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-06 23:42:40,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2024-11-06 23:42:40,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 150. [2024-11-06 23:42:40,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 113 states have (on average 1.345132743362832) internal successors, (152), 128 states have internal predecessors, (152), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2024-11-06 23:42:40,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 196 transitions. [2024-11-06 23:42:40,500 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 196 transitions. Word has length 29 [2024-11-06 23:42:40,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:40,500 INFO L471 AbstractCegarLoop]: Abstraction has 150 states and 196 transitions. [2024-11-06 23:42:40,500 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,501 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 196 transitions. [2024-11-06 23:42:40,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2024-11-06 23:42:40,502 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:40,502 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:40,502 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-06 23:42:40,502 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:40,502 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:40,503 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2024-11-06 23:42:40,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:40,503 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [492255216] [2024-11-06 23:42:40,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:40,503 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:40,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,658 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-11-06 23:42:40,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,665 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-06 23:42:40,665 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:40,665 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [492255216] [2024-11-06 23:42:40,665 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [492255216] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:40,665 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:40,666 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-06 23:42:40,666 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002862770] [2024-11-06 23:42:40,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:40,667 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-06 23:42:40,667 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:40,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-06 23:42:40,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-06 23:42:40,668 INFO L87 Difference]: Start difference. First operand 150 states and 196 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:40,784 INFO L93 Difference]: Finished difference Result 378 states and 505 transitions. [2024-11-06 23:42:40,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-06 23:42:40,785 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2024-11-06 23:42:40,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:40,787 INFO L225 Difference]: With dead ends: 378 [2024-11-06 23:42:40,787 INFO L226 Difference]: Without dead ends: 235 [2024-11-06 23:42:40,792 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-06 23:42:40,793 INFO L432 NwaCegarLoop]: 98 mSDtfsCounter, 56 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:40,793 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 355 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-06 23:42:40,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2024-11-06 23:42:40,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 234. [2024-11-06 23:42:40,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 177 states have (on average 1.305084745762712) internal successors, (231), 194 states have internal predecessors, (231), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2024-11-06 23:42:40,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 299 transitions. [2024-11-06 23:42:40,831 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 299 transitions. Word has length 32 [2024-11-06 23:42:40,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:40,833 INFO L471 AbstractCegarLoop]: Abstraction has 234 states and 299 transitions. [2024-11-06 23:42:40,833 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-06 23:42:40,833 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 299 transitions. [2024-11-06 23:42:40,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2024-11-06 23:42:40,836 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:40,836 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:40,836 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-06 23:42:40,836 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:40,837 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:40,837 INFO L85 PathProgramCache]: Analyzing trace with hash -482422855, now seen corresponding path program 1 times [2024-11-06 23:42:40,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:40,837 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [610671644] [2024-11-06 23:42:40,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:40,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:40,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:40,952 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:40,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,014 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:41,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,018 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-11-06 23:42:41,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,024 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-06 23:42:41,025 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:41,025 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [610671644] [2024-11-06 23:42:41,025 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [610671644] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:41,025 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:41,026 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-06 23:42:41,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288093394] [2024-11-06 23:42:41,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:41,026 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-06 23:42:41,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:41,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-06 23:42:41,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-06 23:42:41,028 INFO L87 Difference]: Start difference. First operand 234 states and 299 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-06 23:42:41,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:41,248 INFO L93 Difference]: Finished difference Result 513 states and 670 transitions. [2024-11-06 23:42:41,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-06 23:42:41,249 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2024-11-06 23:42:41,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:41,251 INFO L225 Difference]: With dead ends: 513 [2024-11-06 23:42:41,253 INFO L226 Difference]: Without dead ends: 286 [2024-11-06 23:42:41,255 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-06 23:42:41,257 INFO L432 NwaCegarLoop]: 81 mSDtfsCounter, 56 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:41,258 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 351 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-06 23:42:41,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2024-11-06 23:42:41,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 284. [2024-11-06 23:42:41,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 217 states have (on average 1.2764976958525345) internal successors, (277), 234 states have internal predecessors, (277), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2024-11-06 23:42:41,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 359 transitions. [2024-11-06 23:42:41,301 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 359 transitions. Word has length 51 [2024-11-06 23:42:41,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:41,302 INFO L471 AbstractCegarLoop]: Abstraction has 284 states and 359 transitions. [2024-11-06 23:42:41,302 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-06 23:42:41,302 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 359 transitions. [2024-11-06 23:42:41,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2024-11-06 23:42:41,306 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:41,306 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:41,306 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-06 23:42:41,306 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:41,306 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:41,307 INFO L85 PathProgramCache]: Analyzing trace with hash -420383241, now seen corresponding path program 1 times [2024-11-06 23:42:41,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:41,307 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720812124] [2024-11-06 23:42:41,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:41,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:41,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,383 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:41,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,421 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:41,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,425 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-11-06 23:42:41,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,427 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-06 23:42:41,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:41,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [720812124] [2024-11-06 23:42:41,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [720812124] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:41,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:41,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-06 23:42:41,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463224365] [2024-11-06 23:42:41,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:41,428 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-06 23:42:41,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:41,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-06 23:42:41,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-06 23:42:41,428 INFO L87 Difference]: Start difference. First operand 284 states and 359 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-06 23:42:41,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:41,573 INFO L93 Difference]: Finished difference Result 567 states and 734 transitions. [2024-11-06 23:42:41,574 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-06 23:42:41,574 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2024-11-06 23:42:41,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:41,577 INFO L225 Difference]: With dead ends: 567 [2024-11-06 23:42:41,579 INFO L226 Difference]: Without dead ends: 290 [2024-11-06 23:42:41,580 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-06 23:42:41,581 INFO L432 NwaCegarLoop]: 82 mSDtfsCounter, 55 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:41,581 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 275 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-06 23:42:41,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 290 states. [2024-11-06 23:42:41,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 290 to 288. [2024-11-06 23:42:41,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 221 states have (on average 1.2714932126696832) internal successors, (281), 238 states have internal predecessors, (281), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2024-11-06 23:42:41,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 363 transitions. [2024-11-06 23:42:41,623 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 363 transitions. Word has length 51 [2024-11-06 23:42:41,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:41,623 INFO L471 AbstractCegarLoop]: Abstraction has 288 states and 363 transitions. [2024-11-06 23:42:41,623 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-11-06 23:42:41,624 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 363 transitions. [2024-11-06 23:42:41,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2024-11-06 23:42:41,627 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:41,627 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:41,627 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-06 23:42:41,627 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:41,627 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:41,628 INFO L85 PathProgramCache]: Analyzing trace with hash -929856331, now seen corresponding path program 1 times [2024-11-06 23:42:41,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:41,629 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794336600] [2024-11-06 23:42:41,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:41,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:41,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,689 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:41,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,712 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:41,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,717 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-11-06 23:42:41,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:41,722 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-06 23:42:41,722 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:41,722 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794336600] [2024-11-06 23:42:41,722 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794336600] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:41,722 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:41,722 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-06 23:42:41,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [224638124] [2024-11-06 23:42:41,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:41,723 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-06 23:42:41,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:41,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-06 23:42:41,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-06 23:42:41,725 INFO L87 Difference]: Start difference. First operand 288 states and 363 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-06 23:42:41,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:41,983 INFO L93 Difference]: Finished difference Result 820 states and 1073 transitions. [2024-11-06 23:42:41,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-06 23:42:41,984 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2024-11-06 23:42:41,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:41,987 INFO L225 Difference]: With dead ends: 820 [2024-11-06 23:42:41,988 INFO L226 Difference]: Without dead ends: 539 [2024-11-06 23:42:41,989 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-06 23:42:41,990 INFO L432 NwaCegarLoop]: 124 mSDtfsCounter, 218 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:41,990 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 299 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-06 23:42:41,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2024-11-06 23:42:42,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 532. [2024-11-06 23:42:42,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 532 states, 405 states have (on average 1.2444444444444445) internal successors, (504), 431 states have internal predecessors, (504), 65 states have call successors, (65), 59 states have call predecessors, (65), 61 states have return successors, (103), 64 states have call predecessors, (103), 65 states have call successors, (103) [2024-11-06 23:42:42,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 532 states to 532 states and 672 transitions. [2024-11-06 23:42:42,062 INFO L78 Accepts]: Start accepts. Automaton has 532 states and 672 transitions. Word has length 51 [2024-11-06 23:42:42,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:42,062 INFO L471 AbstractCegarLoop]: Abstraction has 532 states and 672 transitions. [2024-11-06 23:42:42,063 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-11-06 23:42:42,063 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 672 transitions. [2024-11-06 23:42:42,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-11-06 23:42:42,064 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:42,064 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:42,064 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-06 23:42:42,064 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:42,064 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:42,065 INFO L85 PathProgramCache]: Analyzing trace with hash -1982280369, now seen corresponding path program 1 times [2024-11-06 23:42:42,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:42,065 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553602403] [2024-11-06 23:42:42,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:42,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:42,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:42,200 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-11-06 23:42:42,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:42,211 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2024-11-06 23:42:42,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:42,225 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:42,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:42,227 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-11-06 23:42:42,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:42,245 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-06 23:42:42,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:42,247 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553602403] [2024-11-06 23:42:42,247 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553602403] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:42,247 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:42,247 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-06 23:42:42,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1180422335] [2024-11-06 23:42:42,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:42,248 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-06 23:42:42,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:42,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-06 23:42:42,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-06 23:42:42,248 INFO L87 Difference]: Start difference. First operand 532 states and 672 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2024-11-06 23:42:42,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:42,936 INFO L93 Difference]: Finished difference Result 1794 states and 2354 transitions. [2024-11-06 23:42:42,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-11-06 23:42:42,937 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2024-11-06 23:42:42,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:42,950 INFO L225 Difference]: With dead ends: 1794 [2024-11-06 23:42:42,950 INFO L226 Difference]: Without dead ends: 1269 [2024-11-06 23:42:42,954 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=112, Invalid=350, Unknown=0, NotChecked=0, Total=462 [2024-11-06 23:42:42,955 INFO L432 NwaCegarLoop]: 71 mSDtfsCounter, 312 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 345 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 393 SdHoareTripleChecker+Invalid, 452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 345 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:42,956 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 393 Invalid, 452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 345 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-06 23:42:42,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1269 states. [2024-11-06 23:42:43,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1269 to 1227. [2024-11-06 23:42:43,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1227 states, 926 states have (on average 1.2138228941684666) internal successors, (1124), 993 states have internal predecessors, (1124), 158 states have call successors, (158), 118 states have call predecessors, (158), 142 states have return successors, (284), 160 states have call predecessors, (284), 158 states have call successors, (284) [2024-11-06 23:42:43,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1227 states to 1227 states and 1566 transitions. [2024-11-06 23:42:43,129 INFO L78 Accepts]: Start accepts. Automaton has 1227 states and 1566 transitions. Word has length 55 [2024-11-06 23:42:43,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:43,130 INFO L471 AbstractCegarLoop]: Abstraction has 1227 states and 1566 transitions. [2024-11-06 23:42:43,130 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2024-11-06 23:42:43,130 INFO L276 IsEmpty]: Start isEmpty. Operand 1227 states and 1566 transitions. [2024-11-06 23:42:43,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-11-06 23:42:43,132 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:43,133 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:43,133 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-06 23:42:43,133 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:43,133 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:43,133 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2024-11-06 23:42:43,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:43,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [575594198] [2024-11-06 23:42:43,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:43,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:43,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,238 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-11-06 23:42:43,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,247 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-11-06 23:42:43,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,260 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-11-06 23:42:43,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,386 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:43,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,405 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2024-11-06 23:42:43,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,408 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-06 23:42:43,408 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:43,409 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [575594198] [2024-11-06 23:42:43,409 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [575594198] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-06 23:42:43,409 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [985613222] [2024-11-06 23:42:43,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:43,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:43,409 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2024-11-06 23:42:43,412 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-06 23:42:43,414 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-06 23:42:43,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:43,535 INFO L255 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-06 23:42:43,542 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-06 23:42:43,720 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-06 23:42:43,721 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-06 23:42:43,721 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [985613222] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:43,722 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-06 23:42:43,722 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2024-11-06 23:42:43,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198904766] [2024-11-06 23:42:43,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:43,722 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-11-06 23:42:43,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:43,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-06 23:42:43,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2024-11-06 23:42:43,724 INFO L87 Difference]: Start difference. First operand 1227 states and 1566 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-06 23:42:43,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:43,938 INFO L93 Difference]: Finished difference Result 2381 states and 3051 transitions. [2024-11-06 23:42:43,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-06 23:42:43,939 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2024-11-06 23:42:43,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:43,951 INFO L225 Difference]: With dead ends: 2381 [2024-11-06 23:42:43,951 INFO L226 Difference]: Without dead ends: 1161 [2024-11-06 23:42:43,956 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2024-11-06 23:42:43,956 INFO L432 NwaCegarLoop]: 186 mSDtfsCounter, 68 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 544 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:43,957 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 544 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-06 23:42:43,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1161 states. [2024-11-06 23:42:44,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1161 to 1161. [2024-11-06 23:42:44,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1161 states, 874 states have (on average 1.2013729977116705) internal successors, (1050), 939 states have internal predecessors, (1050), 152 states have call successors, (152), 114 states have call predecessors, (152), 134 states have return successors, (246), 150 states have call predecessors, (246), 152 states have call successors, (246) [2024-11-06 23:42:44,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1161 states to 1161 states and 1448 transitions. [2024-11-06 23:42:44,072 INFO L78 Accepts]: Start accepts. Automaton has 1161 states and 1448 transitions. Word has length 59 [2024-11-06 23:42:44,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:44,073 INFO L471 AbstractCegarLoop]: Abstraction has 1161 states and 1448 transitions. [2024-11-06 23:42:44,073 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2024-11-06 23:42:44,073 INFO L276 IsEmpty]: Start isEmpty. Operand 1161 states and 1448 transitions. [2024-11-06 23:42:44,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-11-06 23:42:44,077 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:44,077 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:44,096 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-06 23:42:44,277 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:44,278 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:44,278 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:44,278 INFO L85 PathProgramCache]: Analyzing trace with hash 1921806068, now seen corresponding path program 1 times [2024-11-06 23:42:44,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:44,278 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1916475815] [2024-11-06 23:42:44,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:44,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:44,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,331 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-11-06 23:42:44,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,340 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-11-06 23:42:44,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,371 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-11-06 23:42:44,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,386 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:44,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,392 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2024-11-06 23:42:44,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,405 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2024-11-06 23:42:44,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,407 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2024-11-06 23:42:44,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:44,410 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-11-06 23:42:44,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:44,410 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1916475815] [2024-11-06 23:42:44,411 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1916475815] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:44,411 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-06 23:42:44,411 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-06 23:42:44,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891318129] [2024-11-06 23:42:44,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:44,412 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-06 23:42:44,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:44,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-06 23:42:44,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-06 23:42:44,416 INFO L87 Difference]: Start difference. First operand 1161 states and 1448 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-06 23:42:44,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:44,994 INFO L93 Difference]: Finished difference Result 1976 states and 2453 transitions. [2024-11-06 23:42:44,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-11-06 23:42:44,995 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 86 [2024-11-06 23:42:44,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:45,000 INFO L225 Difference]: With dead ends: 1976 [2024-11-06 23:42:45,001 INFO L226 Difference]: Without dead ends: 822 [2024-11-06 23:42:45,004 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2024-11-06 23:42:45,005 INFO L432 NwaCegarLoop]: 56 mSDtfsCounter, 308 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 405 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 317 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 490 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:45,006 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [317 Valid, 241 Invalid, 490 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 405 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-06 23:42:45,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2024-11-06 23:42:45,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 790. [2024-11-06 23:42:45,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 596 states have (on average 1.1895973154362416) internal successors, (709), 642 states have internal predecessors, (709), 101 states have call successors, (101), 82 states have call predecessors, (101), 92 states have return successors, (150), 99 states have call predecessors, (150), 101 states have call successors, (150) [2024-11-06 23:42:45,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 960 transitions. [2024-11-06 23:42:45,074 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 960 transitions. Word has length 86 [2024-11-06 23:42:45,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:45,075 INFO L471 AbstractCegarLoop]: Abstraction has 790 states and 960 transitions. [2024-11-06 23:42:45,075 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-06 23:42:45,075 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 960 transitions. [2024-11-06 23:42:45,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2024-11-06 23:42:45,080 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:45,080 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:45,080 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-11-06 23:42:45,080 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:45,081 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:45,081 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2024-11-06 23:42:45,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:45,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872108324] [2024-11-06 23:42:45,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:45,081 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:45,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,285 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-11-06 23:42:45,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,300 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:45,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,330 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-11-06 23:42:45,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,347 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:45,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,351 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2024-11-06 23:42:45,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,365 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2024-11-06 23:42:45,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,370 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2024-11-06 23:42:45,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,373 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-11-06 23:42:45,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,375 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2024-11-06 23:42:45,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,377 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-11-06 23:42:45,378 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:45,378 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872108324] [2024-11-06 23:42:45,378 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872108324] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-06 23:42:45,378 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [650770965] [2024-11-06 23:42:45,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:45,378 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:45,378 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2024-11-06 23:42:45,381 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-06 23:42:45,383 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-06 23:42:45,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:45,488 INFO L255 TraceCheckSpWp]: Trace formula consists of 318 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-11-06 23:42:45,493 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-06 23:42:45,614 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-11-06 23:42:45,614 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-06 23:42:45,614 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [650770965] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:45,614 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-06 23:42:45,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2024-11-06 23:42:45,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1618549564] [2024-11-06 23:42:45,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:45,614 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-06 23:42:45,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:45,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-06 23:42:45,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2024-11-06 23:42:45,615 INFO L87 Difference]: Start difference. First operand 790 states and 960 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-11-06 23:42:45,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:45,801 INFO L93 Difference]: Finished difference Result 1841 states and 2334 transitions. [2024-11-06 23:42:45,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-06 23:42:45,802 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2024-11-06 23:42:45,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:45,809 INFO L225 Difference]: With dead ends: 1841 [2024-11-06 23:42:45,809 INFO L226 Difference]: Without dead ends: 1222 [2024-11-06 23:42:45,812 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 113 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2024-11-06 23:42:45,813 INFO L432 NwaCegarLoop]: 153 mSDtfsCounter, 120 mSDsluCounter, 449 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 602 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:45,813 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 602 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-06 23:42:45,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1222 states. [2024-11-06 23:42:45,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1222 to 1084. [2024-11-06 23:42:45,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1084 states, 814 states have (on average 1.1965601965601966) internal successors, (974), 878 states have internal predecessors, (974), 141 states have call successors, (141), 116 states have call predecessors, (141), 128 states have return successors, (220), 131 states have call predecessors, (220), 141 states have call successors, (220) [2024-11-06 23:42:45,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1084 states to 1084 states and 1335 transitions. [2024-11-06 23:42:45,906 INFO L78 Accepts]: Start accepts. Automaton has 1084 states and 1335 transitions. Word has length 98 [2024-11-06 23:42:45,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:45,906 INFO L471 AbstractCegarLoop]: Abstraction has 1084 states and 1335 transitions. [2024-11-06 23:42:45,906 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-11-06 23:42:45,906 INFO L276 IsEmpty]: Start isEmpty. Operand 1084 states and 1335 transitions. [2024-11-06 23:42:45,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2024-11-06 23:42:45,908 INFO L207 NwaCegarLoop]: Found error trace [2024-11-06 23:42:45,908 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:45,925 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-11-06 23:42:46,109 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:46,110 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-06 23:42:46,110 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-06 23:42:46,110 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2024-11-06 23:42:46,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-06 23:42:46,110 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [578602771] [2024-11-06 23:42:46,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:46,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-06 23:42:46,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,203 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-11-06 23:42:46,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,215 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-11-06 23:42:46,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,230 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-11-06 23:42:46,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,236 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-11-06 23:42:46,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,238 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2024-11-06 23:42:46,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,248 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2024-11-06 23:42:46,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,250 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2024-11-06 23:42:46,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,252 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-11-06 23:42:46,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,253 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2024-11-06 23:42:46,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,256 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-06 23:42:46,256 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-06 23:42:46,256 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [578602771] [2024-11-06 23:42:46,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [578602771] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-06 23:42:46,256 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1173951746] [2024-11-06 23:42:46,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-06 23:42:46,256 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:46,257 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2024-11-06 23:42:46,259 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-06 23:42:46,261 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-06 23:42:46,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-06 23:42:46,366 INFO L255 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-11-06 23:42:46,369 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-06 23:42:46,410 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-06 23:42:46,411 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-06 23:42:46,411 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1173951746] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-06 23:42:46,411 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-06 23:42:46,411 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2024-11-06 23:42:46,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2076445820] [2024-11-06 23:42:46,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-06 23:42:46,412 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-06 23:42:46,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-06 23:42:46,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-06 23:42:46,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2024-11-06 23:42:46,412 INFO L87 Difference]: Start difference. First operand 1084 states and 1335 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-06 23:42:46,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-06 23:42:46,485 INFO L93 Difference]: Finished difference Result 1551 states and 1897 transitions. [2024-11-06 23:42:46,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-06 23:42:46,486 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2024-11-06 23:42:46,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-06 23:42:46,488 INFO L225 Difference]: With dead ends: 1551 [2024-11-06 23:42:46,488 INFO L226 Difference]: Without dead ends: 0 [2024-11-06 23:42:46,492 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2024-11-06 23:42:46,493 INFO L432 NwaCegarLoop]: 91 mSDtfsCounter, 0 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-06 23:42:46,493 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 359 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-06 23:42:46,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-06 23:42:46,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-06 23:42:46,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-06 23:42:46,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-06 23:42:46,495 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2024-11-06 23:42:46,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-06 23:42:46,495 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-06 23:42:46,495 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-06 23:42:46,496 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-06 23:42:46,496 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-06 23:42:46,498 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-06 23:42:46,517 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-11-06 23:42:46,702 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-06 23:42:46,704 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-06 23:42:46,706 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-06 23:42:50,518 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-06 23:42:50,543 WARN L156 FloydHoareUtils]: Requires clause for deactivatePump contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse4) (and .cse5 .cse1 .cse2) (and .cse5 .cse3 .cse4)))) Eliminated clause: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse4) (and .cse5 .cse1 .cse2) (and .cse5 .cse3 .cse4))) [2024-11-06 23:42:50,569 WARN L156 FloydHoareUtils]: Requires clause for changeMethaneLevel contained old-variable. Original clause: (and (let ((.cse1 (<= 1 |old(~methaneLevelCritical~0)|)) (.cse2 (<= 1 ~waterLevel~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= |old(~methaneLevelCritical~0)| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse6) (and .cse0 .cse4 .cse7 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse4 .cse7 .cse5) (and .cse0 .cse4 .cse3 .cse6))) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) Eliminated clause: (let ((.cse7 (= ~waterLevel~0 1)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6) (and .cse0 .cse4 .cse3 .cse7) (and .cse0 .cse4 .cse6 .cse7) (and .cse0 .cse1 .cse6 .cse2) (and .cse0 .cse4 .cse5 .cse3))) [2024-11-06 23:42:50,600 WARN L156 FloydHoareUtils]: Requires clause for timeShift contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= ~pumpRunning~0 0) (not (= |old(~waterLevel~0)| 1))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (<= 1 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse5 .cse2))) (= |old(~waterLevel~0)| ~waterLevel~0)) Eliminated clause: (let ((.cse0 (= ~pumpRunning~0 0))) (and (or (not (= ~waterLevel~0 1)) .cse0) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse4 .cse2 .cse3) (and .cse1 .cse5 .cse2))))) [2024-11-06 23:42:50,611 WARN L156 FloydHoareUtils]: Requires clause for processEnvironment__wrappee__highWaterSensor contained old-variable. Original clause: (and (= ~pumpRunning~0 0) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2)))) Eliminated clause: (and (= ~pumpRunning~0 0) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse0 .cse1 (= ~waterLevel~0 1)) (and (<= 1 ~methaneLevelCritical~0) .cse1 (<= 1 ~waterLevel~0))))) [2024-11-06 23:42:50,617 WARN L156 FloydHoareUtils]: Requires clause for waterRise contained old-variable. Original clause: (and (= |old(~waterLevel~0)| ~waterLevel~0) (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |old(~waterLevel~0)|)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse3 .cse4) (and .cse0 .cse5 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3) (and .cse5 .cse2 (<= 2 |old(~waterLevel~0)|))))) Eliminated clause: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 (<= 2 ~waterLevel~0) .cse5) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2))) [2024-11-06 23:42:50,621 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:42:50 BoogieIcfgContainer [2024-11-06 23:42:50,621 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-06 23:42:50,622 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-06 23:42:50,622 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-06 23:42:50,622 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-06 23:42:50,623 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:42:39" (3/4) ... [2024-11-06 23:42:50,627 INFO L142 WitnessPrinter]: Generating witness for correct program [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-06 23:42:50,640 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-11-06 23:42:50,641 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-06 23:42:50,645 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2024-11-06 23:42:50,645 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-06 23:42:50,645 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-06 23:42:50,645 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-06 23:42:50,646 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-06 23:42:50,748 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2024-11-06 23:42:50,748 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2024-11-06 23:42:50,748 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-06 23:42:50,749 INFO L158 Benchmark]: Toolchain (without parser) took 11986.87ms. Allocated memory was 100.7MB in the beginning and 192.9MB in the end (delta: 92.3MB). Free memory was 76.7MB in the beginning and 101.5MB in the end (delta: -24.9MB). Peak memory consumption was 67.4MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,749 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 83.9MB. Free memory is still 48.4MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-06 23:42:50,749 INFO L158 Benchmark]: CACSL2BoogieTranslator took 456.13ms. Allocated memory is still 100.7MB. Free memory was 76.5MB in the beginning and 57.7MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,749 INFO L158 Benchmark]: Boogie Procedure Inliner took 41.22ms. Allocated memory is still 100.7MB. Free memory was 57.7MB in the beginning and 55.7MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-06 23:42:50,749 INFO L158 Benchmark]: Boogie Preprocessor took 42.25ms. Allocated memory is still 100.7MB. Free memory was 55.7MB in the beginning and 53.9MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,749 INFO L158 Benchmark]: RCFGBuilder took 407.87ms. Allocated memory is still 100.7MB. Free memory was 53.7MB in the beginning and 75.0MB in the end (delta: -21.3MB). Peak memory consumption was 12.0MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,750 INFO L158 Benchmark]: TraceAbstraction took 10904.83ms. Allocated memory was 100.7MB in the beginning and 192.9MB in the end (delta: 92.3MB). Free memory was 74.1MB in the beginning and 108.0MB in the end (delta: -33.9MB). Peak memory consumption was 110.0MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,750 INFO L158 Benchmark]: Witness Printer took 126.29ms. Allocated memory is still 192.9MB. Free memory was 108.0MB in the beginning and 101.5MB in the end (delta: 6.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-06 23:42:50,751 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 83.9MB. Free memory is still 48.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 456.13ms. Allocated memory is still 100.7MB. Free memory was 76.5MB in the beginning and 57.7MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 41.22ms. Allocated memory is still 100.7MB. Free memory was 57.7MB in the beginning and 55.7MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 42.25ms. Allocated memory is still 100.7MB. Free memory was 55.7MB in the beginning and 53.9MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 407.87ms. Allocated memory is still 100.7MB. Free memory was 53.7MB in the beginning and 75.0MB in the end (delta: -21.3MB). Peak memory consumption was 12.0MB. Max. memory is 16.1GB. * TraceAbstraction took 10904.83ms. Allocated memory was 100.7MB in the beginning and 192.9MB in the end (delta: 92.3MB). Free memory was 74.1MB in the beginning and 108.0MB in the end (delta: -33.9MB). Peak memory consumption was 110.0MB. Max. memory is 16.1GB. * Witness Printer took 126.29ms. Allocated memory is still 192.9MB. Free memory was 108.0MB in the beginning and 101.5MB in the end (delta: 6.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 153]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] - GenericResultAtLocation [Line: 262]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] - GenericResultAtLocation [Line: 290]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] - GenericResultAtLocation [Line: 656]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] - GenericResultAtLocation [Line: 665]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] - GenericResultAtLocation [Line: 736]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] - GenericResultAtLocation [Line: 976]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1340 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1306 mSDsluCounter, 3939 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2650 mSDsCounter, 297 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1317 IncrementalHoareTripleChecker+Invalid, 1614 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 297 mSolverCounterUnsat, 1289 mSDtfsCounter, 1317 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 450 GetRequests, 354 SyntacticMatches, 2 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 164 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1227occurred in iteration=8, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 227 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 912 NumberOfCodeBlocks, 912 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 897 ConstructedInterpolants, 0 QuantifiedInterpolants, 1507 SizeOfPredicates, 2 NumberOfNonLiveVariables, 867 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 159/167 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 677]: Location Invariant Derived location invariant: 0 - ProcedureContractResult [Line: 851]: Procedure Contract for deactivatePump Derived contract for procedure deactivatePump. Requires: ((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (0 != systemActive)) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (1 <= waterLevel))) || (((1 <= methaneLevelCritical) && (2 <= waterLevel)) && (0 != systemActive))) || (((1 <= methaneLevelCritical) && (1 == systemActive)) && (1 <= waterLevel))) Ensures: (((pumpRunning == 0) && ((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (0 != systemActive)) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (1 <= waterLevel))) || (((1 <= methaneLevelCritical) && (2 <= waterLevel)) && (0 != systemActive))) || (((1 <= methaneLevelCritical) && (1 == systemActive)) && (1 <= waterLevel)))) && (((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 766]: Procedure Contract for processEnvironment__wrappee__base Derived contract for procedure processEnvironment__wrappee__base. Requires: (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (1 <= waterLevel))) Ensures: ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (1 <= waterLevel))) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 186]: Procedure Contract for changeMethaneLevel Derived contract for procedure changeMethaneLevel. Requires: (((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 <= waterLevel)) && (0 == systemActive)) || (((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (0 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (2 <= waterLevel)) && (0 == systemActive))) Ensures: ((((((((((((pumpRunning == 0) && (1 <= \old(methaneLevelCritical))) && (1 <= waterLevel)) && (0 == systemActive)) || ((((pumpRunning == 0) && (\old(methaneLevelCritical) == 0)) && (1 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (\old(methaneLevelCritical) == 0)) && (2 <= waterLevel)) && (0 == systemActive))) || ((((pumpRunning == 0) && (1 <= \old(methaneLevelCritical))) && (1 == systemActive)) && (1 <= waterLevel))) || (((\old(methaneLevelCritical) == 0) && (2 <= waterLevel)) && (1 == systemActive))) || ((((pumpRunning == 0) && (\old(methaneLevelCritical) == 0)) && (0 == systemActive)) && (waterLevel == 1))) && ((\old(methaneLevelCritical) != 0) || (0 < methaneLevelCritical))) && ((methaneLevelCritical == 0) || (\old(methaneLevelCritical) < 1))) && (((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (waterLevel == \old(waterLevel))) && (head == \old(head))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 198]: Procedure Contract for isMethaneLevelCritical Derived contract for procedure isMethaneLevelCritical. Requires: ((((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (0 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (0 == systemActive))) Ensures: ((((((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (0 == systemActive)) && (waterLevel == 1))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (0 == systemActive))) && (\result == methaneLevelCritical)) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 742]: Procedure Contract for timeShift Derived contract for procedure timeShift. Requires: (((waterLevel != 1) || (pumpRunning == 0)) && (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 <= waterLevel)) && (0 == systemActive)) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || (((1 <= methaneLevelCritical) && (1 == systemActive)) && (1 <= waterLevel)))) Ensures: ((((((((0 == systemActive) || ((pumpRunning == 0) && (1 == systemActive))) || (methaneLevelCritical < 1)) && ((((((1 <= methaneLevelCritical) && (\old(pumpRunning) == 0)) || (((methaneLevelCritical == 0) && (\old(pumpRunning) == 0)) && (0 == systemActive))) || (((1 <= methaneLevelCritical) && (1 == systemActive)) && (2 <= \old(waterLevel)))) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (2 <= \old(waterLevel)))) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && ((1 < waterLevel) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((pumpRunning == 0) || (0 != systemActive))) && ((\old(pumpRunning) != 0) || (\old(waterLevel) == waterLevel))) && ((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 52]: Procedure Contract for cleanup Derived contract for procedure cleanup. Requires: 0 Ensures: (0 && ((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 774]: Procedure Contract for processEnvironment__wrappee__highWaterSensor Derived contract for procedure processEnvironment__wrappee__highWaterSensor. Requires: ((pumpRunning == 0) && (((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (waterLevel == 1))) || (((1 <= methaneLevelCritical) && (1 == systemActive)) && (1 <= waterLevel)))) Ensures: (((((pumpRunning == 0) || (methaneLevelCritical < 1)) && ((waterLevel != 1) || (pumpRunning == 0))) && ((((((methaneLevelCritical == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (waterLevel == 1)) || ((((1 <= methaneLevelCritical) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= waterLevel))) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (systemActive == \old(systemActive)))) - ProcedureContractResult [Line: 174]: Procedure Contract for waterRise Derived contract for procedure waterRise. Requires: ((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 <= waterLevel)) && (0 == systemActive)) || (((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (1 <= waterLevel))) Ensures: (((((((\old(waterLevel) < 2) || (\old(waterLevel) == waterLevel)) && ((pumpRunning == 0) || (methaneLevelCritical < 1))) && (((2 <= waterLevel) && (1 == systemActive)) || (0 == systemActive))) && (((pumpRunning == 0) && (2 <= waterLevel)) || (0 != systemActive))) && (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 <= \old(waterLevel))) || ((methaneLevelCritical == 0) && (2 <= \old(waterLevel)))) || ((1 <= methaneLevelCritical) && (1 <= \old(waterLevel))))) && (((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methaneLevelCritical == \old(methaneLevelCritical))) && (head == \old(head))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive)))) RESULT: Ultimate proved your program to be correct! [2024-11-06 23:42:50,773 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE