./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:36:17,444 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:36:17,446 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:36:17,489 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:36:17,491 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:36:17,493 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:36:17,497 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:36:17,503 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:36:17,508 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:36:17,510 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:36:17,512 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:36:17,514 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:36:17,516 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:36:17,521 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:36:17,523 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:36:17,525 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:36:17,529 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:36:17,537 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:36:17,540 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:36:17,542 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:36:17,551 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:36:17,553 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:36:17,555 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:36:17,557 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:36:17,563 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:36:17,569 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:36:17,570 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:36:17,571 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:36:17,573 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:36:17,575 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:36:17,576 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:36:17,578 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:36:17,579 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:36:17,582 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:36:17,584 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:36:17,585 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:36:17,586 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:36:17,586 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:36:17,587 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:36:17,588 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:36:17,589 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:36:17,591 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:36:17,647 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:36:17,650 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:36:17,651 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:36:17,652 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:36:17,653 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:36:17,653 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:36:17,653 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:36:17,654 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:36:17,654 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:36:17,654 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:36:17,656 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:36:17,656 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:36:17,656 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:36:17,657 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:36:17,657 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:36:17,657 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:36:17,658 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:36:17,658 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:36:17,659 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:36:17,659 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:36:17,659 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:36:17,661 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:36:17,662 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:36:17,662 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:36:17,662 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:36:17,663 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:36:17,663 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:36:17,663 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:36:17,663 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:36:17,664 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:36:17,664 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:36:17,664 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:36:17,665 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:36:17,665 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:36:17,665 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:36:17,666 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:36:17,666 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:36:17,666 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:36:17,666 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:36:17,667 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:36:17,667 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:36:17,667 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 [2022-11-03 02:36:17,960 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:36:17,996 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:36:18,000 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:36:18,001 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:36:18,002 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:36:18,004 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2022-11-03 02:36:18,133 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/data/f23be92e6/213de7ea464b4a3793159354889df9d9/FLAGb9137c6bb [2022-11-03 02:36:18,870 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:36:18,874 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2022-11-03 02:36:18,896 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/data/f23be92e6/213de7ea464b4a3793159354889df9d9/FLAGb9137c6bb [2022-11-03 02:36:19,116 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/data/f23be92e6/213de7ea464b4a3793159354889df9d9 [2022-11-03 02:36:19,120 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:36:19,122 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:36:19,124 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:36:19,124 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:36:19,129 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:36:19,130 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,131 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1306cf5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19, skipping insertion in model container [2022-11-03 02:36:19,132 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,146 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:36:19,211 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:36:19,613 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2022-11-03 02:36:19,704 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:36:19,727 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:36:19,822 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2022-11-03 02:36:19,867 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:36:19,888 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:36:19,889 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19 WrapperNode [2022-11-03 02:36:19,889 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:36:19,891 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:36:19,891 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:36:19,892 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:36:19,902 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,919 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,959 INFO L138 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 260 [2022-11-03 02:36:19,960 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:36:19,961 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:36:19,961 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:36:19,961 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:36:19,974 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,974 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,978 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,978 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,986 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,992 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,994 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,996 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:19,999 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:36:20,000 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:36:20,001 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:36:20,001 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:36:20,002 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (1/1) ... [2022-11-03 02:36:20,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:36:20,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:20,041 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:36:20,098 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:36:20,131 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:36:20,131 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:36:20,131 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:36:20,131 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:36:20,132 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:36:20,132 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:36:20,132 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:36:20,132 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:36:20,132 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:36:20,133 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:36:20,133 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:36:20,133 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:36:20,133 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:36:20,133 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:36:20,134 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:36:20,134 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:36:20,273 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:36:20,276 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:36:20,816 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:36:20,936 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:36:20,937 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:36:20,940 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:36:20 BoogieIcfgContainer [2022-11-03 02:36:20,941 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:36:20,944 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:36:20,944 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:36:20,949 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:36:20,949 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:36:19" (1/3) ... [2022-11-03 02:36:20,950 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27d09576 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:36:20, skipping insertion in model container [2022-11-03 02:36:20,951 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:36:19" (2/3) ... [2022-11-03 02:36:20,951 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27d09576 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:36:20, skipping insertion in model container [2022-11-03 02:36:20,959 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:36:20" (3/3) ... [2022-11-03 02:36:20,961 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product50.cil.c [2022-11-03 02:36:20,985 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:36:20,986 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:36:21,091 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:36:21,109 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2da377a4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:36:21,117 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:36:21,123 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 02:36:21,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 02:36:21,135 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:21,136 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:21,137 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:21,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:21,146 INFO L85 PathProgramCache]: Analyzing trace with hash -459572560, now seen corresponding path program 1 times [2022-11-03 02:36:21,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:21,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667806018] [2022-11-03 02:36:21,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:21,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:21,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:21,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:21,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:21,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667806018] [2022-11-03 02:36:21,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [667806018] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:21,517 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:21,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:36:21,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954096395] [2022-11-03 02:36:21,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:21,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:36:21,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:21,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:36:21,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:36:21,580 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:21,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:21,727 INFO L93 Difference]: Finished difference Result 100 states and 137 transitions. [2022-11-03 02:36:21,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:36:21,733 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 02:36:21,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:21,752 INFO L225 Difference]: With dead ends: 100 [2022-11-03 02:36:21,752 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:36:21,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:36:21,764 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:21,768 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:21,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:36:21,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 02:36:21,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3333333333333333) internal successors, (40), 37 states have internal predecessors, (40), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:36:21,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 59 transitions. [2022-11-03 02:36:21,824 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 59 transitions. Word has length 12 [2022-11-03 02:36:21,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:21,824 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 59 transitions. [2022-11-03 02:36:21,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:21,825 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 59 transitions. [2022-11-03 02:36:21,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:36:21,828 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:21,828 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:21,828 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:36:21,829 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:21,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:21,830 INFO L85 PathProgramCache]: Analyzing trace with hash -1921021002, now seen corresponding path program 1 times [2022-11-03 02:36:21,830 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:21,830 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810941133] [2022-11-03 02:36:21,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:21,831 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:21,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:21,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:21,959 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:21,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810941133] [2022-11-03 02:36:21,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810941133] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:21,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:21,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:36:21,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689343924] [2022-11-03 02:36:21,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:21,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:36:21,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:21,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:36:21,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:36:21,964 INFO L87 Difference]: Start difference. First operand 46 states and 59 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:22,049 INFO L93 Difference]: Finished difference Result 69 states and 89 transitions. [2022-11-03 02:36:22,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:36:22,050 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:36:22,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:22,051 INFO L225 Difference]: With dead ends: 69 [2022-11-03 02:36:22,052 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 02:36:22,053 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:36:22,054 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:22,055 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:22,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 02:36:22,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 02:36:22,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.36) internal successors, (34), 32 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 02:36:22,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 48 transitions. [2022-11-03 02:36:22,065 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 48 transitions. Word has length 13 [2022-11-03 02:36:22,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:22,065 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 48 transitions. [2022-11-03 02:36:22,065 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,066 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 48 transitions. [2022-11-03 02:36:22,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:36:22,067 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:22,067 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:22,067 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:36:22,067 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:22,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:22,068 INFO L85 PathProgramCache]: Analyzing trace with hash 289867134, now seen corresponding path program 1 times [2022-11-03 02:36:22,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:22,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [894545944] [2022-11-03 02:36:22,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:22,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:22,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:22,363 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:22,363 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:22,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [894545944] [2022-11-03 02:36:22,364 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [894545944] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:22,366 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:22,366 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:36:22,366 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959553002] [2022-11-03 02:36:22,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:22,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:36:22,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:22,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:36:22,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:36:22,369 INFO L87 Difference]: Start difference. First operand 38 states and 48 transitions. Second operand has 4 states, 4 states have (on average 3.5) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:22,511 INFO L93 Difference]: Finished difference Result 74 states and 95 transitions. [2022-11-03 02:36:22,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:36:22,512 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.5) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:36:22,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:22,513 INFO L225 Difference]: With dead ends: 74 [2022-11-03 02:36:22,513 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 02:36:22,514 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:36:22,516 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 38 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:22,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 41 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:22,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 02:36:22,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 02:36:22,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 32 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 02:36:22,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2022-11-03 02:36:22,526 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 15 [2022-11-03 02:36:22,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:22,527 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2022-11-03 02:36:22,527 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.5) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,528 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2022-11-03 02:36:22,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:36:22,529 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:22,529 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:22,529 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:36:22,530 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:22,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:22,530 INFO L85 PathProgramCache]: Analyzing trace with hash 1681602929, now seen corresponding path program 1 times [2022-11-03 02:36:22,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:22,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574951130] [2022-11-03 02:36:22,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:22,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:22,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:22,711 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:22,711 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:22,711 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574951130] [2022-11-03 02:36:22,711 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574951130] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:22,712 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:22,712 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:36:22,712 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240122929] [2022-11-03 02:36:22,712 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:22,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:36:22,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:22,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:36:22,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:36:22,714 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:22,788 INFO L93 Difference]: Finished difference Result 104 states and 132 transitions. [2022-11-03 02:36:22,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:36:22,789 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-03 02:36:22,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:22,791 INFO L225 Difference]: With dead ends: 104 [2022-11-03 02:36:22,791 INFO L226 Difference]: Without dead ends: 68 [2022-11-03 02:36:22,792 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:36:22,793 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 29 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:22,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 72 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:22,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-03 02:36:22,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 66. [2022-11-03 02:36:22,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 45 states have (on average 1.2666666666666666) internal successors, (57), 52 states have internal predecessors, (57), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2022-11-03 02:36:22,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 81 transitions. [2022-11-03 02:36:22,818 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 81 transitions. Word has length 18 [2022-11-03 02:36:22,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:22,818 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 81 transitions. [2022-11-03 02:36:22,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:22,819 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 81 transitions. [2022-11-03 02:36:22,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:36:22,820 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:22,820 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:22,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:36:22,821 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:22,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:22,821 INFO L85 PathProgramCache]: Analyzing trace with hash 1306008632, now seen corresponding path program 1 times [2022-11-03 02:36:22,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:22,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789302831] [2022-11-03 02:36:22,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:22,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:22,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:23,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:23,124 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:23,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1789302831] [2022-11-03 02:36:23,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1789302831] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:23,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:23,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:36:23,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467648266] [2022-11-03 02:36:23,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:23,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:36:23,127 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:23,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:36:23,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:36:23,128 INFO L87 Difference]: Start difference. First operand 66 states and 81 transitions. Second operand has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:36:23,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:23,325 INFO L93 Difference]: Finished difference Result 189 states and 233 transitions. [2022-11-03 02:36:23,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:36:23,326 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-03 02:36:23,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:23,333 INFO L225 Difference]: With dead ends: 189 [2022-11-03 02:36:23,333 INFO L226 Difference]: Without dead ends: 125 [2022-11-03 02:36:23,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:36:23,343 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 57 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:23,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 126 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:23,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-11-03 02:36:23,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 100. [2022-11-03 02:36:23,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 69 states have (on average 1.2173913043478262) internal successors, (84), 78 states have internal predecessors, (84), 14 states have call successors, (14), 14 states have call predecessors, (14), 16 states have return successors, (20), 15 states have call predecessors, (20), 14 states have call successors, (20) [2022-11-03 02:36:23,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 118 transitions. [2022-11-03 02:36:23,393 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 118 transitions. Word has length 23 [2022-11-03 02:36:23,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:23,393 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 118 transitions. [2022-11-03 02:36:23,394 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:36:23,394 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 118 transitions. [2022-11-03 02:36:23,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-03 02:36:23,395 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:23,396 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:23,396 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:36:23,396 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:23,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:23,397 INFO L85 PathProgramCache]: Analyzing trace with hash -456004503, now seen corresponding path program 1 times [2022-11-03 02:36:23,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:23,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495821650] [2022-11-03 02:36:23,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:23,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:23,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:23,770 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:23,770 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:23,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495821650] [2022-11-03 02:36:23,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495821650] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:23,772 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:23,772 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 02:36:23,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1798366496] [2022-11-03 02:36:23,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:23,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:36:23,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:23,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:36:23,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:36:23,776 INFO L87 Difference]: Start difference. First operand 100 states and 118 transitions. Second operand has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:36:24,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:24,396 INFO L93 Difference]: Finished difference Result 251 states and 312 transitions. [2022-11-03 02:36:24,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-03 02:36:24,397 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2022-11-03 02:36:24,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:24,400 INFO L225 Difference]: With dead ends: 251 [2022-11-03 02:36:24,400 INFO L226 Difference]: Without dead ends: 187 [2022-11-03 02:36:24,401 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:36:24,403 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 130 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 422 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:24,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 246 Invalid, 422 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:36:24,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-11-03 02:36:24,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 168. [2022-11-03 02:36:24,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 116 states have (on average 1.2241379310344827) internal successors, (142), 132 states have internal predecessors, (142), 24 states have call successors, (24), 22 states have call predecessors, (24), 27 states have return successors, (35), 26 states have call predecessors, (35), 24 states have call successors, (35) [2022-11-03 02:36:24,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 201 transitions. [2022-11-03 02:36:24,449 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 201 transitions. Word has length 26 [2022-11-03 02:36:24,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:24,449 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 201 transitions. [2022-11-03 02:36:24,450 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:36:24,450 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 201 transitions. [2022-11-03 02:36:24,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-03 02:36:24,452 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:24,452 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:24,452 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:36:24,453 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:24,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:24,453 INFO L85 PathProgramCache]: Analyzing trace with hash 2006836163, now seen corresponding path program 1 times [2022-11-03 02:36:24,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:24,454 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [578331235] [2022-11-03 02:36:24,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:24,454 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:24,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:24,570 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:36:24,570 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:24,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [578331235] [2022-11-03 02:36:24,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [578331235] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:24,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:36:24,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:36:24,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [697419246] [2022-11-03 02:36:24,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:24,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:36:24,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:24,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:36:24,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:36:24,573 INFO L87 Difference]: Start difference. First operand 168 states and 201 transitions. Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:36:24,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:24,676 INFO L93 Difference]: Finished difference Result 178 states and 212 transitions. [2022-11-03 02:36:24,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:36:24,677 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 39 [2022-11-03 02:36:24,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:24,679 INFO L225 Difference]: With dead ends: 178 [2022-11-03 02:36:24,679 INFO L226 Difference]: Without dead ends: 176 [2022-11-03 02:36:24,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:36:24,681 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 38 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:24,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 115 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:24,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2022-11-03 02:36:24,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 168. [2022-11-03 02:36:24,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 116 states have (on average 1.206896551724138) internal successors, (140), 132 states have internal predecessors, (140), 24 states have call successors, (24), 22 states have call predecessors, (24), 27 states have return successors, (35), 26 states have call predecessors, (35), 24 states have call successors, (35) [2022-11-03 02:36:24,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 199 transitions. [2022-11-03 02:36:24,739 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 199 transitions. Word has length 39 [2022-11-03 02:36:24,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:24,739 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 199 transitions. [2022-11-03 02:36:24,740 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:36:24,740 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 199 transitions. [2022-11-03 02:36:24,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-03 02:36:24,743 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:24,743 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:24,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:36:24,744 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:24,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:24,744 INFO L85 PathProgramCache]: Analyzing trace with hash -1417865946, now seen corresponding path program 1 times [2022-11-03 02:36:24,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:24,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417362725] [2022-11-03 02:36:24,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:24,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:24,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:24,885 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:36:24,886 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:24,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417362725] [2022-11-03 02:36:24,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417362725] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:24,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [750212049] [2022-11-03 02:36:24,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:24,887 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:24,887 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:24,890 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:24,924 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:36:25,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:25,035 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:36:25,042 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:25,124 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:25,124 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:36:25,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [750212049] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:25,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:36:25,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 02:36:25,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248980246] [2022-11-03 02:36:25,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:25,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:36:25,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:25,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:36:25,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:36:25,127 INFO L87 Difference]: Start difference. First operand 168 states and 199 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:36:25,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:25,207 INFO L93 Difference]: Finished difference Result 244 states and 296 transitions. [2022-11-03 02:36:25,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:36:25,208 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-11-03 02:36:25,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:25,210 INFO L225 Difference]: With dead ends: 244 [2022-11-03 02:36:25,210 INFO L226 Difference]: Without dead ends: 167 [2022-11-03 02:36:25,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:36:25,212 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 21 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:25,213 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 74 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:36:25,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-03 02:36:25,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 167. [2022-11-03 02:36:25,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 116 states have (on average 1.1810344827586208) internal successors, (137), 131 states have internal predecessors, (137), 23 states have call successors, (23), 22 states have call predecessors, (23), 27 states have return successors, (31), 25 states have call predecessors, (31), 23 states have call successors, (31) [2022-11-03 02:36:25,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 191 transitions. [2022-11-03 02:36:25,243 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 191 transitions. Word has length 44 [2022-11-03 02:36:25,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:25,244 INFO L495 AbstractCegarLoop]: Abstraction has 167 states and 191 transitions. [2022-11-03 02:36:25,244 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:36:25,245 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 191 transitions. [2022-11-03 02:36:25,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:36:25,246 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:25,247 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:25,298 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:25,474 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-03 02:36:25,475 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:25,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:25,476 INFO L85 PathProgramCache]: Analyzing trace with hash 86312830, now seen corresponding path program 1 times [2022-11-03 02:36:25,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:25,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178944753] [2022-11-03 02:36:25,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:25,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:25,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:25,942 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:36:25,942 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:25,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178944753] [2022-11-03 02:36:25,943 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178944753] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:25,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1253473424] [2022-11-03 02:36:25,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:25,943 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:25,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:25,945 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:25,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:36:26,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:26,116 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-03 02:36:26,119 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:26,496 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:26,496 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:36:26,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1253473424] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:26,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:36:26,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 13 [2022-11-03 02:36:26,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704862196] [2022-11-03 02:36:26,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:26,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:36:26,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:26,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:36:26,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2022-11-03 02:36:26,499 INFO L87 Difference]: Start difference. First operand 167 states and 191 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 02:36:27,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:27,033 INFO L93 Difference]: Finished difference Result 331 states and 388 transitions. [2022-11-03 02:36:27,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:36:27,034 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-11-03 02:36:27,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:27,036 INFO L225 Difference]: With dead ends: 331 [2022-11-03 02:36:27,036 INFO L226 Difference]: Without dead ends: 223 [2022-11-03 02:36:27,037 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=77, Invalid=229, Unknown=0, NotChecked=0, Total=306 [2022-11-03 02:36:27,038 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 89 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 216 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 216 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:27,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 149 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 216 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:36:27,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-11-03 02:36:27,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 175. [2022-11-03 02:36:27,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 123 states have (on average 1.1626016260162602) internal successors, (143), 134 states have internal predecessors, (143), 25 states have call successors, (25), 25 states have call predecessors, (25), 26 states have return successors, (30), 24 states have call predecessors, (30), 25 states have call successors, (30) [2022-11-03 02:36:27,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 198 transitions. [2022-11-03 02:36:27,078 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 198 transitions. Word has length 47 [2022-11-03 02:36:27,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:27,079 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 198 transitions. [2022-11-03 02:36:27,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 02:36:27,080 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 198 transitions. [2022-11-03 02:36:27,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-03 02:36:27,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:27,082 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:27,126 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:27,300 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:27,301 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:27,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:27,301 INFO L85 PathProgramCache]: Analyzing trace with hash 216896687, now seen corresponding path program 1 times [2022-11-03 02:36:27,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:27,302 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645020954] [2022-11-03 02:36:27,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:27,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:27,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:28,249 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:36:28,249 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:28,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645020954] [2022-11-03 02:36:28,250 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645020954] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:28,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1023126914] [2022-11-03 02:36:28,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:28,250 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:28,251 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:28,252 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:28,282 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:36:28,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:28,407 INFO L263 TraceCheckSpWp]: Trace formula consists of 398 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-03 02:36:28,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:28,844 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:36:28,844 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:29,539 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:36:29,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1023126914] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:29,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [893002519] [2022-11-03 02:36:29,564 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-03 02:36:29,564 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:29,568 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:29,575 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:29,576 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:42,269 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-03 02:36:42,276 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-03 02:36:42,450 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-03 02:36:42,715 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-03 02:36:42,718 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:48,503 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4801#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:36:48,503 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:48,503 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:48,503 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 11, 13] total 35 [2022-11-03 02:36:48,504 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643544580] [2022-11-03 02:36:48,504 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:48,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-03 02:36:48,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:48,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-03 02:36:48,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=359, Invalid=3063, Unknown=0, NotChecked=0, Total=3422 [2022-11-03 02:36:48,510 INFO L87 Difference]: Start difference. First operand 175 states and 198 transitions. Second operand has 35 states, 32 states have (on average 3.0625) internal successors, (98), 32 states have internal predecessors, (98), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) [2022-11-03 02:36:55,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:55,692 INFO L93 Difference]: Finished difference Result 650 states and 780 transitions. [2022-11-03 02:36:55,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 87 states. [2022-11-03 02:36:55,694 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 32 states have (on average 3.0625) internal successors, (98), 32 states have internal predecessors, (98), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) Word has length 50 [2022-11-03 02:36:55,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:55,698 INFO L225 Difference]: With dead ends: 650 [2022-11-03 02:36:55,698 INFO L226 Difference]: Without dead ends: 553 [2022-11-03 02:36:55,713 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 133 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6282 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=1962, Invalid=16128, Unknown=0, NotChecked=0, Total=18090 [2022-11-03 02:36:55,714 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 1357 mSDsluCounter, 924 mSDsCounter, 0 mSdLazyCounter, 2421 mSolverCounterSat, 812 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1364 SdHoareTripleChecker+Valid, 771 SdHoareTripleChecker+Invalid, 3233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 812 IncrementalHoareTripleChecker+Valid, 2421 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:55,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1364 Valid, 771 Invalid, 3233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [812 Valid, 2421 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 02:36:55,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 553 states. [2022-11-03 02:36:55,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 553 to 420. [2022-11-03 02:36:55,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 420 states, 297 states have (on average 1.1582491582491583) internal successors, (344), 323 states have internal predecessors, (344), 59 states have call successors, (59), 58 states have call predecessors, (59), 63 states have return successors, (81), 58 states have call predecessors, (81), 59 states have call successors, (81) [2022-11-03 02:36:55,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 420 states to 420 states and 484 transitions. [2022-11-03 02:36:55,841 INFO L78 Accepts]: Start accepts. Automaton has 420 states and 484 transitions. Word has length 50 [2022-11-03 02:36:55,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:55,844 INFO L495 AbstractCegarLoop]: Abstraction has 420 states and 484 transitions. [2022-11-03 02:36:55,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 32 states have (on average 3.0625) internal successors, (98), 32 states have internal predecessors, (98), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) [2022-11-03 02:36:55,845 INFO L276 IsEmpty]: Start isEmpty. Operand 420 states and 484 transitions. [2022-11-03 02:36:55,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-03 02:36:55,847 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:55,847 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:55,897 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:56,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 02:36:56,067 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:56,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:56,068 INFO L85 PathProgramCache]: Analyzing trace with hash 734415605, now seen corresponding path program 2 times [2022-11-03 02:36:56,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:56,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753858811] [2022-11-03 02:36:56,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:56,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:56,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:57,236 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 28 proven. 18 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:36:57,237 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:57,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753858811] [2022-11-03 02:36:57,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753858811] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:57,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1433796213] [2022-11-03 02:36:57,237 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:36:57,238 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:57,238 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:57,243 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:57,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:36:57,381 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:36:57,382 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:36:57,384 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-03 02:36:57,387 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:57,527 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:36:57,527 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:36:57,527 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1433796213] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:36:57,528 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:36:57,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 19 [2022-11-03 02:36:57,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1509987379] [2022-11-03 02:36:57,528 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:36:57,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:36:57,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:57,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:36:57,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=295, Unknown=0, NotChecked=0, Total=342 [2022-11-03 02:36:57,531 INFO L87 Difference]: Start difference. First operand 420 states and 484 transitions. Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-03 02:36:57,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:57,861 INFO L93 Difference]: Finished difference Result 900 states and 1048 transitions. [2022-11-03 02:36:57,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 02:36:57,861 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 74 [2022-11-03 02:36:57,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:57,870 INFO L225 Difference]: With dead ends: 900 [2022-11-03 02:36:57,871 INFO L226 Difference]: Without dead ends: 487 [2022-11-03 02:36:57,873 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 112 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=67, Invalid=439, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:36:57,874 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 54 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:57,874 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 187 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:36:57,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2022-11-03 02:36:57,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 472. [2022-11-03 02:36:57,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 472 states, 338 states have (on average 1.1568047337278107) internal successors, (391), 366 states have internal predecessors, (391), 65 states have call successors, (65), 64 states have call predecessors, (65), 68 states have return successors, (87), 64 states have call predecessors, (87), 65 states have call successors, (87) [2022-11-03 02:36:57,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 472 states to 472 states and 543 transitions. [2022-11-03 02:36:57,973 INFO L78 Accepts]: Start accepts. Automaton has 472 states and 543 transitions. Word has length 74 [2022-11-03 02:36:57,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:57,973 INFO L495 AbstractCegarLoop]: Abstraction has 472 states and 543 transitions. [2022-11-03 02:36:57,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-03 02:36:57,974 INFO L276 IsEmpty]: Start isEmpty. Operand 472 states and 543 transitions. [2022-11-03 02:36:57,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-11-03 02:36:57,976 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:57,977 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:58,026 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:58,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-03 02:36:58,196 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:36:58,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:58,197 INFO L85 PathProgramCache]: Analyzing trace with hash 1374724656, now seen corresponding path program 1 times [2022-11-03 02:36:58,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:58,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1578924290] [2022-11-03 02:36:58,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:58,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:58,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:59,757 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 41 proven. 49 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:36:59,758 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:59,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1578924290] [2022-11-03 02:36:59,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1578924290] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:59,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1915598072] [2022-11-03 02:36:59,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:59,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:59,759 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:59,763 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:59,768 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:36:59,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:59,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 532 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 02:36:59,929 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:37:00,607 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 51 proven. 36 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:37:00,608 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:37:01,703 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 62 proven. 21 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:37:01,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1915598072] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:37:01,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [629240266] [2022-11-03 02:37:01,712 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-03 02:37:01,712 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:37:01,713 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:37:01,713 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:37:01,713 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:37:08,385 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-03 02:37:08,390 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-03 02:37:08,571 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-03 02:37:08,848 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-03 02:37:08,851 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:37:14,340 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9767#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:37:14,340 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:37:14,341 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:37:14,341 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 13, 13] total 40 [2022-11-03 02:37:14,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [113155668] [2022-11-03 02:37:14,341 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:37:14,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-03 02:37:14,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:37:14,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-03 02:37:14,345 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=474, Invalid=3558, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 02:37:14,345 INFO L87 Difference]: Start difference. First operand 472 states and 543 transitions. Second operand has 40 states, 38 states have (on average 3.9210526315789473) internal successors, (149), 38 states have internal predecessors, (149), 16 states have call successors, (21), 8 states have call predecessors, (21), 15 states have return successors, (22), 15 states have call predecessors, (22), 16 states have call successors, (22) [2022-11-03 02:37:15,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:37:15,874 INFO L93 Difference]: Finished difference Result 563 states and 650 transitions. [2022-11-03 02:37:15,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-03 02:37:15,875 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 38 states have (on average 3.9210526315789473) internal successors, (149), 38 states have internal predecessors, (149), 16 states have call successors, (21), 8 states have call predecessors, (21), 15 states have return successors, (22), 15 states have call predecessors, (22), 16 states have call successors, (22) Word has length 87 [2022-11-03 02:37:15,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:37:15,876 INFO L225 Difference]: With dead ends: 563 [2022-11-03 02:37:15,876 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:37:15,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 300 GetRequests, 224 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2232 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=813, Invalid=5193, Unknown=0, NotChecked=0, Total=6006 [2022-11-03 02:37:15,880 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 417 mSDsluCounter, 366 mSDsCounter, 0 mSdLazyCounter, 683 mSolverCounterSat, 288 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 420 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 971 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 288 IncrementalHoareTripleChecker+Valid, 683 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:37:15,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [420 Valid, 300 Invalid, 971 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [288 Valid, 683 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-03 02:37:15,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:37:15,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:37:15,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:15,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:37:15,883 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2022-11-03 02:37:15,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:37:15,883 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:37:15,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 38 states have (on average 3.9210526315789473) internal successors, (149), 38 states have internal predecessors, (149), 16 states have call successors, (21), 8 states have call predecessors, (21), 15 states have return successors, (22), 15 states have call predecessors, (22), 16 states have call successors, (22) [2022-11-03 02:37:15,884 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:37:15,884 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:37:15,887 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:37:15,918 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:37:16,094 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-03 02:37:16,097 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:37:19,332 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-11-03 02:37:19,332 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-11-03 02:37:19,333 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 624 635) the Hoare annotation is: true [2022-11-03 02:37:19,333 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 624 635) no Hoare annotation was computed. [2022-11-03 02:37:19,333 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2) (or (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2))) [2022-11-03 02:37:19,334 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse1 .cse3 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2) (or (not (= |old(~pumpRunning~0)| 1)) .cse3 .cse2))) [2022-11-03 02:37:19,334 INFO L895 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse1) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or .cse4 .cse2 .cse3 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse4 (not (= |old(~waterLevel~0)| 1)) (and .cse0 .cse1) .cse3))) [2022-11-03 02:37:19,334 INFO L895 garLoopResultBuilder]: At program point L718-1(lines 718 724) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse1) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or .cse4 .cse2 .cse3 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse4 (not (= |old(~waterLevel~0)| 1)) (and .cse0 .cse1) .cse3))) [2022-11-03 02:37:19,335 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2) (or (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2))) [2022-11-03 02:37:19,335 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-11-03 02:37:19,335 INFO L895 garLoopResultBuilder]: At program point L773(lines 773 781) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (and (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2022-11-03 02:37:19,336 INFO L895 garLoopResultBuilder]: At program point L769(lines 769 786) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)))) (.cse2 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or (and .cse3 .cse0) .cse4 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse4 .cse1 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2))) [2022-11-03 02:37:19,336 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or .cse3 (and .cse4 .cse2) .cse0 .cse1) (or .cse3 (not (= |old(~waterLevel~0)| 1)) (and .cse4 (= ~waterLevel~0 1)) .cse1))) [2022-11-03 02:37:19,336 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-11-03 02:37:19,337 INFO L895 garLoopResultBuilder]: At program point L427(lines 427 440) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse3 .cse4 .cse5)) (or (and .cse3 .cse4 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse5) (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2))) [2022-11-03 02:37:19,337 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-11-03 02:37:19,337 INFO L895 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not .cse5)) (.cse6 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 .cse3 .cse4) .cse5) (or .cse0 .cse6 .cse5 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or (and .cse1 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 1)) .cse6 .cse5)))) [2022-11-03 02:37:19,337 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 553) no Hoare annotation was computed. [2022-11-03 02:37:19,338 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 447 476) no Hoare annotation was computed. [2022-11-03 02:37:19,338 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 447 476) the Hoare annotation is: true [2022-11-03 02:37:19,338 INFO L902 garLoopResultBuilder]: At program point L472(lines 447 476) the Hoare annotation is: true [2022-11-03 02:37:19,338 INFO L899 garLoopResultBuilder]: For program point L468(line 468) no Hoare annotation was computed. [2022-11-03 02:37:19,338 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 465) no Hoare annotation was computed. [2022-11-03 02:37:19,339 INFO L902 garLoopResultBuilder]: At program point L461-1(lines 461 465) the Hoare annotation is: true [2022-11-03 02:37:19,339 INFO L902 garLoopResultBuilder]: At program point L457-2(lines 457 471) the Hoare annotation is: true [2022-11-03 02:37:19,339 INFO L902 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: true [2022-11-03 02:37:19,339 INFO L899 garLoopResultBuilder]: For program point L453-1(line 453) no Hoare annotation was computed. [2022-11-03 02:37:19,339 INFO L895 garLoopResultBuilder]: At program point L535(lines 535 542) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-03 02:37:19,340 INFO L902 garLoopResultBuilder]: At program point L535-2(lines 535 542) the Hoare annotation is: true [2022-11-03 02:37:19,340 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:37:19,340 INFO L895 garLoopResultBuilder]: At program point L957-2(lines 949 962) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,340 INFO L899 garLoopResultBuilder]: For program point L920(lines 919 966) no Hoare annotation was computed. [2022-11-03 02:37:19,341 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,341 INFO L902 garLoopResultBuilder]: At program point L970(lines 909 974) the Hoare annotation is: true [2022-11-03 02:37:19,341 INFO L899 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2022-11-03 02:37:19,341 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:37:19,341 INFO L899 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2022-11-03 02:37:19,342 INFO L895 garLoopResultBuilder]: At program point L967(lines 918 968) the Hoare annotation is: false [2022-11-03 02:37:19,342 INFO L899 garLoopResultBuilder]: For program point L939(lines 939 945) no Hoare annotation was computed. [2022-11-03 02:37:19,342 INFO L895 garLoopResultBuilder]: At program point L939-1(lines 939 945) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,342 INFO L895 garLoopResultBuilder]: At program point L964(lines 919 966) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,342 INFO L895 garLoopResultBuilder]: At program point L931(line 931) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,343 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2))) [2022-11-03 02:37:19,343 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-03 02:37:19,343 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-11-03 02:37:19,343 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-11-03 02:37:19,344 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) .cse1))) [2022-11-03 02:37:19,344 INFO L895 garLoopResultBuilder]: At program point L747(lines 747 755) the Hoare annotation is: (let ((.cse1 (< ~waterLevel~0 2))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0))) (or (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) .cse1) (and (not .cse1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1))))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~waterLevel~0 2)) .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse3)))) [2022-11-03 02:37:19,344 INFO L895 garLoopResultBuilder]: At program point L743(lines 743 760) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2))) [2022-11-03 02:37:19,344 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 612 623) no Hoare annotation was computed. [2022-11-03 02:37:19,345 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 612 623) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (not (= ~pumpRunning~0 1)) (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 (not (<= |old(~waterLevel~0)| 2))) (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2022-11-03 02:37:19,349 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:37:19,351 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:37:19,385 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:37:19 BoogieIcfgContainer [2022-11-03 02:37:19,385 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:37:19,386 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:37:19,386 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:37:19,387 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:37:19,387 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:36:20" (3/4) ... [2022-11-03 02:37:19,391 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:37:19,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:37:19,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:37:19,398 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:37:19,398 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:37:19,398 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:37:19,399 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:37:19,407 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 76 nodes and edges [2022-11-03 02:37:19,408 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-03 02:37:19,409 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 02:37:19,409 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:37:19,410 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:37:19,410 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:37:19,411 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:37:19,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-03 02:37:19,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-03 02:37:19,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((pumpRunning == 0 || !(0 < waterLevel)) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 || !(0 < waterLevel)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-11-03 02:37:19,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-03 02:37:19,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) [2022-11-03 02:37:19,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1))) && ((((((tmp == 1 && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:37:19,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && (((((((tmp == 1 && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:37:19,448 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:37:19,448 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((1 <= tmp && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 02:37:19,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || waterLevel < 2) || ((pumpRunning == 0 || !(0 < waterLevel)) && ((tmp == 0 && waterLevel < 2) || (!(waterLevel < 2) && tmp == 1)))) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 || !(0 < waterLevel)) && ((tmp == 0 && waterLevel < 2) || (!(waterLevel < 2) && tmp == 1)))) || 0 == systemActive) [2022-11-03 02:37:19,501 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:37:19,501 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:37:19,502 INFO L158 Benchmark]: Toolchain (without parser) took 60380.77ms. Allocated memory was 94.4MB in the beginning and 570.4MB in the end (delta: 476.1MB). Free memory was 59.7MB in the beginning and 291.2MB in the end (delta: -231.5MB). Peak memory consumption was 243.9MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,503 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 94.4MB. Free memory is still 48.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:37:19,503 INFO L158 Benchmark]: CACSL2BoogieTranslator took 766.15ms. Allocated memory was 94.4MB in the beginning and 130.0MB in the end (delta: 35.7MB). Free memory was 59.4MB in the beginning and 96.6MB in the end (delta: -37.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,504 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.01ms. Allocated memory is still 130.0MB. Free memory was 96.6MB in the beginning and 94.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,505 INFO L158 Benchmark]: Boogie Preprocessor took 38.66ms. Allocated memory is still 130.0MB. Free memory was 94.5MB in the beginning and 93.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,505 INFO L158 Benchmark]: RCFGBuilder took 940.58ms. Allocated memory is still 130.0MB. Free memory was 92.4MB in the beginning and 65.2MB in the end (delta: 27.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,506 INFO L158 Benchmark]: TraceAbstraction took 58441.77ms. Allocated memory was 130.0MB in the beginning and 570.4MB in the end (delta: 440.4MB). Free memory was 65.0MB in the beginning and 296.5MB in the end (delta: -231.4MB). Peak memory consumption was 311.7MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,507 INFO L158 Benchmark]: Witness Printer took 115.50ms. Allocated memory is still 570.4MB. Free memory was 296.5MB in the beginning and 291.2MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:37:19,510 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 94.4MB. Free memory is still 48.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 766.15ms. Allocated memory was 94.4MB in the beginning and 130.0MB in the end (delta: 35.7MB). Free memory was 59.4MB in the beginning and 96.6MB in the end (delta: -37.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.01ms. Allocated memory is still 130.0MB. Free memory was 96.6MB in the beginning and 94.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.66ms. Allocated memory is still 130.0MB. Free memory was 94.5MB in the beginning and 93.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 940.58ms. Allocated memory is still 130.0MB. Free memory was 92.4MB in the beginning and 65.2MB in the end (delta: 27.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 58441.77ms. Allocated memory was 130.0MB in the beginning and 570.4MB in the end (delta: 440.4MB). Free memory was 65.0MB in the beginning and 296.5MB in the end (delta: -231.4MB). Peak memory consumption was 311.7MB. Max. memory is 16.1GB. * Witness Printer took 115.50ms. Allocated memory is still 570.4MB. Free memory was 296.5MB in the beginning and 291.2MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 553]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 58.3s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 11.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2264 SdHoareTripleChecker+Valid, 4.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2237 mSDsluCounter, 2188 SdHoareTripleChecker+Invalid, 3.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2147 mSDsCounter, 1227 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4073 IncrementalHoareTripleChecker+Invalid, 5300 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1227 mSolverCounterUnsat, 583 mSDtfsCounter, 4073 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 802 GetRequests, 530 SyntacticMatches, 0 SemanticMatches, 272 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8672 ImplicationChecksByTransitivity, 19.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=472occurred in iteration=11, InterpolantAutomatonStates: 164, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 250 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 33 LocationsWithAnnotation, 953 PreInvPairs, 1005 NumberOfFragments, 1061 HoareAnnotationTreeSize, 953 FomulaSimplifications, 2342 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 33 FomulaSimplificationsInter, 6720 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 9.1s InterpolantComputationTime, 750 NumberOfCodeBlocks, 726 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 868 ConstructedInterpolants, 0 QuantifiedInterpolants, 3595 SizeOfPredicates, 43 NumberOfNonLiveVariables, 2106 ConjunctsInSsa, 110 ConjunctsInUnsatCore, 19 InterpolantComputations, 10 PerfectInterpolantSequences, 392/549 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && (((((((tmp == 1 && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && tmp == 1) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 939]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 == waterLevel) && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) || ((((2 == waterLevel && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) && pumpRunning == 1)) || ((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) && waterLevel == 1) - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((1 <= tmp && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((2 == waterLevel && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) && pumpRunning == 1) || ((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) && waterLevel == 1) - InvariantResult [Line: 743]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 553]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((pumpRunning == 0 || !(0 < waterLevel)) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 || !(0 < waterLevel)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || waterLevel < 2) || ((pumpRunning == 0 || !(0 < waterLevel)) && ((tmp == 0 && waterLevel < 2) || (!(waterLevel < 2) && tmp == 1)))) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 || !(0 < waterLevel)) && ((tmp == 0 && waterLevel < 2) || (!(waterLevel < 2) && tmp == 1)))) || 0 == systemActive) - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1))) && ((((((tmp == 1 && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-03 02:37:19,622 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3254edb-bdca-4d8c-9d38-73565b5be62c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE