./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 03:32:29,549 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 03:32:29,552 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 03:32:29,583 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 03:32:29,583 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 03:32:29,584 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 03:32:29,586 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 03:32:29,587 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 03:32:29,589 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 03:32:29,590 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 03:32:29,591 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 03:32:29,592 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 03:32:29,593 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 03:32:29,594 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 03:32:29,595 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 03:32:29,597 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 03:32:29,598 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 03:32:29,599 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 03:32:29,600 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 03:32:29,602 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 03:32:29,604 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 03:32:29,609 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 03:32:29,610 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 03:32:29,611 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 03:32:29,619 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 03:32:29,628 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 03:32:29,628 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 03:32:29,629 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 03:32:29,630 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 03:32:29,631 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 03:32:29,631 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 03:32:29,632 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 03:32:29,632 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 03:32:29,633 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 03:32:29,634 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 03:32:29,635 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 03:32:29,635 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 03:32:29,636 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 03:32:29,636 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 03:32:29,637 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 03:32:29,640 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 03:32:29,641 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 03:32:29,674 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 03:32:29,678 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 03:32:29,679 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 03:32:29,679 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 03:32:29,680 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 03:32:29,680 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 03:32:29,680 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 03:32:29,681 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 03:32:29,681 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 03:32:29,681 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 03:32:29,682 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 03:32:29,683 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 03:32:29,683 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 03:32:29,683 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 03:32:29,683 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 03:32:29,683 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 03:32:29,684 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 03:32:29,684 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 03:32:29,685 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 03:32:29,685 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 03:32:29,685 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 03:32:29,685 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 03:32:29,686 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 03:32:29,687 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 03:32:29,687 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 03:32:29,688 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 03:32:29,688 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 03:32:29,688 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 03:32:29,688 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 03:32:29,689 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 03:32:29,689 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 03:32:29,689 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 03:32:29,689 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:32:29,690 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 03:32:29,690 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 03:32:29,690 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 03:32:29,690 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 03:32:29,691 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 03:32:29,691 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 03:32:29,691 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 03:32:29,691 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 03:32:29,691 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f [2022-11-03 03:32:30,001 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 03:32:30,033 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 03:32:30,036 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 03:32:30,037 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 03:32:30,038 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 03:32:30,039 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2022-11-03 03:32:30,124 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/data/37ec56bfd/165c1bc17ae74d988b065f5bda6a6eaa/FLAGa4db790ee [2022-11-03 03:32:30,689 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 03:32:30,690 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2022-11-03 03:32:30,702 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/data/37ec56bfd/165c1bc17ae74d988b065f5bda6a6eaa/FLAGa4db790ee [2022-11-03 03:32:30,988 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/data/37ec56bfd/165c1bc17ae74d988b065f5bda6a6eaa [2022-11-03 03:32:30,991 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 03:32:30,993 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 03:32:30,999 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 03:32:30,999 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 03:32:31,003 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 03:32:31,004 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:32:30" (1/1) ... [2022-11-03 03:32:31,006 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b422dc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31, skipping insertion in model container [2022-11-03 03:32:31,007 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:32:30" (1/1) ... [2022-11-03 03:32:31,016 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 03:32:31,078 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 03:32:31,365 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2022-11-03 03:32:31,412 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:32:31,421 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 03:32:31,504 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2022-11-03 03:32:31,542 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:32:31,579 INFO L208 MainTranslator]: Completed translation [2022-11-03 03:32:31,580 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31 WrapperNode [2022-11-03 03:32:31,580 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 03:32:31,581 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 03:32:31,581 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 03:32:31,582 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 03:32:31,589 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,604 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,632 INFO L138 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 260 [2022-11-03 03:32:31,632 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 03:32:31,633 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 03:32:31,633 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 03:32:31,633 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 03:32:31,643 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,643 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,647 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,660 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,666 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,678 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,695 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,697 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,699 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 03:32:31,700 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 03:32:31,701 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 03:32:31,701 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 03:32:31,702 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (1/1) ... [2022-11-03 03:32:31,709 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:32:31,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:32:31,736 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 03:32:31,746 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 03:32:31,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 03:32:31,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 03:32:31,786 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 03:32:31,786 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 03:32:31,786 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 03:32:31,786 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 03:32:31,787 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 03:32:31,787 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:32:31,787 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:32:31,787 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 03:32:31,787 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 03:32:31,788 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-03 03:32:31,788 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-03 03:32:31,788 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 03:32:31,788 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 03:32:31,788 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 03:32:31,788 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 03:32:31,789 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 03:32:31,925 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 03:32:31,927 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 03:32:32,368 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 03:32:32,549 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 03:32:32,549 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 03:32:32,553 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:32:32 BoogieIcfgContainer [2022-11-03 03:32:32,553 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 03:32:32,557 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 03:32:32,557 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 03:32:32,561 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 03:32:32,561 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 03:32:30" (1/3) ... [2022-11-03 03:32:32,562 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4216212c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:32:32, skipping insertion in model container [2022-11-03 03:32:32,563 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:32:31" (2/3) ... [2022-11-03 03:32:32,563 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4216212c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:32:32, skipping insertion in model container [2022-11-03 03:32:32,563 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:32:32" (3/3) ... [2022-11-03 03:32:32,566 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product51.cil.c [2022-11-03 03:32:32,590 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 03:32:32,591 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 03:32:32,649 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 03:32:32,656 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@616e5ab1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 03:32:32,657 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 03:32:32,676 INFO L276 IsEmpty]: Start isEmpty. Operand has 59 states, 38 states have (on average 1.4736842105263157) internal successors, (56), 47 states have internal predecessors, (56), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-03 03:32:32,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 03:32:32,688 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:32,689 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:32,691 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:32,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:32,700 INFO L85 PathProgramCache]: Analyzing trace with hash -828228736, now seen corresponding path program 1 times [2022-11-03 03:32:32,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:32,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1099612494] [2022-11-03 03:32:32,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:32,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:32,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:32,964 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:32,965 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:32,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1099612494] [2022-11-03 03:32:32,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1099612494] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:32,967 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:32,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 03:32:32,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748607947] [2022-11-03 03:32:32,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:32,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 03:32:32,975 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:33,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 03:32:33,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:32:33,012 INFO L87 Difference]: Start difference. First operand has 59 states, 38 states have (on average 1.4736842105263157) internal successors, (56), 47 states have internal predecessors, (56), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:33,132 INFO L93 Difference]: Finished difference Result 116 states and 161 transitions. [2022-11-03 03:32:33,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 03:32:33,137 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 03:32:33,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:33,146 INFO L225 Difference]: With dead ends: 116 [2022-11-03 03:32:33,146 INFO L226 Difference]: Without dead ends: 54 [2022-11-03 03:32:33,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:32:33,153 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:33,154 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 60 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:32:33,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-03 03:32:33,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2022-11-03 03:32:33,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 35 states have (on average 1.3714285714285714) internal successors, (48), 43 states have internal predecessors, (48), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 03:32:33,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2022-11-03 03:32:33,206 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 12 [2022-11-03 03:32:33,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:33,207 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2022-11-03 03:32:33,207 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,207 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2022-11-03 03:32:33,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 03:32:33,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:33,209 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:33,210 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 03:32:33,210 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:33,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:33,210 INFO L85 PathProgramCache]: Analyzing trace with hash 1937508316, now seen corresponding path program 1 times [2022-11-03 03:32:33,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:33,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2046669717] [2022-11-03 03:32:33,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:33,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:33,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:33,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:33,401 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:33,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2046669717] [2022-11-03 03:32:33,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2046669717] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:33,403 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:33,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:32:33,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914485716] [2022-11-03 03:32:33,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:33,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:32:33,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:33,407 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:32:33,407 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:32:33,408 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:33,455 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2022-11-03 03:32:33,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:32:33,456 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 03:32:33,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:33,457 INFO L225 Difference]: With dead ends: 80 [2022-11-03 03:32:33,457 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 03:32:33,458 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:32:33,459 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:33,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 75 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:32:33,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 03:32:33,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 03:32:33,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.4) internal successors, (42), 38 states have internal predecessors, (42), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 03:32:33,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 60 transitions. [2022-11-03 03:32:33,468 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 60 transitions. Word has length 13 [2022-11-03 03:32:33,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:33,469 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 60 transitions. [2022-11-03 03:32:33,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,469 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 60 transitions. [2022-11-03 03:32:33,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-03 03:32:33,470 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:33,470 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:33,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 03:32:33,471 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:33,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:33,471 INFO L85 PathProgramCache]: Analyzing trace with hash 45018411, now seen corresponding path program 1 times [2022-11-03 03:32:33,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:33,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1800919206] [2022-11-03 03:32:33,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:33,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:33,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:33,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:33,597 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:33,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1800919206] [2022-11-03 03:32:33,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1800919206] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:33,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:33,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:32:33,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [284096054] [2022-11-03 03:32:33,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:33,599 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:32:33,599 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:33,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:32:33,600 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:32:33,600 INFO L87 Difference]: Start difference. First operand 46 states and 60 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:33,734 INFO L93 Difference]: Finished difference Result 133 states and 180 transitions. [2022-11-03 03:32:33,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 03:32:33,735 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-03 03:32:33,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:33,739 INFO L225 Difference]: With dead ends: 133 [2022-11-03 03:32:33,740 INFO L226 Difference]: Without dead ends: 89 [2022-11-03 03:32:33,742 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:32:33,749 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 74 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:33,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 126 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:32:33,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-03 03:32:33,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 72. [2022-11-03 03:32:33,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 48 states have (on average 1.3958333333333333) internal successors, (67), 59 states have internal predecessors, (67), 13 states have call successors, (13), 10 states have call predecessors, (13), 10 states have return successors, (14), 9 states have call predecessors, (14), 13 states have call successors, (14) [2022-11-03 03:32:33,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 94 transitions. [2022-11-03 03:32:33,781 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 94 transitions. Word has length 16 [2022-11-03 03:32:33,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:33,782 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 94 transitions. [2022-11-03 03:32:33,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:33,782 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 94 transitions. [2022-11-03 03:32:33,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-03 03:32:33,783 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:33,784 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:33,784 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 03:32:33,784 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:33,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:33,785 INFO L85 PathProgramCache]: Analyzing trace with hash 1029052617, now seen corresponding path program 1 times [2022-11-03 03:32:33,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:33,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780038676] [2022-11-03 03:32:33,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:33,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:33,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:33,968 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:33,968 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:33,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780038676] [2022-11-03 03:32:33,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780038676] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:33,969 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:33,969 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:32:33,969 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [563790963] [2022-11-03 03:32:33,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:33,970 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:32:33,970 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:33,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:32:33,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:32:33,971 INFO L87 Difference]: Start difference. First operand 72 states and 94 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:34,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:34,056 INFO L93 Difference]: Finished difference Result 176 states and 240 transitions. [2022-11-03 03:32:34,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 03:32:34,057 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-03 03:32:34,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:34,059 INFO L225 Difference]: With dead ends: 176 [2022-11-03 03:32:34,059 INFO L226 Difference]: Without dead ends: 106 [2022-11-03 03:32:34,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:32:34,061 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 34 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:34,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 141 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:32:34,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-11-03 03:32:34,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 99. [2022-11-03 03:32:34,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 15 states have call successors, (15), 14 states have call predecessors, (15), 14 states have return successors, (21), 14 states have call predecessors, (21), 15 states have call successors, (21) [2022-11-03 03:32:34,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 127 transitions. [2022-11-03 03:32:34,079 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 127 transitions. Word has length 19 [2022-11-03 03:32:34,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:34,080 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 127 transitions. [2022-11-03 03:32:34,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:32:34,080 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 127 transitions. [2022-11-03 03:32:34,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 03:32:34,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:34,082 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:34,082 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 03:32:34,082 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:34,083 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:34,083 INFO L85 PathProgramCache]: Analyzing trace with hash -1293448696, now seen corresponding path program 1 times [2022-11-03 03:32:34,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:34,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489473073] [2022-11-03 03:32:34,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:34,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:34,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:34,128 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:34,128 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:34,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489473073] [2022-11-03 03:32:34,129 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489473073] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:34,129 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:34,129 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:32:34,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1608626709] [2022-11-03 03:32:34,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:34,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:32:34,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:34,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:32:34,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:32:34,131 INFO L87 Difference]: Start difference. First operand 99 states and 127 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:32:34,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:34,185 INFO L93 Difference]: Finished difference Result 198 states and 254 transitions. [2022-11-03 03:32:34,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:32:34,186 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2022-11-03 03:32:34,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:34,187 INFO L225 Difference]: With dead ends: 198 [2022-11-03 03:32:34,187 INFO L226 Difference]: Without dead ends: 73 [2022-11-03 03:32:34,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:32:34,189 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 26 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:34,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 107 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:32:34,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-03 03:32:34,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-03 03:32:34,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 50 states have (on average 1.26) internal successors, (63), 57 states have internal predecessors, (63), 11 states have call successors, (11), 11 states have call predecessors, (11), 11 states have return successors, (15), 10 states have call predecessors, (15), 11 states have call successors, (15) [2022-11-03 03:32:34,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 89 transitions. [2022-11-03 03:32:34,202 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 89 transitions. Word has length 27 [2022-11-03 03:32:34,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:34,202 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 89 transitions. [2022-11-03 03:32:34,202 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:32:34,203 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 89 transitions. [2022-11-03 03:32:34,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-03 03:32:34,204 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:34,204 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:34,204 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 03:32:34,204 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:34,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:34,205 INFO L85 PathProgramCache]: Analyzing trace with hash 241097834, now seen corresponding path program 1 times [2022-11-03 03:32:34,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:34,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1265518184] [2022-11-03 03:32:34,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:34,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:34,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:34,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:34,454 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:34,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1265518184] [2022-11-03 03:32:34,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1265518184] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:34,455 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:34,455 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 03:32:34,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [900927900] [2022-11-03 03:32:34,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:34,456 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 03:32:34,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:34,457 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 03:32:34,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:32:34,458 INFO L87 Difference]: Start difference. First operand 73 states and 89 transitions. Second operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:32:34,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:34,590 INFO L93 Difference]: Finished difference Result 209 states and 258 transitions. [2022-11-03 03:32:34,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 03:32:34,591 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-03 03:32:34,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:34,593 INFO L225 Difference]: With dead ends: 209 [2022-11-03 03:32:34,593 INFO L226 Difference]: Without dead ends: 138 [2022-11-03 03:32:34,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 03:32:34,594 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 65 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:34,595 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 151 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:32:34,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138 states. [2022-11-03 03:32:34,611 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138 to 109. [2022-11-03 03:32:34,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 76 states have (on average 1.2236842105263157) internal successors, (93), 85 states have internal predecessors, (93), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (21), 15 states have call predecessors, (21), 15 states have call successors, (21) [2022-11-03 03:32:34,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 129 transitions. [2022-11-03 03:32:34,613 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 129 transitions. Word has length 24 [2022-11-03 03:32:34,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:34,613 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 129 transitions. [2022-11-03 03:32:34,614 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:32:34,614 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 129 transitions. [2022-11-03 03:32:34,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 03:32:34,615 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:34,615 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:34,615 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 03:32:34,615 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:34,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:34,616 INFO L85 PathProgramCache]: Analyzing trace with hash 1165699348, now seen corresponding path program 1 times [2022-11-03 03:32:34,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:34,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116067857] [2022-11-03 03:32:34,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:34,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:34,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:34,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:34,932 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:34,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116067857] [2022-11-03 03:32:34,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116067857] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:34,932 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:32:34,933 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 03:32:34,933 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568843193] [2022-11-03 03:32:34,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:34,933 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 03:32:34,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:34,934 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 03:32:34,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 03:32:34,934 INFO L87 Difference]: Start difference. First operand 109 states and 129 transitions. Second operand has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 03:32:35,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:35,373 INFO L93 Difference]: Finished difference Result 276 states and 344 transitions. [2022-11-03 03:32:35,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-03 03:32:35,374 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 27 [2022-11-03 03:32:35,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:35,380 INFO L225 Difference]: With dead ends: 276 [2022-11-03 03:32:35,380 INFO L226 Difference]: Without dead ends: 205 [2022-11-03 03:32:35,382 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-03 03:32:35,385 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 157 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 318 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 375 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:35,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 271 Invalid, 375 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 318 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 03:32:35,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-11-03 03:32:35,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 182. [2022-11-03 03:32:35,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 127 states have (on average 1.2283464566929134) internal successors, (156), 143 states have internal predecessors, (156), 26 states have call successors, (26), 23 states have call predecessors, (26), 28 states have return successors, (37), 26 states have call predecessors, (37), 26 states have call successors, (37) [2022-11-03 03:32:35,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 219 transitions. [2022-11-03 03:32:35,423 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 219 transitions. Word has length 27 [2022-11-03 03:32:35,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:35,423 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 219 transitions. [2022-11-03 03:32:35,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 03:32:35,424 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 219 transitions. [2022-11-03 03:32:35,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-03 03:32:35,426 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:35,426 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:35,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 03:32:35,427 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:35,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:35,427 INFO L85 PathProgramCache]: Analyzing trace with hash 1859269106, now seen corresponding path program 1 times [2022-11-03 03:32:35,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:35,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120264947] [2022-11-03 03:32:35,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:35,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:35,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:35,637 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 03:32:35,637 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:35,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120264947] [2022-11-03 03:32:35,637 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120264947] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:32:35,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [870861884] [2022-11-03 03:32:35,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:35,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:32:35,638 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:32:35,640 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:32:35,662 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 03:32:35,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:35,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 03:32:35,765 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:32:35,857 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:35,858 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:32:35,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [870861884] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:35,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:32:35,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 03:32:35,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [843609106] [2022-11-03 03:32:35,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:35,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:32:35,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:35,859 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:32:35,859 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:32:35,860 INFO L87 Difference]: Start difference. First operand 182 states and 219 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 03:32:35,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:35,926 INFO L93 Difference]: Finished difference Result 265 states and 325 transitions. [2022-11-03 03:32:35,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:32:35,927 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-03 03:32:35,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:35,928 INFO L225 Difference]: With dead ends: 265 [2022-11-03 03:32:35,928 INFO L226 Difference]: Without dead ends: 181 [2022-11-03 03:32:35,929 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:32:35,930 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 25 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:35,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 90 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:32:35,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2022-11-03 03:32:35,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 181. [2022-11-03 03:32:35,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 127 states have (on average 1.204724409448819) internal successors, (153), 142 states have internal predecessors, (153), 25 states have call successors, (25), 23 states have call predecessors, (25), 28 states have return successors, (33), 26 states have call predecessors, (33), 25 states have call successors, (33) [2022-11-03 03:32:35,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 211 transitions. [2022-11-03 03:32:35,956 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 211 transitions. Word has length 46 [2022-11-03 03:32:35,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:35,956 INFO L495 AbstractCegarLoop]: Abstraction has 181 states and 211 transitions. [2022-11-03 03:32:35,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 03:32:35,956 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 211 transitions. [2022-11-03 03:32:35,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 03:32:35,958 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:35,959 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:35,999 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 03:32:36,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:32:36,179 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:36,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:36,179 INFO L85 PathProgramCache]: Analyzing trace with hash -325444745, now seen corresponding path program 1 times [2022-11-03 03:32:36,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:36,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141488280] [2022-11-03 03:32:36,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:36,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:36,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:36,612 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:32:36,612 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:36,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141488280] [2022-11-03 03:32:36,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141488280] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:32:36,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1045836670] [2022-11-03 03:32:36,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:36,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:32:36,613 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:32:36,619 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:32:36,626 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 03:32:36,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:36,738 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-03 03:32:36,741 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:32:37,059 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:32:37,060 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:32:37,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1045836670] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:32:37,060 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:32:37,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 14 [2022-11-03 03:32:37,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [605374265] [2022-11-03 03:32:37,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:32:37,061 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 03:32:37,061 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:37,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 03:32:37,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2022-11-03 03:32:37,062 INFO L87 Difference]: Start difference. First operand 181 states and 211 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 03:32:37,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:32:37,563 INFO L93 Difference]: Finished difference Result 361 states and 431 transitions. [2022-11-03 03:32:37,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 03:32:37,564 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 49 [2022-11-03 03:32:37,565 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:32:37,568 INFO L225 Difference]: With dead ends: 361 [2022-11-03 03:32:37,568 INFO L226 Difference]: Without dead ends: 243 [2022-11-03 03:32:37,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=82, Invalid=260, Unknown=0, NotChecked=0, Total=342 [2022-11-03 03:32:37,571 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 114 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:32:37,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 186 Invalid, 252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 03:32:37,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-11-03 03:32:37,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 190. [2022-11-03 03:32:37,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 136 states have (on average 1.1911764705882353) internal successors, (162), 147 states have internal predecessors, (162), 26 states have call successors, (26), 26 states have call predecessors, (26), 27 states have return successors, (31), 25 states have call predecessors, (31), 26 states have call successors, (31) [2022-11-03 03:32:37,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 219 transitions. [2022-11-03 03:32:37,612 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 219 transitions. Word has length 49 [2022-11-03 03:32:37,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:32:37,613 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 219 transitions. [2022-11-03 03:32:37,613 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 03:32:37,613 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 219 transitions. [2022-11-03 03:32:37,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-03 03:32:37,620 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:32:37,621 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:32:37,667 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 03:32:37,845 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:32:37,846 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:32:37,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:32:37,846 INFO L85 PathProgramCache]: Analyzing trace with hash 1811710477, now seen corresponding path program 1 times [2022-11-03 03:32:37,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:32:37,847 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1240848665] [2022-11-03 03:32:37,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:37,847 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:32:37,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:38,606 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:32:38,606 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:32:38,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1240848665] [2022-11-03 03:32:38,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1240848665] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:32:38,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [500098906] [2022-11-03 03:32:38,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:32:38,607 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:32:38,607 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:32:38,608 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:32:38,630 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 03:32:38,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:32:38,743 INFO L263 TraceCheckSpWp]: Trace formula consists of 398 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 03:32:38,749 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:32:39,052 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 4 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 03:32:39,052 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:32:39,638 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 03:32:39,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [500098906] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:32:39,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [161188501] [2022-11-03 03:32:39,658 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2022-11-03 03:32:39,658 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:32:39,662 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:32:39,667 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:32:39,667 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:32:51,078 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 303 for LOIs [2022-11-03 03:32:51,159 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 44 for LOIs [2022-11-03 03:32:51,380 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-03 03:32:51,623 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-03 03:32:51,625 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:32:57,256 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5119#(and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~8#1|) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_~retValue_acc~2#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~2#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:32:57,256 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:32:57,256 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:32:57,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 11] total 31 [2022-11-03 03:32:57,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141149361] [2022-11-03 03:32:57,256 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:32:57,257 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 03:32:57,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:32:57,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 03:32:57,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=2762, Unknown=0, NotChecked=0, Total=3080 [2022-11-03 03:32:57,259 INFO L87 Difference]: Start difference. First operand 190 states and 219 transitions. Second operand has 31 states, 28 states have (on average 3.5357142857142856) internal successors, (99), 28 states have internal predecessors, (99), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 11 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-03 03:33:00,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:33:00,421 INFO L93 Difference]: Finished difference Result 533 states and 635 transitions. [2022-11-03 03:33:00,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-03 03:33:00,427 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 28 states have (on average 3.5357142857142856) internal successors, (99), 28 states have internal predecessors, (99), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 11 states have call predecessors, (14), 12 states have call successors, (14) Word has length 52 [2022-11-03 03:33:00,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:33:00,431 INFO L225 Difference]: With dead ends: 533 [2022-11-03 03:33:00,431 INFO L226 Difference]: Without dead ends: 429 [2022-11-03 03:33:00,436 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 223 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3284 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=1085, Invalid=8617, Unknown=0, NotChecked=0, Total=9702 [2022-11-03 03:33:00,436 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 1154 mSDsluCounter, 755 mSDsCounter, 0 mSdLazyCounter, 1245 mSolverCounterSat, 597 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1159 SdHoareTripleChecker+Valid, 760 SdHoareTripleChecker+Invalid, 1842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 597 IncrementalHoareTripleChecker+Valid, 1245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:33:00,438 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1159 Valid, 760 Invalid, 1842 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [597 Valid, 1245 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-03 03:33:00,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2022-11-03 03:33:00,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 288. [2022-11-03 03:33:00,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 207 states have (on average 1.183574879227053) internal successors, (245), 222 states have internal predecessors, (245), 39 states have call successors, (39), 39 states have call predecessors, (39), 41 states have return successors, (47), 39 states have call predecessors, (47), 39 states have call successors, (47) [2022-11-03 03:33:00,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 331 transitions. [2022-11-03 03:33:00,491 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 331 transitions. Word has length 52 [2022-11-03 03:33:00,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:33:00,494 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 331 transitions. [2022-11-03 03:33:00,494 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 28 states have (on average 3.5357142857142856) internal successors, (99), 28 states have internal predecessors, (99), 13 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 11 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-03 03:33:00,494 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 331 transitions. [2022-11-03 03:33:00,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-11-03 03:33:00,497 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:33:00,497 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:33:00,534 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 03:33:00,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 03:33:00,711 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:33:00,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:33:00,711 INFO L85 PathProgramCache]: Analyzing trace with hash 1771045684, now seen corresponding path program 2 times [2022-11-03 03:33:00,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:33:00,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [359859907] [2022-11-03 03:33:00,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:33:00,712 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:33:00,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:33:01,655 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 30 proven. 19 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 03:33:01,655 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:33:01,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [359859907] [2022-11-03 03:33:01,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [359859907] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:33:01,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2088699324] [2022-11-03 03:33:01,656 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 03:33:01,656 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:33:01,656 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:33:01,658 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:33:01,667 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 03:33:01,766 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 03:33:01,766 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 03:33:01,769 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-03 03:33:01,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:33:01,940 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 03:33:01,940 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:33:01,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2088699324] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:33:01,940 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:33:01,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 20 [2022-11-03 03:33:01,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736235326] [2022-11-03 03:33:01,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:33:01,941 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 03:33:01,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:33:01,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 03:33:01,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=322, Unknown=0, NotChecked=0, Total=380 [2022-11-03 03:33:01,942 INFO L87 Difference]: Start difference. First operand 288 states and 331 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-03 03:33:02,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:33:02,194 INFO L93 Difference]: Finished difference Result 569 states and 662 transitions. [2022-11-03 03:33:02,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 03:33:02,195 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 77 [2022-11-03 03:33:02,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:33:02,197 INFO L225 Difference]: With dead ends: 569 [2022-11-03 03:33:02,197 INFO L226 Difference]: Without dead ends: 301 [2022-11-03 03:33:02,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 116 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=76, Invalid=430, Unknown=0, NotChecked=0, Total=506 [2022-11-03 03:33:02,198 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 55 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:33:02,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 148 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:33:02,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 301 states. [2022-11-03 03:33:02,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 291. [2022-11-03 03:33:02,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 212 states have (on average 1.1839622641509433) internal successors, (251), 226 states have internal predecessors, (251), 39 states have call successors, (39), 39 states have call predecessors, (39), 39 states have return successors, (46), 39 states have call predecessors, (46), 39 states have call successors, (46) [2022-11-03 03:33:02,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 336 transitions. [2022-11-03 03:33:02,240 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 336 transitions. Word has length 77 [2022-11-03 03:33:02,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:33:02,241 INFO L495 AbstractCegarLoop]: Abstraction has 291 states and 336 transitions. [2022-11-03 03:33:02,241 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-03 03:33:02,241 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 336 transitions. [2022-11-03 03:33:02,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-11-03 03:33:02,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:33:02,243 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:33:02,283 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 03:33:02,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-03 03:33:02,458 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:33:02,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:33:02,459 INFO L85 PathProgramCache]: Analyzing trace with hash -905449442, now seen corresponding path program 1 times [2022-11-03 03:33:02,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:33:02,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808096441] [2022-11-03 03:33:02,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:33:02,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:33:02,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:33:03,689 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 44 proven. 52 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 03:33:03,689 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:33:03,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808096441] [2022-11-03 03:33:03,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808096441] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:33:03,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [758578963] [2022-11-03 03:33:03,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:33:03,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:33:03,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:33:03,691 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:33:03,717 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 03:33:03,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:33:03,820 INFO L263 TraceCheckSpWp]: Trace formula consists of 538 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 03:33:03,823 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:33:04,410 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 54 proven. 38 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-03 03:33:04,410 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:33:05,352 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 67 proven. 21 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-03 03:33:05,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [758578963] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:33:05,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [627004506] [2022-11-03 03:33:05,356 INFO L159 IcfgInterpreter]: Started Sifa with 38 locations of interest [2022-11-03 03:33:05,356 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:33:05,356 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:33:05,357 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:33:05,357 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:33:14,875 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 303 for LOIs [2022-11-03 03:33:14,974 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 44 for LOIs [2022-11-03 03:33:15,327 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-03 03:33:15,512 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-03 03:33:15,514 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 29 for LOIs [2022-11-03 03:33:15,517 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:33:22,724 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8690#(and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~8#1|) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_~retValue_acc~2#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~2#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:33:22,724 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:33:22,724 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:33:22,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 13, 13] total 41 [2022-11-03 03:33:22,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67294896] [2022-11-03 03:33:22,725 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:33:22,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-03 03:33:22,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:33:22,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-03 03:33:22,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=539, Invalid=4153, Unknown=0, NotChecked=0, Total=4692 [2022-11-03 03:33:22,728 INFO L87 Difference]: Start difference. First operand 291 states and 336 transitions. Second operand has 41 states, 38 states have (on average 4.184210526315789) internal successors, (159), 39 states have internal predecessors, (159), 19 states have call successors, (24), 8 states have call predecessors, (24), 16 states have return successors, (25), 18 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-03 03:33:24,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:33:24,135 INFO L93 Difference]: Finished difference Result 393 states and 458 transitions. [2022-11-03 03:33:24,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-03 03:33:24,136 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 38 states have (on average 4.184210526315789) internal successors, (159), 39 states have internal predecessors, (159), 19 states have call successors, (24), 8 states have call predecessors, (24), 16 states have return successors, (25), 18 states have call predecessors, (25), 19 states have call successors, (25) Word has length 94 [2022-11-03 03:33:24,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:33:24,137 INFO L225 Difference]: With dead ends: 393 [2022-11-03 03:33:24,138 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 03:33:24,141 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 234 SyntacticMatches, 8 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3359 ImplicationChecksByTransitivity, 8.8s TimeCoverageRelationStatistics Valid=934, Invalid=6206, Unknown=0, NotChecked=0, Total=7140 [2022-11-03 03:33:24,141 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 399 mSDsluCounter, 444 mSDsCounter, 0 mSdLazyCounter, 629 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 402 SdHoareTripleChecker+Valid, 446 SdHoareTripleChecker+Invalid, 883 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 629 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 03:33:24,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [402 Valid, 446 Invalid, 883 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 629 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 03:33:24,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 03:33:24,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 03:33:24,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:33:24,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 03:33:24,143 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2022-11-03 03:33:24,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:33:24,143 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 03:33:24,144 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 38 states have (on average 4.184210526315789) internal successors, (159), 39 states have internal predecessors, (159), 19 states have call successors, (24), 8 states have call predecessors, (24), 16 states have return successors, (25), 18 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-03 03:33:24,144 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 03:33:24,144 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 03:33:24,147 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 03:33:24,173 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 03:33:24,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:33:24,350 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 03:33:27,541 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 423 430) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= 1 ~systemActive~0)) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2022-11-03 03:33:27,542 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 423 430) no Hoare annotation was computed. [2022-11-03 03:33:27,542 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2022-11-03 03:33:27,542 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2022-11-03 03:33:27,542 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 214 225) the Hoare annotation is: true [2022-11-03 03:33:27,542 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 214 225) no Hoare annotation was computed. [2022-11-03 03:33:27,544 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-03 03:33:27,544 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= |timeShift_processEnvironment_~tmp~3#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-03 03:33:27,544 INFO L899 garLoopResultBuilder]: For program point L169(lines 169 175) no Hoare annotation was computed. [2022-11-03 03:33:27,546 INFO L895 garLoopResultBuilder]: At program point L165(lines 165 178) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| ~waterLevel~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 .cse4 .cse5) .cse2) (or .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse6 (and .cse1 (= |timeShift_processEnvironment_~tmp~3#1| 1) .cse4 .cse5)) (or .cse0 .cse3 .cse6 .cse2 (and (<= ~waterLevel~0 2) .cse4 (<= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2022-11-03 03:33:27,547 INFO L895 garLoopResultBuilder]: At program point L165-1(lines 157 181) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse2 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 (and .cse1 (= |timeShift_processEnvironment_~tmp~3#1| 1) .cse4 .cse5 .cse2) (not (= |old(~pumpRunning~0)| 1)) .cse6) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 .cse4 .cse5 .cse2) .cse7) (or .cse0 .cse3 .cse6 .cse7 (and (<= ~waterLevel~0 2) .cse4 (<= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)))))) [2022-11-03 03:33:27,547 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-03 03:33:27,548 INFO L895 garLoopResultBuilder]: At program point L409-1(lines 390 414) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3)) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) (and .cse2 (= |timeShift_processEnvironment_~tmp~3#1| 1) .cse3) .cse4) (or .cse0 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse4 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2022-11-03 03:33:27,548 INFO L895 garLoopResultBuilder]: At program point L343-1(lines 343 349) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse1 .cse3)) (or .cse2 (not (= |old(~pumpRunning~0)| 1)) (and .cse1 (= |timeShift_processEnvironment_~tmp~3#1| 1) .cse3) .cse4) (or .cse0 .cse2 .cse4 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2022-11-03 03:33:27,548 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-03 03:33:27,549 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 332 355) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse0 .cse1 (not .cse5)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 (= ~waterLevel~0 1)) .cse5) (or .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (and .cse2 (= ~pumpRunning~0 1))))) [2022-11-03 03:33:27,549 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 335 354) no Hoare annotation was computed. [2022-11-03 03:33:27,549 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2022-11-03 03:33:27,549 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 332 355) no Hoare annotation was computed. [2022-11-03 03:33:27,550 INFO L895 garLoopResultBuilder]: At program point L394(lines 394 411) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (let ((.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (not (< 0 ~waterLevel~0)) .cse5) (and (= ~pumpRunning~0 0) .cse5)))) (.cse0 (= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse3 .cse1 .cse2 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse4 .cse0)) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-03 03:33:27,550 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 612) no Hoare annotation was computed. [2022-11-03 03:33:27,550 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-03 03:33:27,550 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-03 03:33:27,550 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-03 03:33:27,551 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-03 03:33:27,551 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-03 03:33:27,551 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-03 03:33:27,551 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-03 03:33:27,551 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-03 03:33:27,551 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-03 03:33:27,552 INFO L895 garLoopResultBuilder]: At program point L531(line 531) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-03 03:33:27,552 INFO L899 garLoopResultBuilder]: For program point L552(lines 551 598) no Hoare annotation was computed. [2022-11-03 03:33:27,552 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2022-11-03 03:33:27,552 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 03:33:27,552 INFO L895 garLoopResultBuilder]: At program point L573(line 573) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-11-03 03:33:27,553 INFO L902 garLoopResultBuilder]: At program point L602(lines 541 606) the Hoare annotation is: true [2022-11-03 03:33:27,553 INFO L899 garLoopResultBuilder]: For program point L561(lines 561 567) no Hoare annotation was computed. [2022-11-03 03:33:27,553 INFO L899 garLoopResultBuilder]: For program point L561-1(lines 561 567) no Hoare annotation was computed. [2022-11-03 03:33:27,553 INFO L895 garLoopResultBuilder]: At program point L140(lines 140 147) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-03 03:33:27,553 INFO L902 garLoopResultBuilder]: At program point L140-2(lines 140 147) the Hoare annotation is: true [2022-11-03 03:33:27,554 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 03:33:27,554 INFO L895 garLoopResultBuilder]: At program point L599(lines 550 600) the Hoare annotation is: false [2022-11-03 03:33:27,554 INFO L899 garLoopResultBuilder]: For program point L529(lines 529 535) no Hoare annotation was computed. [2022-11-03 03:33:27,554 INFO L895 garLoopResultBuilder]: At program point L529-1(lines 529 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-03 03:33:27,554 INFO L899 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2022-11-03 03:33:27,555 INFO L895 garLoopResultBuilder]: At program point L587-2(lines 581 594) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-11-03 03:33:27,555 INFO L899 garLoopResultBuilder]: For program point L571(lines 571 577) no Hoare annotation was computed. [2022-11-03 03:33:27,555 INFO L899 garLoopResultBuilder]: For program point L571-1(lines 571 577) no Hoare annotation was computed. [2022-11-03 03:33:27,555 INFO L895 garLoopResultBuilder]: At program point L596(lines 551 598) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (not .cse4)) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse3 .cse0 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse3 .cse1 .cse4)))) [2022-11-03 03:33:27,556 INFO L895 garLoopResultBuilder]: At program point L563(line 563) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (not .cse4)) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse3 .cse0 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse3 .cse1 .cse4)))) [2022-11-03 03:33:27,556 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)))) [2022-11-03 03:33:27,556 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2022-11-03 03:33:27,556 INFO L895 garLoopResultBuilder]: At program point L372(lines 372 380) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1) .cse0) .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse0) .cse2))) [2022-11-03 03:33:27,557 INFO L895 garLoopResultBuilder]: At program point L368(lines 368 385) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)))) [2022-11-03 03:33:27,557 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)))) [2022-11-03 03:33:27,557 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2022-11-03 03:33:27,557 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2022-11-03 03:33:27,557 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 202 213) no Hoare annotation was computed. [2022-11-03 03:33:27,558 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 202 213) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or .cse0 (< |old(~waterLevel~0)| 2) (not (= ~pumpRunning~0 1)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 2))))) [2022-11-03 03:33:27,561 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:33:27,563 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 03:33:27,591 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 03:33:27 BoogieIcfgContainer [2022-11-03 03:33:27,591 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 03:33:27,592 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 03:33:27,592 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 03:33:27,592 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 03:33:27,593 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:32:32" (3/4) ... [2022-11-03 03:33:27,596 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 03:33:27,603 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-03 03:33:27,603 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 03:33:27,603 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 03:33:27,603 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 03:33:27,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 03:33:27,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:33:27,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 03:33:27,612 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 72 nodes and edges [2022-11-03 03:33:27,613 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 29 nodes and edges [2022-11-03 03:33:27,614 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 03:33:27,614 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 03:33:27,615 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 03:33:27,615 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:33:27,616 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:33:27,643 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 03:33:27,644 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 03:33:27,645 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 03:33:27,645 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 03:33:27,645 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) [2022-11-03 03:33:27,646 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && tmp == 1) && tmp == waterLevel) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((waterLevel <= 2 && tmp == waterLevel) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) [2022-11-03 03:33:27,646 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || ((((pumpRunning == 0 && tmp == 1) && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((waterLevel <= 2 && tmp == waterLevel) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) [2022-11-03 03:33:27,647 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 03:33:27,647 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && (pumpRunning == 0 || !(0 < waterLevel))) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (tmp == 0 && (pumpRunning == 0 || !(0 < waterLevel)))) || !(1 == systemActive)) [2022-11-03 03:33:27,675 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 03:33:27,675 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 03:33:27,675 INFO L158 Benchmark]: Toolchain (without parser) took 56682.11ms. Allocated memory was 98.6MB in the beginning and 545.3MB in the end (delta: 446.7MB). Free memory was 59.1MB in the beginning and 438.5MB in the end (delta: -379.4MB). Peak memory consumption was 68.1MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,676 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 98.6MB. Free memory is still 76.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 03:33:27,676 INFO L158 Benchmark]: CACSL2BoogieTranslator took 581.71ms. Allocated memory is still 98.6MB. Free memory was 58.9MB in the beginning and 65.8MB in the end (delta: -6.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,677 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.45ms. Allocated memory is still 98.6MB. Free memory was 65.8MB in the beginning and 63.4MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,677 INFO L158 Benchmark]: Boogie Preprocessor took 66.63ms. Allocated memory is still 98.6MB. Free memory was 63.4MB in the beginning and 61.4MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,677 INFO L158 Benchmark]: RCFGBuilder took 853.03ms. Allocated memory was 98.6MB in the beginning and 123.7MB in the end (delta: 25.2MB). Free memory was 61.4MB in the beginning and 93.7MB in the end (delta: -32.3MB). Peak memory consumption was 37.0MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,678 INFO L158 Benchmark]: TraceAbstraction took 55034.54ms. Allocated memory was 123.7MB in the beginning and 545.3MB in the end (delta: 421.5MB). Free memory was 93.2MB in the beginning and 444.7MB in the end (delta: -351.5MB). Peak memory consumption was 331.1MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,678 INFO L158 Benchmark]: Witness Printer took 83.09ms. Allocated memory is still 545.3MB. Free memory was 444.7MB in the beginning and 438.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 03:33:27,680 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 98.6MB. Free memory is still 76.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 581.71ms. Allocated memory is still 98.6MB. Free memory was 58.9MB in the beginning and 65.8MB in the end (delta: -6.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.45ms. Allocated memory is still 98.6MB. Free memory was 65.8MB in the beginning and 63.4MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 66.63ms. Allocated memory is still 98.6MB. Free memory was 63.4MB in the beginning and 61.4MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 853.03ms. Allocated memory was 98.6MB in the beginning and 123.7MB in the end (delta: 25.2MB). Free memory was 61.4MB in the beginning and 93.7MB in the end (delta: -32.3MB). Peak memory consumption was 37.0MB. Max. memory is 16.1GB. * TraceAbstraction took 55034.54ms. Allocated memory was 123.7MB in the beginning and 545.3MB in the end (delta: 421.5MB). Free memory was 93.2MB in the beginning and 444.7MB in the end (delta: -351.5MB). Peak memory consumption was 331.1MB. Max. memory is 16.1GB. * Witness Printer took 83.09ms. Allocated memory is still 545.3MB. Free memory was 444.7MB in the beginning and 438.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 612]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 59 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 54.9s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 6.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2142 SdHoareTripleChecker+Valid, 2.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2117 mSDsluCounter, 2561 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2147 mSDsCounter, 1000 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2839 IncrementalHoareTripleChecker+Invalid, 3839 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1000 mSolverCounterUnsat, 733 mSDtfsCounter, 2839 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 800 GetRequests, 547 SyntacticMatches, 8 SemanticMatches, 245 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6813 ImplicationChecksByTransitivity, 17.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=291occurred in iteration=11, InterpolantAutomatonStates: 130, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 280 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 822 PreInvPairs, 878 NumberOfFragments, 1224 HoareAnnotationTreeSize, 822 FomulaSimplifications, 2695 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 35 FomulaSimplificationsInter, 7886 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 7.5s InterpolantComputationTime, 774 NumberOfCodeBlocks, 749 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 901 ConstructedInterpolants, 0 QuantifiedInterpolants, 4038 SizeOfPredicates, 40 NumberOfNonLiveVariables, 2112 ConjunctsInSsa, 110 ConjunctsInUnsatCore, 19 InterpolantComputations, 10 PerfectInterpolantSequences, 400/567 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: ((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: (((((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && tmp == 1) && tmp == waterLevel) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((waterLevel <= 2 && tmp == waterLevel) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: (((((tmp == 1 && (pumpRunning == 0 || !(0 < waterLevel))) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (tmp == 0 && (pumpRunning == 0 || !(0 < waterLevel)))) || !(1 == systemActive)) - InvariantResult [Line: 343]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 368]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || ((((pumpRunning == 0 && tmp == 1) && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((waterLevel <= 2 && tmp == waterLevel) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) RESULT: Ultimate proved your program to be correct! [2022-11-03 03:33:27,746 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8822dcc-a0a3-4cd0-87a4-2ba318909518/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE