./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:39:37,798 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:39:37,801 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:39:37,835 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:39:37,843 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:39:37,845 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:39:37,847 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:39:37,857 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:39:37,859 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:39:37,863 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:39:37,865 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:39:37,866 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:39:37,868 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:39:37,869 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:39:37,873 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:39:37,874 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:39:37,878 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:39:37,879 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:39:37,886 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:39:37,888 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:39:37,890 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:39:37,894 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:39:37,896 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:39:37,897 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:39:37,901 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:39:37,905 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:39:37,905 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:39:37,907 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:39:37,909 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:39:37,910 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:39:37,911 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:39:37,911 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:39:37,913 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:39:37,914 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:39:37,918 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:39:37,919 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:39:37,920 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:39:37,920 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:39:37,920 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:39:37,921 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:39:37,922 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:39:37,923 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:39:37,973 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:39:37,974 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:39:37,974 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:39:37,975 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:39:37,976 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:39:37,976 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:39:37,977 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:39:37,977 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:39:37,977 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:39:37,977 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:39:37,978 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:39:37,979 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:39:37,979 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:39:37,979 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:39:37,980 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:39:37,980 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:39:37,980 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:39:37,980 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:39:37,981 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:39:37,981 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:39:37,982 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:39:37,982 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:39:37,982 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:39:37,982 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:39:37,983 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:39:37,983 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:39:37,983 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:39:37,983 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:39:37,983 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:39:37,984 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:39:37,984 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:39:37,984 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:39:37,985 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:39:37,985 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:39:37,985 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:39:37,985 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:39:37,986 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:39:37,986 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:39:37,986 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:39:37,986 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:39:37,987 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:39:37,987 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 [2022-11-03 02:39:38,261 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:39:38,317 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:39:38,319 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:39:38,321 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:39:38,321 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:39:38,323 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-03 02:39:38,416 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/data/f7b9190b2/92e085b601c14945b9ccd39e29bf4e7d/FLAG6e8cef34b [2022-11-03 02:39:38,899 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:39:38,900 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-03 02:39:38,913 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/data/f7b9190b2/92e085b601c14945b9ccd39e29bf4e7d/FLAG6e8cef34b [2022-11-03 02:39:39,224 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/data/f7b9190b2/92e085b601c14945b9ccd39e29bf4e7d [2022-11-03 02:39:39,227 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:39:39,229 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:39:39,232 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:39:39,232 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:39:39,236 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:39:39,237 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,238 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@79d954a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39, skipping insertion in model container [2022-11-03 02:39:39,238 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,246 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:39:39,286 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:39:39,446 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-03 02:39:39,636 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:39:39,645 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:39:39,677 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-03 02:39:39,767 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:39:39,798 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:39:39,799 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39 WrapperNode [2022-11-03 02:39:39,799 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:39:39,800 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:39:39,801 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:39:39,801 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:39:39,811 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,838 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,874 INFO L138 Inliner]: procedures = 57, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 289 [2022-11-03 02:39:39,884 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:39:39,885 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:39:39,886 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:39:39,886 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:39:39,896 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,896 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,899 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,899 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,905 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,910 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,912 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,914 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,916 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:39:39,917 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:39:39,918 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:39:39,918 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:39:39,919 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (1/1) ... [2022-11-03 02:39:39,926 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:39:39,943 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:39:39,969 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:39:39,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:39:40,020 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:39:40,020 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:39:40,020 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:39:40,020 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:39:40,021 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:39:40,021 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:39:40,021 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:39:40,021 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:39:40,022 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:39:40,022 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:39:40,022 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:39:40,022 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-03 02:39:40,022 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-03 02:39:40,023 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-03 02:39:40,023 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-03 02:39:40,023 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-03 02:39:40,023 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-03 02:39:40,023 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:39:40,024 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:39:40,024 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:39:40,024 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:39:40,024 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:39:40,106 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:39:40,109 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:39:40,564 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:39:40,712 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:39:40,713 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:39:40,715 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:39:40 BoogieIcfgContainer [2022-11-03 02:39:40,715 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:39:40,718 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:39:40,718 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:39:40,733 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:39:40,733 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:39:39" (1/3) ... [2022-11-03 02:39:40,734 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a7b1ee4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:39:40, skipping insertion in model container [2022-11-03 02:39:40,734 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:39:39" (2/3) ... [2022-11-03 02:39:40,734 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a7b1ee4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:39:40, skipping insertion in model container [2022-11-03 02:39:40,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:39:40" (3/3) ... [2022-11-03 02:39:40,736 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product61.cil.c [2022-11-03 02:39:40,759 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:39:40,760 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:39:40,826 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:39:40,840 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@874df97, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:39:40,840 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:39:40,851 INFO L276 IsEmpty]: Start isEmpty. Operand has 68 states, 41 states have (on average 1.4146341463414633) internal successors, (58), 51 states have internal predecessors, (58), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-03 02:39:40,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 02:39:40,870 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:40,871 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:40,873 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:40,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:40,879 INFO L85 PathProgramCache]: Analyzing trace with hash 352390350, now seen corresponding path program 1 times [2022-11-03 02:39:40,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:40,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212566088] [2022-11-03 02:39:40,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:40,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:41,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:41,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:41,157 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:41,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212566088] [2022-11-03 02:39:41,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212566088] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:41,160 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:41,160 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:39:41,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [498899840] [2022-11-03 02:39:41,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:41,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:39:41,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:41,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:39:41,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:39:41,213 INFO L87 Difference]: Start difference. First operand has 68 states, 41 states have (on average 1.4146341463414633) internal successors, (58), 51 states have internal predecessors, (58), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:41,295 INFO L93 Difference]: Finished difference Result 134 states and 181 transitions. [2022-11-03 02:39:41,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:39:41,298 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 02:39:41,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:41,308 INFO L225 Difference]: With dead ends: 134 [2022-11-03 02:39:41,308 INFO L226 Difference]: Without dead ends: 63 [2022-11-03 02:39:41,312 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:39:41,315 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:41,316 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 69 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:39:41,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-03 02:39:41,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2022-11-03 02:39:41,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 38 states have (on average 1.3157894736842106) internal successors, (50), 47 states have internal predecessors, (50), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-03 02:39:41,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 81 transitions. [2022-11-03 02:39:41,405 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 81 transitions. Word has length 12 [2022-11-03 02:39:41,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:41,405 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 81 transitions. [2022-11-03 02:39:41,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,406 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 81 transitions. [2022-11-03 02:39:41,407 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:39:41,407 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:41,408 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:41,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:39:41,408 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:41,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:41,410 INFO L85 PathProgramCache]: Analyzing trace with hash -717662667, now seen corresponding path program 1 times [2022-11-03 02:39:41,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:41,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590772433] [2022-11-03 02:39:41,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:41,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:41,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:41,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:41,568 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:41,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590772433] [2022-11-03 02:39:41,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590772433] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:41,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:41,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:39:41,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962205100] [2022-11-03 02:39:41,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:41,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:39:41,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:41,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:39:41,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:41,574 INFO L87 Difference]: Start difference. First operand 63 states and 81 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:41,662 INFO L93 Difference]: Finished difference Result 103 states and 133 transitions. [2022-11-03 02:39:41,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:39:41,663 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:39:41,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:41,664 INFO L225 Difference]: With dead ends: 103 [2022-11-03 02:39:41,664 INFO L226 Difference]: Without dead ends: 55 [2022-11-03 02:39:41,665 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:41,666 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 7 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:41,667 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 101 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:39:41,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-03 02:39:41,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2022-11-03 02:39:41,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 42 states have internal predecessors, (44), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 02:39:41,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 70 transitions. [2022-11-03 02:39:41,678 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 70 transitions. Word has length 13 [2022-11-03 02:39:41,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:41,678 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 70 transitions. [2022-11-03 02:39:41,679 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,680 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 70 transitions. [2022-11-03 02:39:41,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:39:41,681 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:41,682 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:41,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:39:41,682 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:41,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:41,684 INFO L85 PathProgramCache]: Analyzing trace with hash -1106958584, now seen corresponding path program 1 times [2022-11-03 02:39:41,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:41,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [379298833] [2022-11-03 02:39:41,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:41,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:41,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:41,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:41,790 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:41,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [379298833] [2022-11-03 02:39:41,790 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [379298833] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:41,791 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:41,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:39:41,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623294392] [2022-11-03 02:39:41,791 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:41,792 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:39:41,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:41,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:39:41,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:41,793 INFO L87 Difference]: Start difference. First operand 55 states and 70 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:41,833 INFO L93 Difference]: Finished difference Result 108 states and 139 transitions. [2022-11-03 02:39:41,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:39:41,834 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:39:41,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:41,835 INFO L225 Difference]: With dead ends: 108 [2022-11-03 02:39:41,835 INFO L226 Difference]: Without dead ends: 55 [2022-11-03 02:39:41,836 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:41,837 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 59 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:41,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 53 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:39:41,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-03 02:39:41,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2022-11-03 02:39:41,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 33 states have (on average 1.303030303030303) internal successors, (43), 42 states have internal predecessors, (43), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 02:39:41,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 69 transitions. [2022-11-03 02:39:41,848 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 69 transitions. Word has length 15 [2022-11-03 02:39:41,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:41,848 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 69 transitions. [2022-11-03 02:39:41,849 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:41,849 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 69 transitions. [2022-11-03 02:39:41,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:39:41,850 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:41,850 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:41,851 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:39:41,851 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:41,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:41,851 INFO L85 PathProgramCache]: Analyzing trace with hash -1698567583, now seen corresponding path program 1 times [2022-11-03 02:39:41,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:41,852 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542779716] [2022-11-03 02:39:41,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:41,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:41,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:41,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:41,946 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:41,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542779716] [2022-11-03 02:39:41,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542779716] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:41,947 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:41,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:39:41,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510816567] [2022-11-03 02:39:41,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:41,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:39:41,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:41,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:39:41,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:41,949 INFO L87 Difference]: Start difference. First operand 55 states and 69 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:39:42,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:42,019 INFO L93 Difference]: Finished difference Result 144 states and 185 transitions. [2022-11-03 02:39:42,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:39:42,019 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-03 02:39:42,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:42,021 INFO L225 Difference]: With dead ends: 144 [2022-11-03 02:39:42,021 INFO L226 Difference]: Without dead ends: 91 [2022-11-03 02:39:42,022 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:39:42,024 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 41 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:42,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 98 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:39:42,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-03 02:39:42,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 89. [2022-11-03 02:39:42,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 57 states have (on average 1.2456140350877194) internal successors, (71), 65 states have internal predecessors, (71), 16 states have call successors, (16), 15 states have call predecessors, (16), 15 states have return successors, (22), 14 states have call predecessors, (22), 16 states have call successors, (22) [2022-11-03 02:39:42,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 109 transitions. [2022-11-03 02:39:42,041 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 109 transitions. Word has length 25 [2022-11-03 02:39:42,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:42,041 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 109 transitions. [2022-11-03 02:39:42,041 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:39:42,041 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 109 transitions. [2022-11-03 02:39:42,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:39:42,042 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:42,042 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:42,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:39:42,043 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:42,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:42,043 INFO L85 PathProgramCache]: Analyzing trace with hash -2059081237, now seen corresponding path program 1 times [2022-11-03 02:39:42,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:42,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54480817] [2022-11-03 02:39:42,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:42,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:42,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:42,320 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:42,320 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:42,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54480817] [2022-11-03 02:39:42,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54480817] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:42,321 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:42,321 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:39:42,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252634560] [2022-11-03 02:39:42,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:42,322 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:39:42,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:42,323 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:39:42,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:39:42,323 INFO L87 Difference]: Start difference. First operand 89 states and 109 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:39:42,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:42,477 INFO L93 Difference]: Finished difference Result 250 states and 310 transitions. [2022-11-03 02:39:42,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:39:42,478 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-03 02:39:42,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:42,480 INFO L225 Difference]: With dead ends: 250 [2022-11-03 02:39:42,480 INFO L226 Difference]: Without dead ends: 163 [2022-11-03 02:39:42,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:39:42,483 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 79 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 85 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:42,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 186 Invalid, 85 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:39:42,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-03 02:39:42,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 134. [2022-11-03 02:39:42,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 134 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 97 states have internal predecessors, (104), 22 states have call successors, (22), 21 states have call predecessors, (22), 24 states have return successors, (31), 22 states have call predecessors, (31), 22 states have call successors, (31) [2022-11-03 02:39:42,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 157 transitions. [2022-11-03 02:39:42,527 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 157 transitions. Word has length 31 [2022-11-03 02:39:42,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:42,528 INFO L495 AbstractCegarLoop]: Abstraction has 134 states and 157 transitions. [2022-11-03 02:39:42,528 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:39:42,528 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 157 transitions. [2022-11-03 02:39:42,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:39:42,529 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:42,530 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:42,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:39:42,530 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:42,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:42,531 INFO L85 PathProgramCache]: Analyzing trace with hash 645372998, now seen corresponding path program 1 times [2022-11-03 02:39:42,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:42,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142496493] [2022-11-03 02:39:42,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:42,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:42,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:42,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:42,906 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:42,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142496493] [2022-11-03 02:39:42,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142496493] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:42,906 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:42,906 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 02:39:42,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982946019] [2022-11-03 02:39:42,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:42,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:39:42,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:42,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:39:42,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:39:42,913 INFO L87 Difference]: Start difference. First operand 134 states and 157 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 02:39:43,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:43,491 INFO L93 Difference]: Finished difference Result 330 states and 409 transitions. [2022-11-03 02:39:43,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:39:43,491 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 34 [2022-11-03 02:39:43,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:43,497 INFO L225 Difference]: With dead ends: 330 [2022-11-03 02:39:43,498 INFO L226 Difference]: Without dead ends: 243 [2022-11-03 02:39:43,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=146, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:39:43,507 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 168 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 443 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 527 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 443 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:43,511 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 290 Invalid, 527 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 443 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:39:43,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-11-03 02:39:43,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 216. [2022-11-03 02:39:43,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 141 states have (on average 1.198581560283688) internal successors, (169), 158 states have internal predecessors, (169), 36 states have call successors, (36), 31 states have call predecessors, (36), 38 states have return successors, (51), 37 states have call predecessors, (51), 36 states have call successors, (51) [2022-11-03 02:39:43,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 256 transitions. [2022-11-03 02:39:43,568 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 256 transitions. Word has length 34 [2022-11-03 02:39:43,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:43,569 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 256 transitions. [2022-11-03 02:39:43,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 02:39:43,570 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 256 transitions. [2022-11-03 02:39:43,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:39:43,579 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:43,581 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:43,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:39:43,583 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:43,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:43,583 INFO L85 PathProgramCache]: Analyzing trace with hash -1080450872, now seen corresponding path program 1 times [2022-11-03 02:39:43,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:43,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2008861375] [2022-11-03 02:39:43,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:43,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:43,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:43,749 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:39:43,750 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:43,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2008861375] [2022-11-03 02:39:43,750 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2008861375] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:43,751 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:43,751 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:39:43,751 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118857402] [2022-11-03 02:39:43,751 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:43,752 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:39:43,752 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:43,752 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:39:43,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:39:43,753 INFO L87 Difference]: Start difference. First operand 216 states and 256 transitions. Second operand has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-03 02:39:43,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:43,983 INFO L93 Difference]: Finished difference Result 569 states and 690 transitions. [2022-11-03 02:39:43,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:39:43,984 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 55 [2022-11-03 02:39:43,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:43,991 INFO L225 Difference]: With dead ends: 569 [2022-11-03 02:39:43,991 INFO L226 Difference]: Without dead ends: 475 [2022-11-03 02:39:43,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:39:43,996 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 64 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:43,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 315 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:39:43,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2022-11-03 02:39:44,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 435. [2022-11-03 02:39:44,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 435 states, 294 states have (on average 1.2108843537414966) internal successors, (356), 320 states have internal predecessors, (356), 65 states have call successors, (65), 57 states have call predecessors, (65), 75 states have return successors, (99), 73 states have call predecessors, (99), 65 states have call successors, (99) [2022-11-03 02:39:44,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 520 transitions. [2022-11-03 02:39:44,081 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 520 transitions. Word has length 55 [2022-11-03 02:39:44,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:44,082 INFO L495 AbstractCegarLoop]: Abstraction has 435 states and 520 transitions. [2022-11-03 02:39:44,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-03 02:39:44,082 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 520 transitions. [2022-11-03 02:39:44,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-03 02:39:44,084 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:44,084 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:44,084 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:39:44,084 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:44,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:44,085 INFO L85 PathProgramCache]: Analyzing trace with hash 1254073955, now seen corresponding path program 1 times [2022-11-03 02:39:44,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:44,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634498261] [2022-11-03 02:39:44,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:44,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:44,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:44,471 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:39:44,472 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:44,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [634498261] [2022-11-03 02:39:44,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [634498261] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:39:44,472 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:39:44,472 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-03 02:39:44,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240774058] [2022-11-03 02:39:44,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:39:44,473 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:39:44,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:44,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:39:44,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:39:44,474 INFO L87 Difference]: Start difference. First operand 435 states and 520 transitions. Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-03 02:39:45,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:45,328 INFO L93 Difference]: Finished difference Result 793 states and 984 transitions. [2022-11-03 02:39:45,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:39:45,329 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 58 [2022-11-03 02:39:45,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:45,333 INFO L225 Difference]: With dead ends: 793 [2022-11-03 02:39:45,333 INFO L226 Difference]: Without dead ends: 578 [2022-11-03 02:39:45,334 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=113, Invalid=267, Unknown=0, NotChecked=0, Total=380 [2022-11-03 02:39:45,335 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 176 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 423 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 423 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:45,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 191 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 423 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:39:45,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 578 states. [2022-11-03 02:39:45,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 578 to 523. [2022-11-03 02:39:45,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 523 states, 356 states have (on average 1.2387640449438202) internal successors, (441), 388 states have internal predecessors, (441), 77 states have call successors, (77), 63 states have call predecessors, (77), 89 states have return successors, (133), 88 states have call predecessors, (133), 77 states have call successors, (133) [2022-11-03 02:39:45,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 523 states and 651 transitions. [2022-11-03 02:39:45,454 INFO L78 Accepts]: Start accepts. Automaton has 523 states and 651 transitions. Word has length 58 [2022-11-03 02:39:45,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:45,454 INFO L495 AbstractCegarLoop]: Abstraction has 523 states and 651 transitions. [2022-11-03 02:39:45,454 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-03 02:39:45,455 INFO L276 IsEmpty]: Start isEmpty. Operand 523 states and 651 transitions. [2022-11-03 02:39:45,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-03 02:39:45,459 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:45,459 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:45,459 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:39:45,460 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:39:45,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:45,460 INFO L85 PathProgramCache]: Analyzing trace with hash 1807438632, now seen corresponding path program 1 times [2022-11-03 02:39:45,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:45,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [831212802] [2022-11-03 02:39:45,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:45,461 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:45,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:46,027 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:39:46,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:46,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [831212802] [2022-11-03 02:39:46,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [831212802] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:39:46,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1226136569] [2022-11-03 02:39:46,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:46,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:39:46,028 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:39:46,030 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:39:46,070 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:39:46,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:46,174 INFO L263 TraceCheckSpWp]: Trace formula consists of 427 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 02:39:46,180 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:39:46,532 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:39:46,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:39:47,162 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:39:47,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1226136569] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:39:47,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [495100061] [2022-11-03 02:39:47,185 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-11-03 02:39:47,186 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:39:47,189 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:39:47,195 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:39:47,196 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:39:56,110 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 307 for LOIs [2022-11-03 02:39:56,206 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 43 for LOIs [2022-11-03 02:39:56,498 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 40 for LOIs [2022-11-03 02:39:56,589 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 40 for LOIs [2022-11-03 02:39:56,765 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 22 for LOIs [2022-11-03 02:39:56,767 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2022-11-03 02:39:56,774 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 42 for LOIs [2022-11-03 02:39:56,780 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:40:03,385 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6749#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= ~methaneLevelCritical~0 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:40:03,386 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:40:03,386 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:40:03,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 11] total 27 [2022-11-03 02:40:03,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [572295792] [2022-11-03 02:40:03,386 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:40:03,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-03 02:40:03,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:03,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-03 02:40:03,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=378, Invalid=3282, Unknown=0, NotChecked=0, Total=3660 [2022-11-03 02:40:03,390 INFO L87 Difference]: Start difference. First operand 523 states and 651 transitions. Second operand has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) [2022-11-03 02:40:06,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:06,330 INFO L93 Difference]: Finished difference Result 1465 states and 1896 transitions. [2022-11-03 02:40:06,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-03 02:40:06,332 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) Word has length 61 [2022-11-03 02:40:06,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:06,343 INFO L225 Difference]: With dead ends: 1465 [2022-11-03 02:40:06,344 INFO L226 Difference]: Without dead ends: 1144 [2022-11-03 02:40:06,347 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 143 SyntacticMatches, 3 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3957 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=1169, Invalid=8931, Unknown=0, NotChecked=0, Total=10100 [2022-11-03 02:40:06,350 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 873 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 1351 mSolverCounterSat, 565 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 877 SdHoareTripleChecker+Valid, 510 SdHoareTripleChecker+Invalid, 1916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 565 IncrementalHoareTripleChecker+Valid, 1351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:06,350 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [877 Valid, 510 Invalid, 1916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [565 Valid, 1351 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-03 02:40:06,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1144 states. [2022-11-03 02:40:06,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1144 to 971. [2022-11-03 02:40:06,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 668 states have (on average 1.2035928143712575) internal successors, (804), 720 states have internal predecessors, (804), 135 states have call successors, (135), 109 states have call predecessors, (135), 167 states have return successors, (253), 167 states have call predecessors, (253), 135 states have call successors, (253) [2022-11-03 02:40:06,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1192 transitions. [2022-11-03 02:40:06,478 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1192 transitions. Word has length 61 [2022-11-03 02:40:06,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:06,479 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1192 transitions. [2022-11-03 02:40:06,479 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) [2022-11-03 02:40:06,479 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1192 transitions. [2022-11-03 02:40:06,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-03 02:40:06,482 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:06,482 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:06,519 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:06,704 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-03 02:40:06,705 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:06,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:06,705 INFO L85 PathProgramCache]: Analyzing trace with hash 704139109, now seen corresponding path program 1 times [2022-11-03 02:40:06,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:06,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326902277] [2022-11-03 02:40:06,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:06,706 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:06,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:06,882 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-11-03 02:40:06,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:06,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326902277] [2022-11-03 02:40:06,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326902277] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:06,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:40:06,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:40:06,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808161850] [2022-11-03 02:40:06,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:06,884 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:40:06,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:06,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:40:06,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:40:06,887 INFO L87 Difference]: Start difference. First operand 971 states and 1192 transitions. Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-11-03 02:40:07,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:07,076 INFO L93 Difference]: Finished difference Result 1029 states and 1269 transitions. [2022-11-03 02:40:07,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:40:07,076 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 95 [2022-11-03 02:40:07,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:07,081 INFO L225 Difference]: With dead ends: 1029 [2022-11-03 02:40:07,082 INFO L226 Difference]: Without dead ends: 1027 [2022-11-03 02:40:07,082 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:40:07,083 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 49 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:07,083 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 156 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:07,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1027 states. [2022-11-03 02:40:07,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1027 to 971. [2022-11-03 02:40:07,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 668 states have (on average 1.1826347305389222) internal successors, (790), 720 states have internal predecessors, (790), 135 states have call successors, (135), 109 states have call predecessors, (135), 167 states have return successors, (253), 167 states have call predecessors, (253), 135 states have call successors, (253) [2022-11-03 02:40:07,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1178 transitions. [2022-11-03 02:40:07,216 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1178 transitions. Word has length 95 [2022-11-03 02:40:07,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:07,216 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1178 transitions. [2022-11-03 02:40:07,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-11-03 02:40:07,217 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1178 transitions. [2022-11-03 02:40:07,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-03 02:40:07,220 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:07,220 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:07,220 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 02:40:07,220 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:07,221 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:07,221 INFO L85 PathProgramCache]: Analyzing trace with hash 1790035007, now seen corresponding path program 1 times [2022-11-03 02:40:07,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:07,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1647975332] [2022-11-03 02:40:07,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:07,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:07,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:07,574 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 15 proven. 43 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-03 02:40:07,575 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:07,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1647975332] [2022-11-03 02:40:07,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1647975332] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:07,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [982717534] [2022-11-03 02:40:07,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:07,575 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:07,576 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:07,579 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:07,587 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:40:07,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:07,726 INFO L263 TraceCheckSpWp]: Trace formula consists of 555 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-03 02:40:07,729 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:07,793 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 66 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:40:07,794 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:40:07,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [982717534] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:07,794 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:40:07,794 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [10] total 10 [2022-11-03 02:40:07,794 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1698650062] [2022-11-03 02:40:07,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:07,796 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:40:07,796 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:07,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:40:07,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:40:07,797 INFO L87 Difference]: Start difference. First operand 971 states and 1178 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-11-03 02:40:08,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:08,014 INFO L93 Difference]: Finished difference Result 1679 states and 2078 transitions. [2022-11-03 02:40:08,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:40:08,015 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 99 [2022-11-03 02:40:08,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:08,021 INFO L225 Difference]: With dead ends: 1679 [2022-11-03 02:40:08,021 INFO L226 Difference]: Without dead ends: 944 [2022-11-03 02:40:08,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:40:08,024 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 46 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:08,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 109 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:08,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 944 states. [2022-11-03 02:40:08,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 944 to 892. [2022-11-03 02:40:08,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 892 states, 608 states have (on average 1.15625) internal successors, (703), 655 states have internal predecessors, (703), 130 states have call successors, (130), 109 states have call predecessors, (130), 153 states have return successors, (198), 153 states have call predecessors, (198), 130 states have call successors, (198) [2022-11-03 02:40:08,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 892 states to 892 states and 1031 transitions. [2022-11-03 02:40:08,136 INFO L78 Accepts]: Start accepts. Automaton has 892 states and 1031 transitions. Word has length 99 [2022-11-03 02:40:08,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:08,138 INFO L495 AbstractCegarLoop]: Abstraction has 892 states and 1031 transitions. [2022-11-03 02:40:08,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-11-03 02:40:08,138 INFO L276 IsEmpty]: Start isEmpty. Operand 892 states and 1031 transitions. [2022-11-03 02:40:08,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-03 02:40:08,146 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:08,146 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:08,180 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:08,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-03 02:40:08,363 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:08,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:08,363 INFO L85 PathProgramCache]: Analyzing trace with hash 1255222083, now seen corresponding path program 2 times [2022-11-03 02:40:08,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:08,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071835060] [2022-11-03 02:40:08,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:08,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:08,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:09,230 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 32 proven. 19 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-03 02:40:09,230 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:09,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071835060] [2022-11-03 02:40:09,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071835060] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:09,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1024982934] [2022-11-03 02:40:09,231 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:40:09,231 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:09,231 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:09,235 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:09,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:40:09,352 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:40:09,352 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:40:09,354 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-03 02:40:09,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:09,453 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 66 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 02:40:09,453 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:40:09,453 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1024982934] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:09,454 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:40:09,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 18 [2022-11-03 02:40:09,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894193661] [2022-11-03 02:40:09,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:09,455 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:40:09,455 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:09,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:40:09,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=244, Unknown=0, NotChecked=0, Total=306 [2022-11-03 02:40:09,456 INFO L87 Difference]: Start difference. First operand 892 states and 1031 transitions. Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-03 02:40:09,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:09,718 INFO L93 Difference]: Finished difference Result 1758 states and 2082 transitions. [2022-11-03 02:40:09,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:40:09,719 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 103 [2022-11-03 02:40:09,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:09,724 INFO L225 Difference]: With dead ends: 1758 [2022-11-03 02:40:09,724 INFO L226 Difference]: Without dead ends: 1066 [2022-11-03 02:40:09,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 111 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=72, Invalid=308, Unknown=0, NotChecked=0, Total=380 [2022-11-03 02:40:09,730 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 56 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:09,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 309 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:09,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1066 states. [2022-11-03 02:40:09,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1066 to 1020. [2022-11-03 02:40:09,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1020 states, 697 states have (on average 1.1477761836441893) internal successors, (800), 752 states have internal predecessors, (800), 152 states have call successors, (152), 124 states have call predecessors, (152), 170 states have return successors, (228), 169 states have call predecessors, (228), 152 states have call successors, (228) [2022-11-03 02:40:09,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1020 states to 1020 states and 1180 transitions. [2022-11-03 02:40:09,871 INFO L78 Accepts]: Start accepts. Automaton has 1020 states and 1180 transitions. Word has length 103 [2022-11-03 02:40:09,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:09,872 INFO L495 AbstractCegarLoop]: Abstraction has 1020 states and 1180 transitions. [2022-11-03 02:40:09,872 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-03 02:40:09,872 INFO L276 IsEmpty]: Start isEmpty. Operand 1020 states and 1180 transitions. [2022-11-03 02:40:09,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-03 02:40:09,875 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:09,875 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:09,913 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:10,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:10,103 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:10,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:10,103 INFO L85 PathProgramCache]: Analyzing trace with hash 251448026, now seen corresponding path program 2 times [2022-11-03 02:40:10,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:10,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [511618289] [2022-11-03 02:40:10,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:10,104 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:10,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:11,685 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 16 proven. 97 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-03 02:40:11,685 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:11,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [511618289] [2022-11-03 02:40:11,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [511618289] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:11,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1154037484] [2022-11-03 02:40:11,686 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:40:11,686 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:11,686 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:11,687 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:11,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:40:11,783 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-03 02:40:11,783 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:40:11,785 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-03 02:40:11,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:11,898 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-11-03 02:40:11,899 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:40:11,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1154037484] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:11,899 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:40:11,899 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [28] total 31 [2022-11-03 02:40:11,902 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [562965726] [2022-11-03 02:40:11,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:11,903 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:40:11,903 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:11,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:40:11,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=819, Unknown=0, NotChecked=0, Total=930 [2022-11-03 02:40:11,904 INFO L87 Difference]: Start difference. First operand 1020 states and 1180 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:40:12,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:12,138 INFO L93 Difference]: Finished difference Result 1760 states and 2036 transitions. [2022-11-03 02:40:12,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:40:12,139 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 121 [2022-11-03 02:40:12,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:12,145 INFO L225 Difference]: With dead ends: 1760 [2022-11-03 02:40:12,145 INFO L226 Difference]: Without dead ends: 944 [2022-11-03 02:40:12,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 347 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=124, Invalid=932, Unknown=0, NotChecked=0, Total=1056 [2022-11-03 02:40:12,148 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 23 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:12,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 242 Invalid, 107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:12,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 944 states. [2022-11-03 02:40:12,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 944 to 944. [2022-11-03 02:40:12,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 944 states, 644 states have (on average 1.1366459627329193) internal successors, (732), 693 states have internal predecessors, (732), 140 states have call successors, (140), 119 states have call predecessors, (140), 159 states have return successors, (202), 156 states have call predecessors, (202), 140 states have call successors, (202) [2022-11-03 02:40:12,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 944 states to 944 states and 1074 transitions. [2022-11-03 02:40:12,261 INFO L78 Accepts]: Start accepts. Automaton has 944 states and 1074 transitions. Word has length 121 [2022-11-03 02:40:12,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:12,262 INFO L495 AbstractCegarLoop]: Abstraction has 944 states and 1074 transitions. [2022-11-03 02:40:12,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:40:12,262 INFO L276 IsEmpty]: Start isEmpty. Operand 944 states and 1074 transitions. [2022-11-03 02:40:12,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-11-03 02:40:12,265 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:12,265 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:12,300 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:12,490 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:12,490 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:12,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:12,490 INFO L85 PathProgramCache]: Analyzing trace with hash 783379550, now seen corresponding path program 2 times [2022-11-03 02:40:12,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:12,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714694557] [2022-11-03 02:40:12,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:12,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:12,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:13,027 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 38 proven. 71 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-03 02:40:13,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:13,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714694557] [2022-11-03 02:40:13,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714694557] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:13,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [931219077] [2022-11-03 02:40:13,028 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:40:13,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:13,028 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:13,031 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:13,039 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:40:13,153 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:40:13,153 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:40:13,156 INFO L263 TraceCheckSpWp]: Trace formula consists of 450 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-03 02:40:13,159 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:13,381 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 76 proven. 9 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-11-03 02:40:13,381 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:40:13,986 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 56 proven. 7 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-11-03 02:40:13,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [931219077] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:40:13,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [445227631] [2022-11-03 02:40:13,990 INFO L159 IcfgInterpreter]: Started Sifa with 53 locations of interest [2022-11-03 02:40:13,990 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:40:13,990 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:40:13,990 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:40:13,991 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:40:24,762 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 305 for LOIs [2022-11-03 02:40:24,818 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-03 02:40:24,963 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 47 for LOIs [2022-11-03 02:40:25,273 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 58 for LOIs [2022-11-03 02:40:25,631 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 49 for LOIs [2022-11-03 02:40:25,643 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 23 for LOIs [2022-11-03 02:40:25,646 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 34 for LOIs [2022-11-03 02:40:25,648 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 24 for LOIs [2022-11-03 02:40:25,650 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:40:34,009 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27918#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= ~methaneLevelCritical~0 1) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:40:34,009 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:40:34,009 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:40:34,009 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 9] total 27 [2022-11-03 02:40:34,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1596507502] [2022-11-03 02:40:34,009 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:40:34,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-03 02:40:34,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:34,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-03 02:40:34,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=394, Invalid=3766, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:40:34,013 INFO L87 Difference]: Start difference. First operand 944 states and 1074 transitions. Second operand has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) [2022-11-03 02:40:37,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:37,873 INFO L93 Difference]: Finished difference Result 1976 states and 2355 transitions. [2022-11-03 02:40:37,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-03 02:40:37,874 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) Word has length 125 [2022-11-03 02:40:37,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:37,875 INFO L225 Difference]: With dead ends: 1976 [2022-11-03 02:40:37,875 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:40:37,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 465 GetRequests, 342 SyntacticMatches, 0 SemanticMatches, 123 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5078 ImplicationChecksByTransitivity, 10.6s TimeCoverageRelationStatistics Valid=1603, Invalid=13897, Unknown=0, NotChecked=0, Total=15500 [2022-11-03 02:40:37,884 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 1242 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 2084 mSolverCounterSat, 1065 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1242 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 3149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1065 IncrementalHoareTripleChecker+Valid, 2084 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:37,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1242 Valid, 356 Invalid, 3149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1065 Valid, 2084 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-03 02:40:37,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:40:37,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:40:37,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:37,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:40:37,886 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2022-11-03 02:40:37,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:37,886 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:40:37,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) [2022-11-03 02:40:37,887 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:40:37,887 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:40:37,889 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:40:37,929 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:38,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-03 02:40:38,104 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:40:46,663 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 245 252) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (= |old(~pumpRunning~0)| 0)) [2022-11-03 02:40:46,663 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 245 252) no Hoare annotation was computed. [2022-11-03 02:40:46,663 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 135 141) no Hoare annotation was computed. [2022-11-03 02:40:46,663 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 135 141) the Hoare annotation is: true [2022-11-03 02:40:46,664 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 443 454) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 2 ~waterLevel~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse1 .cse2 .cse3))) [2022-11-03 02:40:46,664 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 443 454) no Hoare annotation was computed. [2022-11-03 02:40:46,664 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 913 942) no Hoare annotation was computed. [2022-11-03 02:40:46,664 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-11-03 02:40:46,664 INFO L902 garLoopResultBuilder]: At program point L927-1(lines 927 931) the Hoare annotation is: true [2022-11-03 02:40:46,664 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 913 942) the Hoare annotation is: true [2022-11-03 02:40:46,665 INFO L902 garLoopResultBuilder]: At program point L923-2(lines 923 937) the Hoare annotation is: true [2022-11-03 02:40:46,665 INFO L902 garLoopResultBuilder]: At program point L919(line 919) the Hoare annotation is: true [2022-11-03 02:40:46,665 INFO L899 garLoopResultBuilder]: For program point L919-1(line 919) no Hoare annotation was computed. [2022-11-03 02:40:46,665 INFO L902 garLoopResultBuilder]: At program point L938(lines 913 942) the Hoare annotation is: true [2022-11-03 02:40:46,665 INFO L899 garLoopResultBuilder]: For program point L934(line 934) no Hoare annotation was computed. [2022-11-03 02:40:46,665 INFO L895 garLoopResultBuilder]: At program point L122-1(lines 122 128) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse9 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (<= 2 ~waterLevel~0) .cse11 .cse3)) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (not .cse11)) (.cse5 (and .cse10 (<= 1 ~waterLevel~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse1 .cse8 .cse9) (or .cse1 .cse8 .cse3 .cse9) (or .cse0 .cse10 .cse1 .cse4 .cse2) (or .cse7 .cse1 .cse5 .cse6)))) [2022-11-03 02:40:46,666 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~2#1| 0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-03 02:40:46,666 INFO L895 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-03 02:40:46,666 INFO L895 garLoopResultBuilder]: At program point L201(line 201) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-03 02:40:46,666 INFO L899 garLoopResultBuilder]: For program point L201-1(line 201) no Hoare annotation was computed. [2022-11-03 02:40:46,667 INFO L895 garLoopResultBuilder]: At program point L214(line 214) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-03 02:40:46,667 INFO L895 garLoopResultBuilder]: At program point L214-1(lines 195 219) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse9 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (<= 2 ~waterLevel~0) .cse11 .cse3)) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (not .cse11)) (.cse5 (and .cse10 (<= 1 ~waterLevel~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse1 .cse8 .cse9) (or .cse1 .cse8 .cse3 .cse9) (or .cse0 .cse10 .cse1 .cse4 .cse2) (or .cse7 .cse1 .cse5 .cse6)))) [2022-11-03 02:40:46,667 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 538) no Hoare annotation was computed. [2022-11-03 02:40:46,667 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 114 133) no Hoare annotation was computed. [2022-11-03 02:40:46,668 INFO L895 garLoopResultBuilder]: At program point L528(lines 528 541) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 1)) (.cse11 (= ~waterLevel~0 1))) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse6 (and .cse10 .cse11)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= ~pumpRunning~0 0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (and .cse1 .cse2)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 .cse1 .cse2) .cse3 (and .cse4 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|) (<= 1 ~waterLevel~0)) .cse5) (or .cse3 .cse6 .cse7 .cse8) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse3 .cse6 .cse8) (or .cse9 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse4 .cse10 .cse11)) (or .cse9 .cse3 .cse7 .cse5)))) [2022-11-03 02:40:46,668 INFO L895 garLoopResultBuilder]: At program point L528-1(lines 520 544) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 1)) (.cse7 (= ~waterLevel~0 1))) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse9 (and .cse12 .cse7)) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse2 (and .cse5 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|) .cse6 (<= 1 ~waterLevel~0) (or .cse4 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse10 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse6))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and .cse5 .cse6 .cse7) .cse8 .cse1) (or .cse1 .cse9 .cse10 .cse11) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 .cse9 .cse11) (or .cse1 .cse10 .cse2 .cse3) (or .cse4 .cse1 .cse10 .cse3) (or .cse4 .cse8 .cse1 .cse12)))) [2022-11-03 02:40:46,668 INFO L895 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-03 02:40:46,668 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 211) no Hoare annotation was computed. [2022-11-03 02:40:46,669 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 216) no Hoare annotation was computed. [2022-11-03 02:40:46,669 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 111 134) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-03 02:40:46,669 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 111 134) no Hoare annotation was computed. [2022-11-03 02:40:46,669 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-03 02:40:46,669 INFO L895 garLoopResultBuilder]: At program point L407(lines 360 408) the Hoare annotation is: false [2022-11-03 02:40:46,669 INFO L899 garLoopResultBuilder]: For program point L362(lines 361 406) no Hoare annotation was computed. [2022-11-03 02:40:46,670 INFO L895 garLoopResultBuilder]: At program point L994(lines 994 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-03 02:40:46,670 INFO L902 garLoopResultBuilder]: At program point L994-2(lines 994 1001) the Hoare annotation is: true [2022-11-03 02:40:46,670 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3))) [2022-11-03 02:40:46,670 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:40:46,670 INFO L895 garLoopResultBuilder]: At program point L404(lines 361 406) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse2 .cse3 .cse4) (and .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3))) [2022-11-03 02:40:46,671 INFO L899 garLoopResultBuilder]: For program point L371(lines 371 377) no Hoare annotation was computed. [2022-11-03 02:40:46,671 INFO L899 garLoopResultBuilder]: For program point L371-1(lines 371 377) no Hoare annotation was computed. [2022-11-03 02:40:46,671 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:40:46,671 INFO L895 garLoopResultBuilder]: At program point L397-2(lines 391 402) the Hoare annotation is: (let ((.cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse5 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse5 .cse1 .cse2 .cse3))) [2022-11-03 02:40:46,671 INFO L899 garLoopResultBuilder]: For program point L381(lines 381 387) no Hoare annotation was computed. [2022-11-03 02:40:46,671 INFO L899 garLoopResultBuilder]: For program point L381-1(lines 381 387) no Hoare annotation was computed. [2022-11-03 02:40:46,672 INFO L902 garLoopResultBuilder]: At program point L410(lines 351 414) the Hoare annotation is: true [2022-11-03 02:40:46,672 INFO L895 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse2 .cse3 .cse4) (and .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3))) [2022-11-03 02:40:46,672 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 143 167) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,672 INFO L895 garLoopResultBuilder]: At program point L157(line 157) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))))) [2022-11-03 02:40:46,672 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 159) no Hoare annotation was computed. [2022-11-03 02:40:46,673 INFO L895 garLoopResultBuilder]: At program point L147(lines 147 164) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,673 INFO L895 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,673 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 143 167) no Hoare annotation was computed. [2022-11-03 02:40:46,673 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 143 167) no Hoare annotation was computed. [2022-11-03 02:40:46,674 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1))))) [2022-11-03 02:40:46,674 INFO L895 garLoopResultBuilder]: At program point L233-1(line 233) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))) [2022-11-03 02:40:46,674 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 431 442) no Hoare annotation was computed. [2022-11-03 02:40:46,674 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 431 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-03 02:40:46,675 INFO L895 garLoopResultBuilder]: At program point L188(line 188) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or (= ~pumpRunning~0 0) .cse0 .cse1) (or .cse0 .cse1 (= |old(~pumpRunning~0)| 0)))) [2022-11-03 02:40:46,675 INFO L899 garLoopResultBuilder]: For program point L188-1(lines 169 193) no Hoare annotation was computed. [2022-11-03 02:40:46,675 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,675 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-03 02:40:46,675 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 185) no Hoare annotation was computed. [2022-11-03 02:40:46,676 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 169 193) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,676 INFO L895 garLoopResultBuilder]: At program point L173(lines 173 190) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-03 02:40:46,676 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 169 193) no Hoare annotation was computed. [2022-11-03 02:40:46,687 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 253 263) the Hoare annotation is: true [2022-11-03 02:40:46,687 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 253 263) no Hoare annotation was computed. [2022-11-03 02:40:46,691 INFO L444 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:46,706 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:40:46,736 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:40:46 BoogieIcfgContainer [2022-11-03 02:40:46,747 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:40:46,748 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:40:46,748 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:40:46,748 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:40:46,749 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:39:40" (3/4) ... [2022-11-03 02:40:46,752 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:40:46,758 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-03 02:40:46,758 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:40:46,758 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:40:46,758 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:40:46,758 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:40:46,759 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:40:46,759 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:40:46,759 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-03 02:40:46,759 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-03 02:40:46,777 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 80 nodes and edges [2022-11-03 02:40:46,780 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2022-11-03 02:40:46,780 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-03 02:40:46,781 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:40:46,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:40:46,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:40:46,783 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:40:46,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || ((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) [2022-11-03 02:40:46,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-03 02:40:46,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-03 02:40:46,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-03 02:40:46,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= waterLevel) [2022-11-03 02:40:46,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel) [2022-11-03 02:40:46,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methaneLevelCritical == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || (tmp == 1 && waterLevel == 1)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp == 1 && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-03 02:40:46,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || (tmp == 1 && waterLevel == 1)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp == 1 && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || ((((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || tmp == 1) [2022-11-03 02:40:46,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && tmp == 1) && aux-isMethaneAlarm()-aux == methaneLevelCritical) [2022-11-03 02:40:46,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-03 02:40:46,866 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:40:46,866 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:40:46,867 INFO L158 Benchmark]: Toolchain (without parser) took 67638.02ms. Allocated memory was 94.4MB in the beginning and 847.2MB in the end (delta: 752.9MB). Free memory was 59.5MB in the beginning and 402.6MB in the end (delta: -343.1MB). Peak memory consumption was 408.7MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,867 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 94.4MB. Free memory was 64.8MB in the beginning and 64.7MB in the end (delta: 27.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:40:46,868 INFO L158 Benchmark]: CACSL2BoogieTranslator took 567.65ms. Allocated memory was 94.4MB in the beginning and 123.7MB in the end (delta: 29.4MB). Free memory was 59.2MB in the beginning and 90.8MB in the end (delta: -31.7MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,868 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.47ms. Allocated memory is still 123.7MB. Free memory was 90.8MB in the beginning and 88.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,869 INFO L158 Benchmark]: Boogie Preprocessor took 31.30ms. Allocated memory is still 123.7MB. Free memory was 88.3MB in the beginning and 86.3MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,870 INFO L158 Benchmark]: RCFGBuilder took 798.24ms. Allocated memory is still 123.7MB. Free memory was 86.3MB in the beginning and 85.4MB in the end (delta: 872.8kB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,870 INFO L158 Benchmark]: TraceAbstraction took 66029.36ms. Allocated memory was 123.7MB in the beginning and 847.2MB in the end (delta: 723.5MB). Free memory was 84.9MB in the beginning and 408.9MB in the end (delta: -324.0MB). Peak memory consumption was 507.0MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,871 INFO L158 Benchmark]: Witness Printer took 118.57ms. Allocated memory is still 847.2MB. Free memory was 408.9MB in the beginning and 402.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:40:46,875 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 94.4MB. Free memory was 64.8MB in the beginning and 64.7MB in the end (delta: 27.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 567.65ms. Allocated memory was 94.4MB in the beginning and 123.7MB in the end (delta: 29.4MB). Free memory was 59.2MB in the beginning and 90.8MB in the end (delta: -31.7MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.47ms. Allocated memory is still 123.7MB. Free memory was 90.8MB in the beginning and 88.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.30ms. Allocated memory is still 123.7MB. Free memory was 88.3MB in the beginning and 86.3MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 798.24ms. Allocated memory is still 123.7MB. Free memory was 86.3MB in the beginning and 85.4MB in the end (delta: 872.8kB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. * TraceAbstraction took 66029.36ms. Allocated memory was 123.7MB in the beginning and 847.2MB in the end (delta: 723.5MB). Free memory was 84.9MB in the beginning and 408.9MB in the end (delta: -324.0MB). Peak memory consumption was 507.0MB. Max. memory is 16.1GB. * Witness Printer took 118.57ms. Allocated memory is still 847.2MB. Free memory was 408.9MB in the beginning and 402.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 68 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 65.9s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 10.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2922 SdHoareTripleChecker+Valid, 4.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2883 mSDsluCounter, 2985 SdHoareTripleChecker+Invalid, 3.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2496 mSDsCounter, 1915 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4979 IncrementalHoareTripleChecker+Invalid, 6894 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1915 mSolverCounterUnsat, 993 mSDtfsCounter, 4979 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1183 GetRequests, 851 SyntacticMatches, 3 SemanticMatches, 329 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9589 ImplicationChecksByTransitivity, 20.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1020occurred in iteration=12, InterpolantAutomatonStates: 194, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 14 MinimizatonAttempts, 480 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 3121 PreInvPairs, 3521 NumberOfFragments, 1314 HoareAnnotationTreeSize, 3121 FomulaSimplifications, 26677 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 40 FomulaSimplificationsInter, 60095 FormulaSimplificationTreeSizeReductionInter, 7.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 7.4s InterpolantComputationTime, 1356 NumberOfCodeBlocks, 1175 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1521 ConstructedInterpolants, 0 QuantifiedInterpolants, 4713 SizeOfPredicates, 46 NumberOfNonLiveVariables, 2233 ConjunctsInSsa, 122 ConjunctsInUnsatCore, 21 InterpolantComputations, 12 PerfectInterpolantSequences, 823/1099 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel) - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: (pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= waterLevel) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || (tmp == 1 && waterLevel == 1)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp == 1 && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || ((((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || tmp == 1) - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && tmp == 1) && aux-isMethaneAlarm()-aux == methaneLevelCritical) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || (tmp == 1 && waterLevel == 1)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp == 1 && waterLevel == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || ((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 923]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:40:46,953 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e7aa82cd-44b5-4aa7-b202-0fd4cf215bfe/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE