./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fff07e5b9817da9e6fd154070162cff001ebe527349ae31a2f1e574ef0fb9f98 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:19:34,411 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:19:34,414 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:19:34,461 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:19:34,461 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:19:34,466 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:19:34,469 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:19:34,474 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:19:34,475 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:19:34,476 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:19:34,477 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:19:34,478 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:19:34,479 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:19:34,480 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:19:34,481 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:19:34,482 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:19:34,483 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:19:34,484 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:19:34,486 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:19:34,500 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:19:34,504 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:19:34,508 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:19:34,509 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:19:34,510 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:19:34,514 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:19:34,514 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:19:34,515 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:19:34,516 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:19:34,516 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:19:34,517 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:19:34,518 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:19:34,526 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:19:34,528 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:19:34,529 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:19:34,532 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:19:34,532 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:19:34,533 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:19:34,534 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:19:34,534 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:19:34,535 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:19:34,536 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:19:34,536 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:19:34,581 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:19:34,582 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:19:34,586 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:19:34,587 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:19:34,588 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:19:34,588 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:19:34,588 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:19:34,588 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:19:34,589 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:19:34,589 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:19:34,590 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:19:34,590 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:19:34,590 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:19:34,591 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:19:34,591 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:19:34,591 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:19:34,591 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:19:34,592 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:19:34,592 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:19:34,592 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:19:34,593 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:19:34,593 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:19:34,593 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:19:34,594 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:19:34,594 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:19:34,594 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:19:34,594 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:19:34,595 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:19:34,595 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:19:34,595 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:19:34,595 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:19:34,596 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:19:34,596 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:19:34,596 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:19:34,596 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:19:34,597 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:19:34,597 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:19:34,597 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:19:34,597 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:19:34,597 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:19:34,598 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:19:34,598 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fff07e5b9817da9e6fd154070162cff001ebe527349ae31a2f1e574ef0fb9f98 [2022-11-03 02:19:34,862 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:19:34,889 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:19:34,892 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:19:34,893 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:19:34,894 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:19:34,896 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c [2022-11-03 02:19:34,974 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/data/bc2bb2b13/505026022ec84e03861d1d61fc853dc6/FLAG428c274af [2022-11-03 02:19:35,494 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:19:35,495 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c [2022-11-03 02:19:35,506 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/data/bc2bb2b13/505026022ec84e03861d1d61fc853dc6/FLAG428c274af [2022-11-03 02:19:35,963 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/data/bc2bb2b13/505026022ec84e03861d1d61fc853dc6 [2022-11-03 02:19:35,968 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:19:35,970 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:19:35,973 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:19:35,974 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:19:35,977 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:19:35,978 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:19:35" (1/1) ... [2022-11-03 02:19:35,979 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d5bfdc8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:35, skipping insertion in model container [2022-11-03 02:19:35,980 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:19:35" (1/1) ... [2022-11-03 02:19:35,989 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:19:36,037 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:19:36,465 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c[16170,16183] [2022-11-03 02:19:36,476 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:19:36,485 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:19:36,538 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/sv-benchmarks/c/product-lines/minepump_spec5_product33.cil.c[16170,16183] [2022-11-03 02:19:36,545 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:19:36,561 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:19:36,562 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36 WrapperNode [2022-11-03 02:19:36,562 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:19:36,563 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:19:36,563 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:19:36,564 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:19:36,571 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,584 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,610 INFO L138 Inliner]: procedures = 54, calls = 152, calls flagged for inlining = 22, calls inlined = 18, statements flattened = 228 [2022-11-03 02:19:36,610 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:19:36,611 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:19:36,611 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:19:36,611 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:19:36,621 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,621 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,624 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,624 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,630 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,635 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,637 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,638 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,641 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:19:36,642 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:19:36,642 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:19:36,642 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:19:36,643 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (1/1) ... [2022-11-03 02:19:36,667 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:19:36,681 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:19:36,696 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:19:36,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:19:36,733 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:19:36,733 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:19:36,733 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:19:36,734 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:19:36,734 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:19:36,734 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:19:36,734 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:19:36,734 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:19:36,734 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:19:36,734 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-03 02:19:36,735 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-03 02:19:36,735 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:19:36,735 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:19:36,735 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:19:36,735 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:19:36,735 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:19:36,820 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:19:36,822 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:19:37,179 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:19:37,321 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:19:37,321 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:19:37,324 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:19:37 BoogieIcfgContainer [2022-11-03 02:19:37,324 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:19:37,327 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:19:37,327 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:19:37,331 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:19:37,331 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:19:35" (1/3) ... [2022-11-03 02:19:37,332 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a185336 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:19:37, skipping insertion in model container [2022-11-03 02:19:37,332 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:19:36" (2/3) ... [2022-11-03 02:19:37,332 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a185336 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:19:37, skipping insertion in model container [2022-11-03 02:19:37,332 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:19:37" (3/3) ... [2022-11-03 02:19:37,334 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product33.cil.c [2022-11-03 02:19:37,353 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:19:37,353 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:19:37,405 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:19:37,413 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5265e5fd, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:19:37,413 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:19:37,418 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 02:19:37,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 02:19:37,427 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:37,428 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:37,429 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:37,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:37,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1112445725, now seen corresponding path program 1 times [2022-11-03 02:19:37,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:37,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [765350545] [2022-11-03 02:19:37,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:37,453 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:37,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:37,727 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:19:37,727 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:37,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [765350545] [2022-11-03 02:19:37,729 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [765350545] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:37,730 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:37,730 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:19:37,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [624593351] [2022-11-03 02:19:37,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:37,738 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:19:37,740 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:37,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:19:37,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:19:37,780 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:19:37,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:37,880 INFO L93 Difference]: Finished difference Result 100 states and 135 transitions. [2022-11-03 02:19:37,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:19:37,882 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2022-11-03 02:19:37,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:37,897 INFO L225 Difference]: With dead ends: 100 [2022-11-03 02:19:37,898 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:19:37,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:19:37,908 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:37,911 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 49 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:19:37,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:19:37,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 02:19:37,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3) internal successors, (39), 35 states have internal predecessors, (39), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:19:37,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2022-11-03 02:19:37,976 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 21 [2022-11-03 02:19:37,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:37,977 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2022-11-03 02:19:37,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:19:37,979 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2022-11-03 02:19:37,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-03 02:19:37,984 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:37,984 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:37,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:19:37,985 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:37,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:37,987 INFO L85 PathProgramCache]: Analyzing trace with hash 39519704, now seen corresponding path program 1 times [2022-11-03 02:19:37,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:37,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [571317060] [2022-11-03 02:19:37,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:37,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:38,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:38,301 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:19:38,301 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:38,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [571317060] [2022-11-03 02:19:38,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [571317060] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:38,302 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:38,302 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:19:38,302 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [647103950] [2022-11-03 02:19:38,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:38,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:19:38,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:38,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:19:38,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:19:38,307 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:19:38,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:38,447 INFO L93 Difference]: Finished difference Result 90 states and 117 transitions. [2022-11-03 02:19:38,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:19:38,452 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2022-11-03 02:19:38,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:38,458 INFO L225 Difference]: With dead ends: 90 [2022-11-03 02:19:38,458 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:19:38,464 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:19:38,465 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 52 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:38,465 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 57 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:19:38,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:19:38,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 02:19:38,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 35 states have internal predecessors, (38), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:19:38,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-11-03 02:19:38,482 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 24 [2022-11-03 02:19:38,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:38,484 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-11-03 02:19:38,485 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:19:38,485 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-11-03 02:19:38,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:19:38,488 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:38,488 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:38,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:19:38,489 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:38,491 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:38,491 INFO L85 PathProgramCache]: Analyzing trace with hash 1697461728, now seen corresponding path program 1 times [2022-11-03 02:19:38,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:38,492 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353059134] [2022-11-03 02:19:38,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:38,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:38,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:38,604 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:19:38,605 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:38,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353059134] [2022-11-03 02:19:38,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353059134] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:38,606 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:38,606 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:19:38,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [777331045] [2022-11-03 02:19:38,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:38,607 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:19:38,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:38,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:19:38,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:19:38,609 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:19:38,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:38,674 INFO L93 Difference]: Finished difference Result 69 states and 85 transitions. [2022-11-03 02:19:38,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:19:38,674 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-03 02:19:38,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:38,677 INFO L225 Difference]: With dead ends: 69 [2022-11-03 02:19:38,677 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 02:19:38,681 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:19:38,683 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:38,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:19:38,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 02:19:38,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 02:19:38,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.28) internal successors, (32), 30 states have internal predecessors, (32), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 02:19:38,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 46 transitions. [2022-11-03 02:19:38,691 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 46 transitions. Word has length 25 [2022-11-03 02:19:38,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:38,692 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 46 transitions. [2022-11-03 02:19:38,692 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:19:38,692 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 46 transitions. [2022-11-03 02:19:38,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:19:38,693 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:38,693 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:38,693 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:19:38,694 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:38,694 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:38,694 INFO L85 PathProgramCache]: Analyzing trace with hash -1484265307, now seen corresponding path program 1 times [2022-11-03 02:19:38,694 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:38,695 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1231221052] [2022-11-03 02:19:38,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:38,695 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:38,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:39,100 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:19:39,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:39,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1231221052] [2022-11-03 02:19:39,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1231221052] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:39,101 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:39,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:19:39,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [266192089] [2022-11-03 02:19:39,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:39,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:19:39,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:39,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:19:39,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:19:39,104 INFO L87 Difference]: Start difference. First operand 38 states and 46 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:19:39,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:39,242 INFO L93 Difference]: Finished difference Result 119 states and 147 transitions. [2022-11-03 02:19:39,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:19:39,243 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 27 [2022-11-03 02:19:39,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:39,244 INFO L225 Difference]: With dead ends: 119 [2022-11-03 02:19:39,244 INFO L226 Difference]: Without dead ends: 83 [2022-11-03 02:19:39,245 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:19:39,246 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 63 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:39,246 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 177 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:19:39,247 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-03 02:19:39,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 68. [2022-11-03 02:19:39,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 46 states have (on average 1.2608695652173914) internal successors, (58), 52 states have internal predecessors, (58), 12 states have call successors, (12), 9 states have call predecessors, (12), 9 states have return successors, (12), 11 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-03 02:19:39,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 82 transitions. [2022-11-03 02:19:39,261 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 82 transitions. Word has length 27 [2022-11-03 02:19:39,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:39,262 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 82 transitions. [2022-11-03 02:19:39,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:19:39,262 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 82 transitions. [2022-11-03 02:19:39,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 02:19:39,263 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:39,263 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:39,264 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:19:39,264 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:39,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:39,264 INFO L85 PathProgramCache]: Analyzing trace with hash 191376061, now seen corresponding path program 1 times [2022-11-03 02:19:39,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:39,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1771104435] [2022-11-03 02:19:39,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:39,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:39,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:39,434 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:19:39,435 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:39,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1771104435] [2022-11-03 02:19:39,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1771104435] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:39,437 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:39,438 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:19:39,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [820872378] [2022-11-03 02:19:39,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:39,440 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:19:39,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:39,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:19:39,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:19:39,441 INFO L87 Difference]: Start difference. First operand 68 states and 82 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:19:39,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:39,607 INFO L93 Difference]: Finished difference Result 169 states and 208 transitions. [2022-11-03 02:19:39,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:19:39,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-03 02:19:39,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:39,610 INFO L225 Difference]: With dead ends: 169 [2022-11-03 02:19:39,610 INFO L226 Difference]: Without dead ends: 103 [2022-11-03 02:19:39,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:19:39,620 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 19 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:39,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 183 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:19:39,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-11-03 02:19:39,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 97. [2022-11-03 02:19:39,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 65 states have (on average 1.2) internal successors, (78), 72 states have internal predecessors, (78), 17 states have call successors, (17), 14 states have call predecessors, (17), 14 states have return successors, (19), 17 states have call predecessors, (19), 17 states have call successors, (19) [2022-11-03 02:19:39,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 114 transitions. [2022-11-03 02:19:39,652 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 114 transitions. Word has length 30 [2022-11-03 02:19:39,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:39,653 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 114 transitions. [2022-11-03 02:19:39,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:19:39,653 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 114 transitions. [2022-11-03 02:19:39,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 02:19:39,660 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:39,660 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:39,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:19:39,661 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:39,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:39,661 INFO L85 PathProgramCache]: Analyzing trace with hash 914518043, now seen corresponding path program 1 times [2022-11-03 02:19:39,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:39,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756216597] [2022-11-03 02:19:39,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:39,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:39,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:39,988 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:19:39,988 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:39,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756216597] [2022-11-03 02:19:39,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1756216597] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:39,989 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:39,989 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 02:19:39,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937302315] [2022-11-03 02:19:39,989 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:39,990 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:19:39,990 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:39,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:19:39,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:19:39,991 INFO L87 Difference]: Start difference. First operand 97 states and 114 transitions. Second operand has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:19:40,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:40,452 INFO L93 Difference]: Finished difference Result 252 states and 302 transitions. [2022-11-03 02:19:40,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:19:40,453 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2022-11-03 02:19:40,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:40,456 INFO L225 Difference]: With dead ends: 252 [2022-11-03 02:19:40,457 INFO L226 Difference]: Without dead ends: 186 [2022-11-03 02:19:40,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:19:40,461 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 138 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 246 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 246 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:40,463 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 218 Invalid, 306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 246 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:19:40,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2022-11-03 02:19:40,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 171. [2022-11-03 02:19:40,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 115 states have (on average 1.208695652173913) internal successors, (139), 129 states have internal predecessors, (139), 30 states have call successors, (30), 23 states have call predecessors, (30), 25 states have return successors, (34), 30 states have call predecessors, (34), 30 states have call successors, (34) [2022-11-03 02:19:40,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 203 transitions. [2022-11-03 02:19:40,518 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 203 transitions. Word has length 30 [2022-11-03 02:19:40,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:40,518 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 203 transitions. [2022-11-03 02:19:40,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:19:40,519 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 203 transitions. [2022-11-03 02:19:40,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-03 02:19:40,524 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:40,524 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:40,525 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:19:40,525 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:40,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:40,525 INFO L85 PathProgramCache]: Analyzing trace with hash 1227054243, now seen corresponding path program 1 times [2022-11-03 02:19:40,526 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:40,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947959253] [2022-11-03 02:19:40,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:40,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:40,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:40,683 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:19:40,683 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:40,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947959253] [2022-11-03 02:19:40,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947959253] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:19:40,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:19:40,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:19:40,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712846257] [2022-11-03 02:19:40,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:19:40,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:19:40,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:40,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:19:40,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:19:40,685 INFO L87 Difference]: Start difference. First operand 171 states and 203 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-03 02:19:40,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:40,800 INFO L93 Difference]: Finished difference Result 214 states and 258 transitions. [2022-11-03 02:19:40,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:19:40,801 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 50 [2022-11-03 02:19:40,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:40,802 INFO L225 Difference]: With dead ends: 214 [2022-11-03 02:19:40,802 INFO L226 Difference]: Without dead ends: 129 [2022-11-03 02:19:40,803 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:19:40,804 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 46 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:40,804 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 145 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:19:40,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-11-03 02:19:40,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 129. [2022-11-03 02:19:40,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 87 states have (on average 1.1839080459770115) internal successors, (103), 96 states have internal predecessors, (103), 22 states have call successors, (22), 18 states have call predecessors, (22), 19 states have return successors, (23), 22 states have call predecessors, (23), 22 states have call successors, (23) [2022-11-03 02:19:40,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 148 transitions. [2022-11-03 02:19:40,825 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 148 transitions. Word has length 50 [2022-11-03 02:19:40,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:40,825 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 148 transitions. [2022-11-03 02:19:40,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-03 02:19:40,825 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 148 transitions. [2022-11-03 02:19:40,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-03 02:19:40,826 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:19:40,826 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:40,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:19:40,827 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:19:40,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:19:40,827 INFO L85 PathProgramCache]: Analyzing trace with hash -1959472969, now seen corresponding path program 1 times [2022-11-03 02:19:40,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:19:40,828 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [681236473] [2022-11-03 02:19:40,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:40,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:19:40,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:40,975 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:19:40,975 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:19:40,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [681236473] [2022-11-03 02:19:40,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [681236473] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:19:40,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1632889132] [2022-11-03 02:19:40,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:19:40,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:19:40,976 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:19:40,982 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:19:41,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:19:41,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:19:41,128 INFO L263 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-03 02:19:41,134 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:19:41,289 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 16 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:19:41,302 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:19:41,540 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:19:41,541 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1632889132] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:19:41,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1568934596] [2022-11-03 02:19:41,563 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-03 02:19:41,563 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:19:41,568 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:19:41,573 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:19:41,574 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:19:48,108 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 54 for LOIs [2022-11-03 02:19:48,119 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2022-11-03 02:19:48,493 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 20 for LOIs [2022-11-03 02:19:48,495 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 30 for LOIs [2022-11-03 02:19:48,498 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:19:53,612 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2948#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (= ~methaneLevelCritical~0 0) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_~retValue_acc~10#1| ~waterLevel~0) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483648)) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483648)) (<= |timeShift_getWaterLevel_~retValue_acc~10#1| 2147483647) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483647) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:19:53,613 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:19:53,613 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:19:53,613 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2022-11-03 02:19:53,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985868254] [2022-11-03 02:19:53,613 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:19:53,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:19:53,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:19:53,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:19:53,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=162, Invalid=1320, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:19:53,616 INFO L87 Difference]: Start difference. First operand 129 states and 148 transitions. Second operand has 13 states, 10 states have (on average 6.5) internal successors, (65), 11 states have internal predecessors, (65), 5 states have call successors, (14), 4 states have call predecessors, (14), 7 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2022-11-03 02:19:54,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:19:54,052 INFO L93 Difference]: Finished difference Result 145 states and 174 transitions. [2022-11-03 02:19:54,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:19:54,053 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 6.5) internal successors, (65), 11 states have internal predecessors, (65), 5 states have call successors, (14), 4 states have call predecessors, (14), 7 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) Word has length 52 [2022-11-03 02:19:54,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:19:54,053 INFO L225 Difference]: With dead ends: 145 [2022-11-03 02:19:54,054 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:19:54,055 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 127 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 653 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=228, Invalid=1934, Unknown=0, NotChecked=0, Total=2162 [2022-11-03 02:19:54,056 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 106 mSDsluCounter, 507 mSDsCounter, 0 mSdLazyCounter, 375 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 438 SdHoareTripleChecker+Invalid, 438 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 375 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:19:54,056 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 438 Invalid, 438 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 375 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:19:54,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:19:54,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:19:54,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:19:54,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:19:54,057 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 52 [2022-11-03 02:19:54,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:19:54,057 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:19:54,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 6.5) internal successors, (65), 11 states have internal predecessors, (65), 5 states have call successors, (14), 4 states have call predecessors, (14), 7 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2022-11-03 02:19:54,058 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:19:54,058 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:19:54,061 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:19:54,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:19:54,274 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-03 02:19:54,276 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:19:56,066 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 525 531) no Hoare annotation was computed. [2022-11-03 02:19:56,066 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 525 531) the Hoare annotation is: true [2022-11-03 02:19:56,067 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 822 833) the Hoare annotation is: true [2022-11-03 02:19:56,067 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 822 833) no Hoare annotation was computed. [2022-11-03 02:19:56,067 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 689 718) no Hoare annotation was computed. [2022-11-03 02:19:56,067 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 707) no Hoare annotation was computed. [2022-11-03 02:19:56,067 INFO L902 garLoopResultBuilder]: At program point L703-1(lines 703 707) the Hoare annotation is: true [2022-11-03 02:19:56,068 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 689 718) the Hoare annotation is: true [2022-11-03 02:19:56,068 INFO L902 garLoopResultBuilder]: At program point L699-2(lines 699 713) the Hoare annotation is: true [2022-11-03 02:19:56,068 INFO L902 garLoopResultBuilder]: At program point L695(line 695) the Hoare annotation is: true [2022-11-03 02:19:56,068 INFO L899 garLoopResultBuilder]: For program point L695-1(line 695) no Hoare annotation was computed. [2022-11-03 02:19:56,068 INFO L902 garLoopResultBuilder]: At program point L714(lines 689 718) the Hoare annotation is: true [2022-11-03 02:19:56,068 INFO L899 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2022-11-03 02:19:56,069 INFO L895 garLoopResultBuilder]: At program point L919(line 919) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (and (or (= |old(~waterLevel~0)| ~waterLevel~0) .cse0) .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 (not (= |old(~waterLevel~0)| 1)) .cse4 (and (= ~pumpRunning~0 0) (= |timeShift_processEnvironment_~tmp~4#1| 0) .cse0)) (or .cse7 .cse4 .cse5 .cse6) (or (and .cse1 .cse2) .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-03 02:19:56,069 INFO L899 garLoopResultBuilder]: For program point L919-1(line 919) no Hoare annotation was computed. [2022-11-03 02:19:56,069 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~pumpRunning~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or (and (or (= |old(~waterLevel~0)| ~waterLevel~0) (= ~waterLevel~0 1)) .cse0 .cse1) .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse3 .cse4 .cse5) (or (and .cse0 .cse1) .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2022-11-03 02:19:56,070 INFO L895 garLoopResultBuilder]: At program point L552-1(lines 533 557) the Hoare annotation is: (let ((.cse1 (= ~waterLevel~0 1)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse8 (not (= |old(~waterLevel~0)| 1)) .cse5 (and .cse9 (= |timeShift_processEnvironment_~tmp~4#1| 0) .cse1)) (or .cse8 (and .cse9 .cse0) .cse5 .cse6 (and .cse0 .cse3) .cse7) (or (and .cse2 .cse3) .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-03 02:19:56,070 INFO L895 garLoopResultBuilder]: At program point L904(line 904) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 1)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) (<= 1 ~switchedOnBeforeTS~0) .cse2) .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse5 (and .cse6 .cse0) .cse4 .cse7 .cse8) (or .cse3 .cse4 .cse7 (and .cse0 .cse2) .cse8) (or .cse5 (not (= |old(~waterLevel~0)| 1)) (and .cse6 .cse1) .cse4))) [2022-11-03 02:19:56,071 INFO L895 garLoopResultBuilder]: At program point L904-1(line 904) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret49#1|)) (.cse2 (= ~pumpRunning~0 1)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (= ~waterLevel~0 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 .cse4 (and .cse0 (or .cse1 .cse7) (<= 1 ~switchedOnBeforeTS~0) .cse2) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse8 (and .cse9 .cse1) .cse4 .cse5 .cse6) (or .cse8 (not (= |old(~waterLevel~0)| 1)) (and .cse9 .cse7) .cse4))) [2022-11-03 02:19:56,071 INFO L895 garLoopResultBuilder]: At program point L512-1(lines 512 518) the Hoare annotation is: (let ((.cse1 (= ~waterLevel~0 1)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse8 (not (= |old(~waterLevel~0)| 1)) .cse5 (and .cse9 (= |timeShift_processEnvironment_~tmp~4#1| 0) .cse1)) (or .cse8 (and .cse9 .cse0) .cse5 .cse6 (and .cse0 .cse3) .cse7) (or (and .cse2 .cse3) .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-03 02:19:56,071 INFO L895 garLoopResultBuilder]: At program point L541(lines 541 549) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse3 (= |timeShift_processEnvironment_~tmp~4#1| 0) (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse4 .cse5) (or .cse2 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse4 .cse5))) [2022-11-03 02:19:56,072 INFO L895 garLoopResultBuilder]: At program point L537(lines 537 554) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse5 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse8 (and .cse9 .cse0) .cse5 .cse6 .cse7) (or (and .cse2 .cse3) .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse8 (not (= |old(~waterLevel~0)| 1)) (and .cse9 .cse1) .cse5))) [2022-11-03 02:19:56,072 INFO L899 garLoopResultBuilder]: For program point L921(lines 921 931) no Hoare annotation was computed. [2022-11-03 02:19:56,072 INFO L899 garLoopResultBuilder]: For program point L917(lines 917 934) no Hoare annotation was computed. [2022-11-03 02:19:56,072 INFO L895 garLoopResultBuilder]: At program point L917-1(lines 909 937) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (let ((.cse9 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2))) (or .cse8 (and .cse9 .cse0 .cse3) (and .cse10 .cse9 .cse0) .cse5 .cse6 .cse7)) (or .cse8 (not (= |old(~waterLevel~0)| 1)) .cse5 (and .cse10 (= |timeShift_processEnvironment_~tmp~4#1| 0) .cse1)) (or (and .cse2 .cse3) .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-03 02:19:56,072 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 928) no Hoare annotation was computed. [2022-11-03 02:19:56,073 INFO L899 garLoopResultBuilder]: For program point L505-2(lines 501 523) no Hoare annotation was computed. [2022-11-03 02:19:56,073 INFO L895 garLoopResultBuilder]: At program point L790(line 790) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2022-11-03 02:19:56,073 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 498 524) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 1)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and (or .cse0 .cse1) (<= 1 ~switchedOnBeforeTS~0) .cse2) .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse5 (and .cse6 .cse0) .cse4 .cse7 .cse8) (or .cse3 .cse4 .cse7 (and .cse0 .cse2) .cse8) (or .cse5 (not (= |old(~waterLevel~0)| 1)) (and .cse6 .cse1) .cse4))) [2022-11-03 02:19:56,073 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 498 524) no Hoare annotation was computed. [2022-11-03 02:19:56,074 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 790) no Hoare annotation was computed. [2022-11-03 02:19:56,074 INFO L895 garLoopResultBuilder]: At program point L547(line 547) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_processEnvironment_~tmp~4#1| 0)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse0 .cse1 (= ~waterLevel~0 1))) (or .cse6 .cse3 .cse4 .cse5))) [2022-11-03 02:19:56,074 INFO L895 garLoopResultBuilder]: At program point L473(lines 430 475) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse2 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse0 .cse5 .cse1 .cse6 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse1 .cse6 .cse2))) [2022-11-03 02:19:56,074 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2022-11-03 02:19:56,074 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2022-11-03 02:19:56,075 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:19:56,075 INFO L895 garLoopResultBuilder]: At program point L466-2(lines 460 471) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse2 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse0 .cse5 .cse1 .cse6 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse1 .cse6 .cse2))) [2022-11-03 02:19:56,075 INFO L895 garLoopResultBuilder]: At program point L772(lines 772 779) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~6#1| 1) (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-11-03 02:19:56,075 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2022-11-03 02:19:56,075 INFO L902 garLoopResultBuilder]: At program point L772-2(lines 772 779) the Hoare annotation is: true [2022-11-03 02:19:56,076 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2022-11-03 02:19:56,076 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:19:56,076 INFO L902 garLoopResultBuilder]: At program point L479(lines 420 483) the Hoare annotation is: true [2022-11-03 02:19:56,076 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (<= ~waterLevel~0 2)) (.cse2 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse4) (and .cse0 (let ((.cse5 (= ~pumpRunning~0 0))) (or (and .cse5 .cse6 .cse1 .cse7 .cse2 .cse3) (and .cse5 .cse1 (= ~waterLevel~0 1) .cse2 .cse3)))) (and .cse0 .cse6 .cse1 .cse7 .cse2 .cse3 .cse4))) [2022-11-03 02:19:56,076 INFO L895 garLoopResultBuilder]: At program point L476(lines 429 477) the Hoare annotation is: false [2022-11-03 02:19:56,077 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 475) no Hoare annotation was computed. [2022-11-03 02:19:56,077 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse2 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse0 .cse5 .cse1 .cse6 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse1 .cse6 .cse2))) [2022-11-03 02:19:56,077 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 810 821) no Hoare annotation was computed. [2022-11-03 02:19:56,077 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 810 821) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= ~pumpRunning~0 1))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1))) (and (or (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) .cse4 .cse5) (or .cse6 .cse4 .cse1 .cse2 .cse3) (or .cse6 .cse4 .cse1 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-03 02:19:56,078 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 585 593) no Hoare annotation was computed. [2022-11-03 02:19:56,078 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 585 593) the Hoare annotation is: true [2022-11-03 02:19:56,081 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:19:56,083 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:19:56,117 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:19:56 BoogieIcfgContainer [2022-11-03 02:19:56,117 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:19:56,132 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:19:56,132 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:19:56,132 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:19:56,133 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:19:37" (3/4) ... [2022-11-03 02:19:56,135 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:19:56,140 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:19:56,141 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:19:56,141 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:19:56,141 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:19:56,141 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:19:56,141 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-03 02:19:56,148 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 70 nodes and edges [2022-11-03 02:19:56,148 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-03 02:19:56,149 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 02:19:56,149 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:19:56,149 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:19:56,150 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:19:56,150 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:19:56,174 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || (((1 <= aux-isPumpRunning()-aux && (\old(waterLevel) == waterLevel || waterLevel == 1)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-03 02:19:56,175 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-03 02:19:56,176 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((tmp == 2 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp == 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-03 02:19:56,177 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-03 02:19:56,177 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 02:19:56,177 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-03 02:19:56,178 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-03 02:19:56,209 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:19:56,209 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:19:56,210 INFO L158 Benchmark]: Toolchain (without parser) took 20239.77ms. Allocated memory was 107.0MB in the beginning and 327.2MB in the end (delta: 220.2MB). Free memory was 72.0MB in the beginning and 235.4MB in the end (delta: -163.5MB). Peak memory consumption was 57.5MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,210 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 107.0MB. Free memory is still 59.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:19:56,211 INFO L158 Benchmark]: CACSL2BoogieTranslator took 589.07ms. Allocated memory is still 107.0MB. Free memory was 71.7MB in the beginning and 72.4MB in the end (delta: -679.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,211 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.46ms. Allocated memory is still 107.0MB. Free memory was 72.3MB in the beginning and 69.8MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,211 INFO L158 Benchmark]: Boogie Preprocessor took 29.83ms. Allocated memory is still 107.0MB. Free memory was 69.8MB in the beginning and 68.2MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:19:56,212 INFO L158 Benchmark]: RCFGBuilder took 682.60ms. Allocated memory was 107.0MB in the beginning and 130.0MB in the end (delta: 23.1MB). Free memory was 68.2MB in the beginning and 99.6MB in the end (delta: -31.4MB). Peak memory consumption was 29.3MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,212 INFO L158 Benchmark]: TraceAbstraction took 18790.91ms. Allocated memory was 130.0MB in the beginning and 327.2MB in the end (delta: 197.1MB). Free memory was 98.9MB in the beginning and 240.7MB in the end (delta: -141.7MB). Peak memory consumption was 190.3MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,213 INFO L158 Benchmark]: Witness Printer took 77.73ms. Allocated memory is still 327.2MB. Free memory was 240.7MB in the beginning and 235.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:19:56,216 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 107.0MB. Free memory is still 59.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 589.07ms. Allocated memory is still 107.0MB. Free memory was 71.7MB in the beginning and 72.4MB in the end (delta: -679.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.46ms. Allocated memory is still 107.0MB. Free memory was 72.3MB in the beginning and 69.8MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.83ms. Allocated memory is still 107.0MB. Free memory was 69.8MB in the beginning and 68.2MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 682.60ms. Allocated memory was 107.0MB in the beginning and 130.0MB in the end (delta: 23.1MB). Free memory was 68.2MB in the beginning and 99.6MB in the end (delta: -31.4MB). Peak memory consumption was 29.3MB. Max. memory is 16.1GB. * TraceAbstraction took 18790.91ms. Allocated memory was 130.0MB in the beginning and 327.2MB in the end (delta: 197.1MB). Free memory was 98.9MB in the beginning and 240.7MB in the end (delta: -141.7MB). Peak memory consumption was 190.3MB. Max. memory is 16.1GB. * Witness Printer took 77.73ms. Allocated memory is still 327.2MB. Free memory was 240.7MB in the beginning and 235.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 790]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.7s, OverallIterations: 8, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 451 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 431 mSDsluCounter, 1326 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1205 mSDsCounter, 156 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 926 IncrementalHoareTripleChecker+Invalid, 1082 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 156 mSolverCounterUnsat, 392 mSDtfsCounter, 926 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 231 GetRequests, 149 SyntacticMatches, 4 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 5.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=171occurred in iteration=6, InterpolantAutomatonStates: 57, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 8 MinimizatonAttempts, 36 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 352 PreInvPairs, 407 NumberOfFragments, 1458 HoareAnnotationTreeSize, 352 FomulaSimplifications, 712 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 30 FomulaSimplificationsInter, 1091 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 311 NumberOfCodeBlocks, 311 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 353 ConstructedInterpolants, 0 QuantifiedInterpolants, 898 SizeOfPredicates, 3 NumberOfNonLiveVariables, 407 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 10 InterpolantComputations, 7 PerfectInterpolantSequences, 84/97 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: ((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && tmp == systemActive) && pumpRunning == 1) || ((((tmp == 1 && pumpRunning == 0) && splverifierCounter == 0) && waterLevel == 1) && tmp == systemActive)) || (((((tmp == 1 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1)) || (((((tmp == 1 && pumpRunning == 0) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((tmp == 2 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp == 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: ((((((((1 <= aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 1) || 0 == systemActive) || (((1 <= aux-isPumpRunning()-aux && (\old(waterLevel) == waterLevel || waterLevel == 1)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: (((((((((\old(waterLevel) == waterLevel || waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((1 <= switchedOnBeforeTS && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:19:56,293 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b721bee9-561a-40a9-9181-8bf406c62ea1/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE