./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:49:27,461 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:49:27,463 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:49:27,482 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:49:27,483 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:49:27,484 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:49:27,485 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:49:27,487 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:49:27,493 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:49:27,494 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:49:27,495 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:49:27,503 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:49:27,504 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:49:27,505 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:49:27,506 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:49:27,507 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:49:27,508 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:49:27,509 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:49:27,513 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:49:27,517 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:49:27,523 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:49:27,524 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:49:27,526 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:49:27,530 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:49:27,534 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:49:27,535 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:49:27,536 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:49:27,537 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:49:27,537 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:49:27,543 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:49:27,547 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:49:27,549 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:49:27,550 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:49:27,551 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:49:27,553 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:49:27,554 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:49:27,555 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:49:27,555 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:49:27,556 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:49:27,557 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:49:27,557 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:49:27,558 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 06:49:27,606 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:49:27,606 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:49:27,607 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:49:27,607 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:49:27,608 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:49:27,608 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:49:27,609 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:49:27,609 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:49:27,609 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:49:27,609 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 06:49:27,610 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:49:27,611 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:49:27,611 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 06:49:27,611 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 06:49:27,611 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:49:27,612 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 06:49:27,612 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 06:49:27,612 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 06:49:27,613 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:49:27,613 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 06:49:27,613 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 06:49:27,614 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 06:49:27,614 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:49:27,615 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:49:27,616 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:49:27,616 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:49:27,616 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 06:49:27,616 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:49:27,616 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:49:27,617 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:49:27,617 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:49:27,617 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:49:27,618 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:49:27,618 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:49:27,618 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 06:49:27,618 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:49:27,619 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:49:27,619 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 06:49:27,619 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 06:49:27,620 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:49:27,620 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:49:27,620 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 [2022-11-19 06:49:27,889 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:49:27,910 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:49:27,912 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:49:27,914 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:49:27,921 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:49:27,922 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-19 06:49:28,007 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/data/dda0a03f3/3753698f671d456094c0a937dbd6e164/FLAGd3f20d55f [2022-11-19 06:49:28,562 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:49:28,563 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-19 06:49:28,572 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/data/dda0a03f3/3753698f671d456094c0a937dbd6e164/FLAGd3f20d55f [2022-11-19 06:49:28,882 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/data/dda0a03f3/3753698f671d456094c0a937dbd6e164 [2022-11-19 06:49:28,884 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:49:28,890 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:49:28,894 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:49:28,894 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:49:28,897 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:49:28,898 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:49:28" (1/1) ... [2022-11-19 06:49:28,899 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a19482d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:28, skipping insertion in model container [2022-11-19 06:49:28,899 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:49:28" (1/1) ... [2022-11-19 06:49:28,907 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:49:28,963 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:49:29,208 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-19 06:49:29,308 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:49:29,317 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:49:29,330 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-19 06:49:29,393 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:49:29,412 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:49:29,413 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29 WrapperNode [2022-11-19 06:49:29,413 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:49:29,414 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:49:29,414 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:49:29,414 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:49:29,423 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,436 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,471 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 233 [2022-11-19 06:49:29,472 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:49:29,472 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:49:29,472 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:49:29,472 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:49:29,481 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,482 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,484 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,484 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,489 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,494 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,495 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,497 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,499 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:49:29,500 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:49:29,500 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:49:29,500 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:49:29,504 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (1/1) ... [2022-11-19 06:49:29,517 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:49:29,532 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:49:29,544 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:49:29,551 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:49:29,589 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:49:29,589 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 06:49:29,589 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 06:49:29,589 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 06:49:29,590 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 06:49:29,590 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 06:49:29,590 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 06:49:29,590 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:49:29,590 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:49:29,590 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 06:49:29,590 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 06:49:29,590 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:49:29,591 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:49:29,591 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-19 06:49:29,591 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-19 06:49:29,591 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 06:49:29,591 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 06:49:29,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 06:49:29,591 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 06:49:29,592 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 06:49:29,592 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:49:29,592 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:49:29,674 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:49:29,676 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:49:30,076 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:49:30,241 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:49:30,241 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:49:30,244 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:30 BoogieIcfgContainer [2022-11-19 06:49:30,245 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:49:30,247 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:49:30,247 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:49:30,251 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:49:30,251 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:49:28" (1/3) ... [2022-11-19 06:49:30,252 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45818da0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:49:30, skipping insertion in model container [2022-11-19 06:49:30,252 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:29" (2/3) ... [2022-11-19 06:49:30,253 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45818da0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:49:30, skipping insertion in model container [2022-11-19 06:49:30,253 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:30" (3/3) ... [2022-11-19 06:49:30,255 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product61.cil.c [2022-11-19 06:49:30,275 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:49:30,275 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:49:30,328 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:49:30,335 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5fd63304, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:49:30,336 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:49:30,340 INFO L276 IsEmpty]: Start isEmpty. Operand has 68 states, 41 states have (on average 1.4146341463414633) internal successors, (58), 51 states have internal predecessors, (58), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-19 06:49:30,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-19 06:49:30,349 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:30,350 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:30,351 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:30,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:30,357 INFO L85 PathProgramCache]: Analyzing trace with hash 352390350, now seen corresponding path program 1 times [2022-11-19 06:49:30,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:30,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [307125668] [2022-11-19 06:49:30,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:30,369 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:30,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:30,525 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:30,525 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:30,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [307125668] [2022-11-19 06:49:30,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [307125668] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:30,527 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:30,527 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:49:30,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [384940559] [2022-11-19 06:49:30,529 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:30,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 06:49:30,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:30,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 06:49:30,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:49:30,564 INFO L87 Difference]: Start difference. First operand has 68 states, 41 states have (on average 1.4146341463414633) internal successors, (58), 51 states have internal predecessors, (58), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:30,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:30,682 INFO L93 Difference]: Finished difference Result 134 states and 181 transitions. [2022-11-19 06:49:30,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 06:49:30,685 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-19 06:49:30,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:30,695 INFO L225 Difference]: With dead ends: 134 [2022-11-19 06:49:30,695 INFO L226 Difference]: Without dead ends: 63 [2022-11-19 06:49:30,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:49:30,702 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:30,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 69 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:30,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-19 06:49:30,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2022-11-19 06:49:30,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 38 states have (on average 1.3157894736842106) internal successors, (50), 47 states have internal predecessors, (50), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-19 06:49:30,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 81 transitions. [2022-11-19 06:49:30,760 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 81 transitions. Word has length 12 [2022-11-19 06:49:30,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:30,761 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 81 transitions. [2022-11-19 06:49:30,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:30,761 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 81 transitions. [2022-11-19 06:49:30,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 06:49:30,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:30,763 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:30,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 06:49:30,764 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:30,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:30,765 INFO L85 PathProgramCache]: Analyzing trace with hash -717662667, now seen corresponding path program 1 times [2022-11-19 06:49:30,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:30,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2100920481] [2022-11-19 06:49:30,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:30,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:30,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:30,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:30,895 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:30,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2100920481] [2022-11-19 06:49:30,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2100920481] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:30,896 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:30,896 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:30,896 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302307663] [2022-11-19 06:49:30,896 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:30,897 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:49:30,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:30,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:49:30,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:30,899 INFO L87 Difference]: Start difference. First operand 63 states and 81 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:30,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:30,986 INFO L93 Difference]: Finished difference Result 103 states and 133 transitions. [2022-11-19 06:49:30,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:49:30,986 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 06:49:30,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:30,991 INFO L225 Difference]: With dead ends: 103 [2022-11-19 06:49:30,991 INFO L226 Difference]: Without dead ends: 55 [2022-11-19 06:49:30,992 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:30,993 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 7 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:30,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 101 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:30,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-19 06:49:31,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2022-11-19 06:49:31,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 42 states have internal predecessors, (44), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-19 06:49:31,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 70 transitions. [2022-11-19 06:49:31,013 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 70 transitions. Word has length 13 [2022-11-19 06:49:31,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:31,014 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 70 transitions. [2022-11-19 06:49:31,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:31,014 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 70 transitions. [2022-11-19 06:49:31,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-19 06:49:31,017 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:31,017 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:31,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 06:49:31,018 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:31,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:31,020 INFO L85 PathProgramCache]: Analyzing trace with hash -1106958584, now seen corresponding path program 1 times [2022-11-19 06:49:31,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:31,021 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849311675] [2022-11-19 06:49:31,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:31,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:31,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:31,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:31,139 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:31,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849311675] [2022-11-19 06:49:31,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849311675] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:31,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:31,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:49:31,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1832265206] [2022-11-19 06:49:31,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:31,140 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:49:31,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:31,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:49:31,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:31,141 INFO L87 Difference]: Start difference. First operand 55 states and 70 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:31,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:31,185 INFO L93 Difference]: Finished difference Result 108 states and 139 transitions. [2022-11-19 06:49:31,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:49:31,186 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-19 06:49:31,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:31,187 INFO L225 Difference]: With dead ends: 108 [2022-11-19 06:49:31,187 INFO L226 Difference]: Without dead ends: 55 [2022-11-19 06:49:31,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:31,190 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 59 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:31,191 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 53 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:49:31,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-19 06:49:31,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2022-11-19 06:49:31,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 33 states have (on average 1.303030303030303) internal successors, (43), 42 states have internal predecessors, (43), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-19 06:49:31,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 69 transitions. [2022-11-19 06:49:31,201 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 69 transitions. Word has length 15 [2022-11-19 06:49:31,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:31,202 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 69 transitions. [2022-11-19 06:49:31,202 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:31,202 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 69 transitions. [2022-11-19 06:49:31,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-19 06:49:31,203 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:31,203 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:31,204 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 06:49:31,204 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:31,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:31,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1698567583, now seen corresponding path program 1 times [2022-11-19 06:49:31,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:31,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1409385044] [2022-11-19 06:49:31,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:31,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:31,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:31,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:31,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:31,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1409385044] [2022-11-19 06:49:31,317 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1409385044] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:31,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:31,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:31,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1003794782] [2022-11-19 06:49:31,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:31,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:49:31,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:31,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:49:31,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:31,319 INFO L87 Difference]: Start difference. First operand 55 states and 69 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 06:49:31,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:31,430 INFO L93 Difference]: Finished difference Result 144 states and 185 transitions. [2022-11-19 06:49:31,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:49:31,431 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-19 06:49:31,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:31,433 INFO L225 Difference]: With dead ends: 144 [2022-11-19 06:49:31,433 INFO L226 Difference]: Without dead ends: 91 [2022-11-19 06:49:31,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:31,435 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 41 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:31,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 98 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:31,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-19 06:49:31,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 89. [2022-11-19 06:49:31,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 57 states have (on average 1.2456140350877194) internal successors, (71), 65 states have internal predecessors, (71), 16 states have call successors, (16), 15 states have call predecessors, (16), 15 states have return successors, (22), 14 states have call predecessors, (22), 16 states have call successors, (22) [2022-11-19 06:49:31,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 109 transitions. [2022-11-19 06:49:31,455 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 109 transitions. Word has length 25 [2022-11-19 06:49:31,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:31,455 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 109 transitions. [2022-11-19 06:49:31,456 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 06:49:31,456 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 109 transitions. [2022-11-19 06:49:31,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-19 06:49:31,457 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:31,457 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:31,457 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 06:49:31,458 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:31,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:31,458 INFO L85 PathProgramCache]: Analyzing trace with hash -2059081237, now seen corresponding path program 1 times [2022-11-19 06:49:31,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:31,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576812290] [2022-11-19 06:49:31,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:31,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:31,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:31,713 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:31,713 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:31,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576812290] [2022-11-19 06:49:31,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576812290] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:31,714 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:31,714 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:49:31,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545462842] [2022-11-19 06:49:31,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:31,715 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:49:31,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:31,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:49:31,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:49:31,716 INFO L87 Difference]: Start difference. First operand 89 states and 109 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 06:49:31,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:31,862 INFO L93 Difference]: Finished difference Result 250 states and 310 transitions. [2022-11-19 06:49:31,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-19 06:49:31,862 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-19 06:49:31,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:31,865 INFO L225 Difference]: With dead ends: 250 [2022-11-19 06:49:31,865 INFO L226 Difference]: Without dead ends: 163 [2022-11-19 06:49:31,866 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:49:31,867 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 80 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:31,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 186 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:31,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-19 06:49:31,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 134. [2022-11-19 06:49:31,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 134 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 97 states have internal predecessors, (104), 22 states have call successors, (22), 21 states have call predecessors, (22), 24 states have return successors, (31), 22 states have call predecessors, (31), 22 states have call successors, (31) [2022-11-19 06:49:31,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 157 transitions. [2022-11-19 06:49:31,892 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 157 transitions. Word has length 31 [2022-11-19 06:49:31,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:31,893 INFO L495 AbstractCegarLoop]: Abstraction has 134 states and 157 transitions. [2022-11-19 06:49:31,893 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 06:49:31,893 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 157 transitions. [2022-11-19 06:49:31,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-19 06:49:31,894 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:31,895 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:31,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 06:49:31,895 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:31,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:31,896 INFO L85 PathProgramCache]: Analyzing trace with hash 645372998, now seen corresponding path program 1 times [2022-11-19 06:49:31,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:31,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2090387632] [2022-11-19 06:49:31,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:31,896 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:31,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:32,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:32,246 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:32,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2090387632] [2022-11-19 06:49:32,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2090387632] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:32,247 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:32,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-19 06:49:32,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954321854] [2022-11-19 06:49:32,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:32,249 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-19 06:49:32,249 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:32,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-19 06:49:32,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-19 06:49:32,252 INFO L87 Difference]: Start difference. First operand 134 states and 157 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-19 06:49:32,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:32,914 INFO L93 Difference]: Finished difference Result 330 states and 409 transitions. [2022-11-19 06:49:32,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 06:49:32,915 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 34 [2022-11-19 06:49:32,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:32,917 INFO L225 Difference]: With dead ends: 330 [2022-11-19 06:49:32,918 INFO L226 Difference]: Without dead ends: 243 [2022-11-19 06:49:32,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=146, Unknown=0, NotChecked=0, Total=210 [2022-11-19 06:49:32,919 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 177 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 459 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 274 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 459 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:32,920 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 274 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 459 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 06:49:32,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-11-19 06:49:32,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 216. [2022-11-19 06:49:32,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 141 states have (on average 1.198581560283688) internal successors, (169), 158 states have internal predecessors, (169), 36 states have call successors, (36), 31 states have call predecessors, (36), 38 states have return successors, (51), 37 states have call predecessors, (51), 36 states have call successors, (51) [2022-11-19 06:49:32,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 256 transitions. [2022-11-19 06:49:32,959 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 256 transitions. Word has length 34 [2022-11-19 06:49:32,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:32,960 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 256 transitions. [2022-11-19 06:49:32,960 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-19 06:49:32,960 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 256 transitions. [2022-11-19 06:49:32,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-19 06:49:32,962 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:32,962 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:32,963 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 06:49:32,963 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:32,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:32,963 INFO L85 PathProgramCache]: Analyzing trace with hash -1080450872, now seen corresponding path program 1 times [2022-11-19 06:49:32,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:32,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1771020622] [2022-11-19 06:49:32,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:32,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:32,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:33,066 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 06:49:33,066 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:33,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1771020622] [2022-11-19 06:49:33,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1771020622] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:33,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:33,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:49:33,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461717554] [2022-11-19 06:49:33,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:33,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:49:33,068 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:33,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:49:33,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:49:33,069 INFO L87 Difference]: Start difference. First operand 216 states and 256 transitions. Second operand has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-19 06:49:33,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:33,294 INFO L93 Difference]: Finished difference Result 569 states and 690 transitions. [2022-11-19 06:49:33,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 06:49:33,295 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 55 [2022-11-19 06:49:33,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:33,306 INFO L225 Difference]: With dead ends: 569 [2022-11-19 06:49:33,307 INFO L226 Difference]: Without dead ends: 475 [2022-11-19 06:49:33,325 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-19 06:49:33,333 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 65 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:33,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 315 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:33,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2022-11-19 06:49:33,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 435. [2022-11-19 06:49:33,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 435 states, 294 states have (on average 1.2108843537414966) internal successors, (356), 320 states have internal predecessors, (356), 65 states have call successors, (65), 57 states have call predecessors, (65), 75 states have return successors, (99), 73 states have call predecessors, (99), 65 states have call successors, (99) [2022-11-19 06:49:33,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 520 transitions. [2022-11-19 06:49:33,417 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 520 transitions. Word has length 55 [2022-11-19 06:49:33,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:33,418 INFO L495 AbstractCegarLoop]: Abstraction has 435 states and 520 transitions. [2022-11-19 06:49:33,418 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-19 06:49:33,418 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 520 transitions. [2022-11-19 06:49:33,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-19 06:49:33,426 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:33,427 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:33,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 06:49:33,427 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:33,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:33,428 INFO L85 PathProgramCache]: Analyzing trace with hash 1254073955, now seen corresponding path program 1 times [2022-11-19 06:49:33,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:33,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [435104933] [2022-11-19 06:49:33,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:33,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:33,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:33,811 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 06:49:33,814 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:33,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [435104933] [2022-11-19 06:49:33,814 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [435104933] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:33,815 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:33,815 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-19 06:49:33,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255721485] [2022-11-19 06:49:33,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:33,816 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 06:49:33,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:33,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 06:49:33,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-11-19 06:49:33,822 INFO L87 Difference]: Start difference. First operand 435 states and 520 transitions. Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 06:49:34,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:34,711 INFO L93 Difference]: Finished difference Result 793 states and 984 transitions. [2022-11-19 06:49:34,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-19 06:49:34,712 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 58 [2022-11-19 06:49:34,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:34,715 INFO L225 Difference]: With dead ends: 793 [2022-11-19 06:49:34,715 INFO L226 Difference]: Without dead ends: 578 [2022-11-19 06:49:34,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=113, Invalid=267, Unknown=0, NotChecked=0, Total=380 [2022-11-19 06:49:34,717 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 179 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 419 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 540 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 419 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:34,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 176 Invalid, 540 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 419 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:49:34,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 578 states. [2022-11-19 06:49:34,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 578 to 523. [2022-11-19 06:49:34,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 523 states, 356 states have (on average 1.2387640449438202) internal successors, (441), 388 states have internal predecessors, (441), 77 states have call successors, (77), 63 states have call predecessors, (77), 89 states have return successors, (133), 88 states have call predecessors, (133), 77 states have call successors, (133) [2022-11-19 06:49:34,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 523 states and 651 transitions. [2022-11-19 06:49:34,813 INFO L78 Accepts]: Start accepts. Automaton has 523 states and 651 transitions. Word has length 58 [2022-11-19 06:49:34,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:34,814 INFO L495 AbstractCegarLoop]: Abstraction has 523 states and 651 transitions. [2022-11-19 06:49:34,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 06:49:34,814 INFO L276 IsEmpty]: Start isEmpty. Operand 523 states and 651 transitions. [2022-11-19 06:49:34,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-19 06:49:34,816 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:34,816 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:34,816 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-19 06:49:34,816 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:34,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:34,817 INFO L85 PathProgramCache]: Analyzing trace with hash 1807438632, now seen corresponding path program 1 times [2022-11-19 06:49:34,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:34,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602778333] [2022-11-19 06:49:34,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:34,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:34,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:35,287 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 06:49:35,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:35,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602778333] [2022-11-19 06:49:35,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602778333] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:49:35,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2048942276] [2022-11-19 06:49:35,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:35,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:49:35,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:49:35,295 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:49:35,323 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 06:49:35,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:35,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-19 06:49:35,410 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:49:35,722 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:49:35,723 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:49:36,274 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-19 06:49:36,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2048942276] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:49:36,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [391473786] [2022-11-19 06:49:36,309 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-11-19 06:49:36,309 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:49:36,313 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:49:36,323 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:49:36,323 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:49:41,150 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 127 for LOIs [2022-11-19 06:49:41,174 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-19 06:49:41,568 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 24 for LOIs [2022-11-19 06:49:41,624 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-19 06:49:41,788 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 48 for LOIs [2022-11-19 06:49:41,801 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-19 06:49:41,810 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 49 for LOIs [2022-11-19 06:49:41,818 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:49:47,511 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6749#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= ~methaneLevelCritical~0 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:49:47,512 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:49:47,512 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:49:47,512 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 11] total 27 [2022-11-19 06:49:47,512 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595828399] [2022-11-19 06:49:47,512 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:49:47,513 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-19 06:49:47,513 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:47,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-19 06:49:47,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=375, Invalid=3285, Unknown=0, NotChecked=0, Total=3660 [2022-11-19 06:49:47,515 INFO L87 Difference]: Start difference. First operand 523 states and 651 transitions. Second operand has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) [2022-11-19 06:49:50,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:50,581 INFO L93 Difference]: Finished difference Result 1465 states and 1896 transitions. [2022-11-19 06:49:50,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-19 06:49:50,582 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) Word has length 61 [2022-11-19 06:49:50,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:50,588 INFO L225 Difference]: With dead ends: 1465 [2022-11-19 06:49:50,588 INFO L226 Difference]: Without dead ends: 1144 [2022-11-19 06:49:50,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 142 SyntacticMatches, 4 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3901 ImplicationChecksByTransitivity, 7.6s TimeCoverageRelationStatistics Valid=1170, Invalid=8930, Unknown=0, NotChecked=0, Total=10100 [2022-11-19 06:49:50,594 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 883 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 1386 mSolverCounterSat, 555 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 887 SdHoareTripleChecker+Valid, 480 SdHoareTripleChecker+Invalid, 1941 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 555 IncrementalHoareTripleChecker+Valid, 1386 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:50,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [887 Valid, 480 Invalid, 1941 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [555 Valid, 1386 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-19 06:49:50,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1144 states. [2022-11-19 06:49:50,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1144 to 971. [2022-11-19 06:49:50,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 668 states have (on average 1.2035928143712575) internal successors, (804), 720 states have internal predecessors, (804), 135 states have call successors, (135), 109 states have call predecessors, (135), 167 states have return successors, (253), 167 states have call predecessors, (253), 135 states have call successors, (253) [2022-11-19 06:49:50,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1192 transitions. [2022-11-19 06:49:50,718 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1192 transitions. Word has length 61 [2022-11-19 06:49:50,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:50,718 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1192 transitions. [2022-11-19 06:49:50,719 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 24 states have (on average 4.208333333333333) internal successors, (101), 24 states have internal predecessors, (101), 13 states have call successors, (23), 10 states have call predecessors, (23), 9 states have return successors, (20), 11 states have call predecessors, (20), 13 states have call successors, (20) [2022-11-19 06:49:50,719 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1192 transitions. [2022-11-19 06:49:50,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-19 06:49:50,721 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:50,722 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:50,733 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 06:49:50,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:49:50,927 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:50,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:50,927 INFO L85 PathProgramCache]: Analyzing trace with hash 704139109, now seen corresponding path program 1 times [2022-11-19 06:49:50,928 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:50,928 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [850626372] [2022-11-19 06:49:50,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:50,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:50,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:51,084 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-11-19 06:49:51,084 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:51,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [850626372] [2022-11-19 06:49:51,085 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [850626372] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:51,085 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:51,085 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:49:51,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1353300562] [2022-11-19 06:49:51,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:51,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:49:51,086 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:51,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:49:51,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:49:51,093 INFO L87 Difference]: Start difference. First operand 971 states and 1192 transitions. Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-11-19 06:49:51,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:51,278 INFO L93 Difference]: Finished difference Result 1029 states and 1269 transitions. [2022-11-19 06:49:51,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:49:51,279 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 95 [2022-11-19 06:49:51,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:51,285 INFO L225 Difference]: With dead ends: 1029 [2022-11-19 06:49:51,286 INFO L226 Difference]: Without dead ends: 1027 [2022-11-19 06:49:51,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:49:51,288 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 49 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:51,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 156 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:49:51,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1027 states. [2022-11-19 06:49:51,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1027 to 971. [2022-11-19 06:49:51,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 668 states have (on average 1.1826347305389222) internal successors, (790), 720 states have internal predecessors, (790), 135 states have call successors, (135), 109 states have call predecessors, (135), 167 states have return successors, (253), 167 states have call predecessors, (253), 135 states have call successors, (253) [2022-11-19 06:49:51,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1178 transitions. [2022-11-19 06:49:51,419 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1178 transitions. Word has length 95 [2022-11-19 06:49:51,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:51,419 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1178 transitions. [2022-11-19 06:49:51,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-11-19 06:49:51,420 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1178 transitions. [2022-11-19 06:49:51,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-11-19 06:49:51,422 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:51,422 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:51,423 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-19 06:49:51,423 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:51,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:51,424 INFO L85 PathProgramCache]: Analyzing trace with hash -436251148, now seen corresponding path program 1 times [2022-11-19 06:49:51,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:51,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476508561] [2022-11-19 06:49:51,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:51,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:51,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:51,817 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 17 proven. 46 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-19 06:49:51,818 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:51,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [476508561] [2022-11-19 06:49:51,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [476508561] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:49:51,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1774374559] [2022-11-19 06:49:51,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:51,819 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:49:51,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:49:51,820 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:49:51,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 06:49:51,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:51,957 INFO L263 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 21 conjunts are in the unsatisfiable core [2022-11-19 06:49:51,960 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:49:52,050 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 48 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-19 06:49:52,050 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:49:52,296 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 46 proven. 4 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-11-19 06:49:52,296 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1774374559] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:49:52,296 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1800011921] [2022-11-19 06:49:52,299 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-11-19 06:49:52,299 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:49:52,299 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:49:52,300 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:49:52,300 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:49:54,311 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 43 for LOIs [2022-11-19 06:49:54,319 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-19 06:49:54,420 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 48 for LOIs [2022-11-19 06:49:54,814 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 06:49:55,261 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 50 for LOIs [2022-11-19 06:49:55,273 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-19 06:49:55,275 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:49:59,991 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14364#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~methaneLevelCritical~0 0) (= ~head~0.offset 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:49:59,992 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:49:59,992 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:49:59,992 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 5, 5] total 12 [2022-11-19 06:49:59,992 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [564934640] [2022-11-19 06:49:59,992 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:49:59,993 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-19 06:49:59,993 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:59,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-19 06:49:59,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=1770, Unknown=0, NotChecked=0, Total=2070 [2022-11-19 06:49:59,994 INFO L87 Difference]: Start difference. First operand 971 states and 1178 transitions. Second operand has 12 states, 11 states have (on average 8.454545454545455) internal successors, (93), 11 states have internal predecessors, (93), 7 states have call successors, (21), 4 states have call predecessors, (21), 8 states have return successors, (24), 10 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-19 06:50:01,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:01,287 INFO L93 Difference]: Finished difference Result 2124 states and 2649 transitions. [2022-11-19 06:50:01,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-19 06:50:01,287 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 11 states have (on average 8.454545454545455) internal successors, (93), 11 states have internal predecessors, (93), 7 states have call successors, (21), 4 states have call predecessors, (21), 8 states have return successors, (24), 10 states have call predecessors, (24), 7 states have call successors, (24) Word has length 104 [2022-11-19 06:50:01,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:01,294 INFO L225 Difference]: With dead ends: 2124 [2022-11-19 06:50:01,294 INFO L226 Difference]: Without dead ends: 1367 [2022-11-19 06:50:01,298 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 367 GetRequests, 297 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1691 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=616, Invalid=4214, Unknown=0, NotChecked=0, Total=4830 [2022-11-19 06:50:01,299 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 565 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 768 mSolverCounterSat, 290 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 1058 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 290 IncrementalHoareTripleChecker+Valid, 768 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:01,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [572 Valid, 400 Invalid, 1058 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [290 Valid, 768 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-19 06:50:01,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1367 states. [2022-11-19 06:50:01,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1367 to 1118. [2022-11-19 06:50:01,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1118 states, 753 states have (on average 1.155378486055777) internal successors, (870), 807 states have internal predecessors, (870), 169 states have call successors, (169), 148 states have call predecessors, (169), 195 states have return successors, (253), 192 states have call predecessors, (253), 169 states have call successors, (253) [2022-11-19 06:50:01,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1118 states to 1118 states and 1292 transitions. [2022-11-19 06:50:01,482 INFO L78 Accepts]: Start accepts. Automaton has 1118 states and 1292 transitions. Word has length 104 [2022-11-19 06:50:01,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:01,482 INFO L495 AbstractCegarLoop]: Abstraction has 1118 states and 1292 transitions. [2022-11-19 06:50:01,483 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 11 states have (on average 8.454545454545455) internal successors, (93), 11 states have internal predecessors, (93), 7 states have call successors, (21), 4 states have call predecessors, (21), 8 states have return successors, (24), 10 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-19 06:50:01,483 INFO L276 IsEmpty]: Start isEmpty. Operand 1118 states and 1292 transitions. [2022-11-19 06:50:01,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-19 06:50:01,486 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:01,486 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:01,492 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-19 06:50:01,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:01,692 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:01,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:01,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1255222083, now seen corresponding path program 2 times [2022-11-19 06:50:01,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:01,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850184181] [2022-11-19 06:50:01,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:01,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:01,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:02,510 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 32 proven. 19 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-19 06:50:02,511 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:02,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850184181] [2022-11-19 06:50:02,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850184181] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:02,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2003574410] [2022-11-19 06:50:02,511 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 06:50:02,512 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:02,512 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:02,515 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:02,539 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 06:50:02,623 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 06:50:02,623 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 06:50:02,625 INFO L263 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-19 06:50:02,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:02,723 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 66 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-19 06:50:02,723 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:50:02,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2003574410] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:50:02,723 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:50:02,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 18 [2022-11-19 06:50:02,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1073837262] [2022-11-19 06:50:02,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:02,725 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:50:02,725 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:02,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:50:02,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=244, Unknown=0, NotChecked=0, Total=306 [2022-11-19 06:50:02,726 INFO L87 Difference]: Start difference. First operand 1118 states and 1292 transitions. Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-19 06:50:03,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:03,075 INFO L93 Difference]: Finished difference Result 2277 states and 2700 transitions. [2022-11-19 06:50:03,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-19 06:50:03,076 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 103 [2022-11-19 06:50:03,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:03,083 INFO L225 Difference]: With dead ends: 2277 [2022-11-19 06:50:03,084 INFO L226 Difference]: Without dead ends: 1349 [2022-11-19 06:50:03,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 111 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=72, Invalid=308, Unknown=0, NotChecked=0, Total=380 [2022-11-19 06:50:03,090 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 56 mSDsluCounter, 209 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:03,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 309 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:50:03,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1349 states. [2022-11-19 06:50:03,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1349 to 1180. [2022-11-19 06:50:03,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1180 states, 800 states have (on average 1.15) internal successors, (920), 856 states have internal predecessors, (920), 181 states have call successors, (181), 157 states have call predecessors, (181), 198 states have return successors, (266), 194 states have call predecessors, (266), 181 states have call successors, (266) [2022-11-19 06:50:03,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1180 states to 1180 states and 1367 transitions. [2022-11-19 06:50:03,256 INFO L78 Accepts]: Start accepts. Automaton has 1180 states and 1367 transitions. Word has length 103 [2022-11-19 06:50:03,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:03,257 INFO L495 AbstractCegarLoop]: Abstraction has 1180 states and 1367 transitions. [2022-11-19 06:50:03,257 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-19 06:50:03,257 INFO L276 IsEmpty]: Start isEmpty. Operand 1180 states and 1367 transitions. [2022-11-19 06:50:03,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-19 06:50:03,260 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:03,262 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:03,271 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-19 06:50:03,468 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 06:50:03,468 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:03,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:03,468 INFO L85 PathProgramCache]: Analyzing trace with hash -328526264, now seen corresponding path program 2 times [2022-11-19 06:50:03,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:03,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608301119] [2022-11-19 06:50:03,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:03,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:03,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:04,007 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 48 proven. 57 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-19 06:50:04,008 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:04,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608301119] [2022-11-19 06:50:04,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608301119] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:04,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1728716775] [2022-11-19 06:50:04,008 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 06:50:04,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:04,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:04,010 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:04,039 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 06:50:04,107 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-19 06:50:04,107 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 06:50:04,109 INFO L263 TraceCheckSpWp]: Trace formula consists of 206 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-19 06:50:04,117 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:04,328 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2022-11-19 06:50:04,328 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:50:04,672 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-11-19 06:50:04,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1728716775] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:04,673 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-19 06:50:04,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [14, 6] total 21 [2022-11-19 06:50:04,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855949555] [2022-11-19 06:50:04,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:04,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:50:04,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:04,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:50:04,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=363, Unknown=0, NotChecked=0, Total=420 [2022-11-19 06:50:04,675 INFO L87 Difference]: Start difference. First operand 1180 states and 1367 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:50:04,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:04,887 INFO L93 Difference]: Finished difference Result 1970 states and 2298 transitions. [2022-11-19 06:50:04,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:50:04,887 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 121 [2022-11-19 06:50:04,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:04,893 INFO L225 Difference]: With dead ends: 1970 [2022-11-19 06:50:04,894 INFO L226 Difference]: Without dead ends: 1106 [2022-11-19 06:50:04,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 259 GetRequests, 239 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2022-11-19 06:50:04,897 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 28 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:04,897 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 218 Invalid, 75 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:50:04,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1106 states. [2022-11-19 06:50:05,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1106 to 1075. [2022-11-19 06:50:05,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1075 states, 727 states have (on average 1.1375515818431912) internal successors, (827), 777 states have internal predecessors, (827), 166 states have call successors, (166), 149 states have call predecessors, (166), 181 states have return successors, (231), 176 states have call predecessors, (231), 166 states have call successors, (231) [2022-11-19 06:50:05,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1224 transitions. [2022-11-19 06:50:05,074 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1224 transitions. Word has length 121 [2022-11-19 06:50:05,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:05,075 INFO L495 AbstractCegarLoop]: Abstraction has 1075 states and 1224 transitions. [2022-11-19 06:50:05,075 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:50:05,075 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1224 transitions. [2022-11-19 06:50:05,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-11-19 06:50:05,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:05,081 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:05,086 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-11-19 06:50:05,286 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-19 06:50:05,286 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:05,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:05,287 INFO L85 PathProgramCache]: Analyzing trace with hash 783379550, now seen corresponding path program 2 times [2022-11-19 06:50:05,287 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:05,287 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640983219] [2022-11-19 06:50:05,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:05,287 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:05,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:05,763 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 38 proven. 71 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-19 06:50:05,764 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:05,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1640983219] [2022-11-19 06:50:05,764 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1640983219] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:05,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1304593007] [2022-11-19 06:50:05,764 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 06:50:05,764 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:05,764 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:05,779 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:05,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 06:50:05,887 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 06:50:05,887 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 06:50:05,889 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 40 conjunts are in the unsatisfiable core [2022-11-19 06:50:05,892 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:06,107 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 76 proven. 9 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-11-19 06:50:06,107 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:50:06,720 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 56 proven. 7 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-11-19 06:50:06,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1304593007] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:50:06,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [213672648] [2022-11-19 06:50:06,723 INFO L159 IcfgInterpreter]: Started Sifa with 53 locations of interest [2022-11-19 06:50:06,724 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:50:06,724 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:50:06,724 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:50:06,725 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:50:11,633 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 29 for LOIs [2022-11-19 06:50:11,636 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-19 06:50:11,999 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 37 for LOIs [2022-11-19 06:50:12,144 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 37 for LOIs [2022-11-19 06:50:12,361 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 38 for LOIs [2022-11-19 06:50:12,365 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 23 for LOIs [2022-11-19 06:50:12,368 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 40 for LOIs [2022-11-19 06:50:12,373 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 47 for LOIs [2022-11-19 06:50:12,380 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:50:18,767 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31246#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= ~methaneLevelCritical~0 1) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:50:18,767 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:50:18,767 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:50:18,768 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 9] total 27 [2022-11-19 06:50:18,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1603225348] [2022-11-19 06:50:18,768 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:50:18,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-19 06:50:18,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:18,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-19 06:50:18,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=358, Invalid=3424, Unknown=0, NotChecked=0, Total=3782 [2022-11-19 06:50:18,773 INFO L87 Difference]: Start difference. First operand 1075 states and 1224 transitions. Second operand has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) [2022-11-19 06:50:22,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:22,591 INFO L93 Difference]: Finished difference Result 2203 states and 2602 transitions. [2022-11-19 06:50:22,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-19 06:50:22,592 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) Word has length 125 [2022-11-19 06:50:22,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:22,593 INFO L225 Difference]: With dead ends: 2203 [2022-11-19 06:50:22,593 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 06:50:22,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 465 GetRequests, 321 SyntacticMatches, 24 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6049 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=1567, Invalid=13195, Unknown=0, NotChecked=0, Total=14762 [2022-11-19 06:50:22,602 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1212 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 2365 mSolverCounterSat, 889 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1212 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 3254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 889 IncrementalHoareTripleChecker+Valid, 2365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:22,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1212 Valid, 334 Invalid, 3254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [889 Valid, 2365 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-19 06:50:22,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 06:50:22,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 06:50:22,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:50:22,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 06:50:22,603 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2022-11-19 06:50:22,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:22,604 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 06:50:22,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 25 states have (on average 6.24) internal successors, (156), 25 states have internal predecessors, (156), 14 states have call successors, (32), 7 states have call predecessors, (32), 10 states have return successors, (36), 15 states have call predecessors, (36), 12 states have call successors, (36) [2022-11-19 06:50:22,604 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 06:50:22,604 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 06:50:22,607 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 06:50:22,617 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:22,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:22,815 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 06:50:38,551 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 245 252) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (= |old(~pumpRunning~0)| 0)) [2022-11-19 06:50:38,552 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 245 252) no Hoare annotation was computed. [2022-11-19 06:50:38,552 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 135 141) no Hoare annotation was computed. [2022-11-19 06:50:38,552 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 135 141) the Hoare annotation is: true [2022-11-19 06:50:38,552 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 443 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (= ~pumpRunning~0 1))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 ~waterLevel~0)) .cse1))) [2022-11-19 06:50:38,553 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 443 454) no Hoare annotation was computed. [2022-11-19 06:50:38,553 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 913 942) no Hoare annotation was computed. [2022-11-19 06:50:38,553 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-11-19 06:50:38,553 INFO L902 garLoopResultBuilder]: At program point L927-1(lines 927 931) the Hoare annotation is: true [2022-11-19 06:50:38,553 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 913 942) the Hoare annotation is: true [2022-11-19 06:50:38,553 INFO L902 garLoopResultBuilder]: At program point L923-2(lines 923 937) the Hoare annotation is: true [2022-11-19 06:50:38,553 INFO L902 garLoopResultBuilder]: At program point L919(line 919) the Hoare annotation is: true [2022-11-19 06:50:38,554 INFO L899 garLoopResultBuilder]: For program point L919-1(line 919) no Hoare annotation was computed. [2022-11-19 06:50:38,554 INFO L902 garLoopResultBuilder]: At program point L938(lines 913 942) the Hoare annotation is: true [2022-11-19 06:50:38,554 INFO L899 garLoopResultBuilder]: For program point L934(line 934) no Hoare annotation was computed. [2022-11-19 06:50:38,554 INFO L895 garLoopResultBuilder]: At program point L122-1(lines 122 128) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse6)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and .cse5 (= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not .cse2) (= ~pumpRunning~0 1) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse4) (or .cse1 (and .cse2 (not (= |old(~pumpRunning~0)| 1))) (and .cse5 (<= 1 ~waterLevel~0)) .cse3) (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) (or .cse1 .cse6 .cse4 (not (= |old(~waterLevel~0)| 2)))))) [2022-11-19 06:50:38,555 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |timeShift_processEnvironment_~tmp~2#1| 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1)) (not (= |old(~waterLevel~0)| 2))) (or .cse0 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1))) (and .cse1 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse2) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:50:38,555 INFO L895 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (and .cse0 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (<= 1 |old(~waterLevel~0)|))) (or .cse2 (not .cse1) (not (= |old(~pumpRunning~0)| 1)) .cse3) (or (and .cse0 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 2))))) [2022-11-19 06:50:38,555 INFO L895 garLoopResultBuilder]: At program point L201(line 201) the Hoare annotation is: (let ((.cse1 (let ((.cse4 (= ~pumpRunning~0 0))) (or (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not .cse4) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (and .cse1 (= ~pumpRunning~0 1)) .cse2) (or (= ~methaneLevelCritical~0 0) .cse0 (and .cse3 .cse1) .cse2) (or (and .cse3 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 2))))) [2022-11-19 06:50:38,555 INFO L899 garLoopResultBuilder]: For program point L201-1(line 201) no Hoare annotation was computed. [2022-11-19 06:50:38,555 INFO L895 garLoopResultBuilder]: At program point L214(line 214) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not .cse4)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 .cse3) (or .cse2 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1))) .cse4 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse1 (= ~waterLevel~0 1))) (or .cse2 .cse4 (not (= |old(~waterLevel~0)| 2)))))) [2022-11-19 06:50:38,556 INFO L895 garLoopResultBuilder]: At program point L214-1(lines 195 219) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse6)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and .cse5 (= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not .cse2) (= ~pumpRunning~0 1) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse4) (or .cse1 (and .cse2 (not (= |old(~pumpRunning~0)| 1))) (and .cse5 (<= 1 ~waterLevel~0)) .cse3) (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) (or .cse1 .cse6 .cse4 (not (= |old(~waterLevel~0)| 2)))))) [2022-11-19 06:50:38,556 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 538) no Hoare annotation was computed. [2022-11-19 06:50:38,556 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 114 133) no Hoare annotation was computed. [2022-11-19 06:50:38,556 INFO L895 garLoopResultBuilder]: At program point L528(lines 528 541) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 1)) (.cse3 (= ~waterLevel~0 1)) (.cse6 (not .cse5)) (.cse4 (not .cse2)) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (not (= |old(~waterLevel~0)| 2))) (or .cse6 .cse4 (not .cse7) (= ~pumpRunning~0 1) .cse8) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse4 (and .cse0 .cse1 .cse3)) (or .cse6 .cse4 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse8) (or .cse4 (and .cse0 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|) .cse2 (<= 1 ~waterLevel~0)) (and .cse7 (not (= |old(~pumpRunning~0)| 1))) .cse8)))) [2022-11-19 06:50:38,557 INFO L895 garLoopResultBuilder]: At program point L528-1(lines 520 544) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse7 (= ~methaneLevelCritical~0 0)) (.cse6 (not .cse5)) (.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 1)) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not .cse2)) (.cse9 (and .cse0 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|) .cse2 (<= 1 ~waterLevel~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (not (= |old(~waterLevel~0)| 2))) (or .cse6 .cse4 (and (or (not .cse7) (= ~pumpRunning~0 1)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse8) (or .cse7 .cse4 .cse9 .cse8) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse4 (and .cse0 .cse1 .cse3)) (or .cse4 .cse9 (not (= |old(~pumpRunning~0)| 1)) .cse8)))) [2022-11-19 06:50:38,557 INFO L895 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1))) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 2))))) [2022-11-19 06:50:38,557 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 211) no Hoare annotation was computed. [2022-11-19 06:50:38,557 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 216) no Hoare annotation was computed. [2022-11-19 06:50:38,557 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 111 134) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse1 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1))) .cse2 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-11-19 06:50:38,558 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 111 134) no Hoare annotation was computed. [2022-11-19 06:50:38,558 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-19 06:50:38,558 INFO L895 garLoopResultBuilder]: At program point L407(lines 360 408) the Hoare annotation is: false [2022-11-19 06:50:38,558 INFO L899 garLoopResultBuilder]: For program point L362(lines 361 406) no Hoare annotation was computed. [2022-11-19 06:50:38,558 INFO L895 garLoopResultBuilder]: At program point L994(lines 994 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-19 06:50:38,559 INFO L902 garLoopResultBuilder]: At program point L994-2(lines 994 1001) the Hoare annotation is: true [2022-11-19 06:50:38,559 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse1 .cse4 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-11-19 06:50:38,559 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 06:50:38,559 INFO L895 garLoopResultBuilder]: At program point L404(lines 361 406) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse1 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 .cse1 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse5 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2022-11-19 06:50:38,559 INFO L899 garLoopResultBuilder]: For program point L371(lines 371 377) no Hoare annotation was computed. [2022-11-19 06:50:38,559 INFO L899 garLoopResultBuilder]: For program point L371-1(lines 371 377) no Hoare annotation was computed. [2022-11-19 06:50:38,560 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 06:50:38,560 INFO L895 garLoopResultBuilder]: At program point L397-2(lines 391 402) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= 2 ~waterLevel~0) .cse0 .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse0 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse5 .cse1 .cse2 (not .cse0) .cse3))) [2022-11-19 06:50:38,560 INFO L899 garLoopResultBuilder]: For program point L381(lines 381 387) no Hoare annotation was computed. [2022-11-19 06:50:38,560 INFO L899 garLoopResultBuilder]: For program point L381-1(lines 381 387) no Hoare annotation was computed. [2022-11-19 06:50:38,560 INFO L902 garLoopResultBuilder]: At program point L410(lines 351 414) the Hoare annotation is: true [2022-11-19 06:50:38,560 INFO L895 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse3 .cse0 .cse1 .cse2 .cse4) (and .cse3 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2 .cse4))) [2022-11-19 06:50:38,561 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 143 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2022-11-19 06:50:38,561 INFO L895 garLoopResultBuilder]: At program point L157(line 157) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))))) [2022-11-19 06:50:38,561 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 159) no Hoare annotation was computed. [2022-11-19 06:50:38,561 INFO L895 garLoopResultBuilder]: At program point L147(lines 147 164) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2022-11-19 06:50:38,561 INFO L895 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-19 06:50:38,562 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 143 167) no Hoare annotation was computed. [2022-11-19 06:50:38,562 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 143 167) no Hoare annotation was computed. [2022-11-19 06:50:38,562 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1))) [2022-11-19 06:50:38,562 INFO L895 garLoopResultBuilder]: At program point L233-1(line 233) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0)) (not (<= 1 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-19 06:50:38,562 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 431 442) no Hoare annotation was computed. [2022-11-19 06:50:38,563 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 431 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) (not (= ~pumpRunning~0 1)) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:50:38,563 INFO L895 garLoopResultBuilder]: At program point L188(line 188) the Hoare annotation is: (let ((.cse5 (not (<= 2 ~waterLevel~0))) (.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (or (not (<= 1 ~waterLevel~0)) .cse4)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3) (or .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or (not .cse4) .cse1 .cse2 .cse5) (or (= ~methaneLevelCritical~0 0) .cse2 .cse4 .cse3)))) [2022-11-19 06:50:38,563 INFO L899 garLoopResultBuilder]: For program point L188-1(lines 169 193) no Hoare annotation was computed. [2022-11-19 06:50:38,563 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1)))) (or (not (= ~waterLevel~0 1)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-19 06:50:38,563 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse6 (or (and (= ~waterLevel~0 0) (<= 0 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|))) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not (= ~waterLevel~0 1))) (.cse0 (not .cse7)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (and .cse2 (or (not (<= 1 ~waterLevel~0)) .cse7)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse0 .cse1) (or (= ~methaneLevelCritical~0 0) .cse1 .cse4 .cse5) (or .cse1 (and .cse6 (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse5)))) [2022-11-19 06:50:38,564 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 185) no Hoare annotation was computed. [2022-11-19 06:50:38,564 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 169 193) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and (not (<= 2 ~waterLevel~0)) (or .cse2 .cse0)))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 .cse2) (or .cse3 (= ~methaneLevelCritical~0 0) .cse1 .cse4) (or (not (= ~waterLevel~0 1)) .cse3 .cse1) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1))))) [2022-11-19 06:50:38,564 INFO L895 garLoopResultBuilder]: At program point L173(lines 173 190) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and (not (<= 2 ~waterLevel~0)) (or .cse2 .cse0)))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 .cse2) (or .cse3 (= ~methaneLevelCritical~0 0) .cse1 .cse4) (or (not (= ~waterLevel~0 1)) .cse3 .cse1) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1))))) [2022-11-19 06:50:38,564 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 169 193) no Hoare annotation was computed. [2022-11-19 06:50:38,564 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 253 263) the Hoare annotation is: true [2022-11-19 06:50:38,564 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 253 263) no Hoare annotation was computed. [2022-11-19 06:50:38,568 INFO L444 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:38,570 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 06:50:38,611 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 06:50:38 BoogieIcfgContainer [2022-11-19 06:50:38,617 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 06:50:38,617 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 06:50:38,617 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 06:50:38,618 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 06:50:38,618 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:30" (3/4) ... [2022-11-19 06:50:38,621 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 06:50:38,626 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 06:50:38,627 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 06:50:38,627 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 06:50:38,627 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 06:50:38,627 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 06:50:38,627 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:50:38,628 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 06:50:38,628 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:50:38,628 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-19 06:50:38,638 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-19 06:50:38,640 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-11-19 06:50:38,641 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-19 06:50:38,641 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:50:38,642 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:50:38,669 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == 1)) || ((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) [2022-11-19 06:50:38,669 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-19 06:50:38,670 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) [2022-11-19 06:50:38,671 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) [2022-11-19 06:50:38,672 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(2 <= waterLevel) && (!(1 <= waterLevel) || \old(pumpRunning) == 0)))) && ((!(waterLevel == 1) || pumpRunning == \old(pumpRunning)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (!(2 <= waterLevel) && (!(1 <= waterLevel) || \old(pumpRunning) == 0))) || pumpRunning == 1) [2022-11-19 06:50:38,673 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) [2022-11-19 06:50:38,674 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || !(2 <= \old(waterLevel))) [2022-11-19 06:50:38,674 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(methaneLevelCritical == 0) || pumpRunning == 1) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) [2022-11-19 06:50:38,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && aux-isMethaneAlarm()-aux == methaneLevelCritical)) || !(1 <= waterLevel)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) [2022-11-19 06:50:38,678 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || !(2 <= \old(waterLevel)))) && (!(1 == systemActive) || !(\old(waterLevel) == 2)) [2022-11-19 06:50:38,736 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 06:50:38,737 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 06:50:38,737 INFO L158 Benchmark]: Toolchain (without parser) took 69847.82ms. Allocated memory was 88.1MB in the beginning and 861.9MB in the end (delta: 773.8MB). Free memory was 54.7MB in the beginning and 426.8MB in the end (delta: -372.1MB). Peak memory consumption was 400.1MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,738 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 88.1MB. Free memory was 60.1MB in the beginning and 60.1MB in the end (delta: 27.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:50:38,739 INFO L158 Benchmark]: CACSL2BoogieTranslator took 519.85ms. Allocated memory is still 88.1MB. Free memory was 54.5MB in the beginning and 56.8MB in the end (delta: -2.3MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,739 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.70ms. Allocated memory is still 88.1MB. Free memory was 56.8MB in the beginning and 54.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,739 INFO L158 Benchmark]: Boogie Preprocessor took 27.21ms. Allocated memory is still 88.1MB. Free memory was 54.3MB in the beginning and 52.9MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,740 INFO L158 Benchmark]: RCFGBuilder took 744.67ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 52.6MB in the beginning and 73.3MB in the end (delta: -20.7MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,740 INFO L158 Benchmark]: TraceAbstraction took 68369.65ms. Allocated memory was 107.0MB in the beginning and 861.9MB in the end (delta: 755.0MB). Free memory was 72.8MB in the beginning and 433.1MB in the end (delta: -360.3MB). Peak memory consumption was 515.8MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,741 INFO L158 Benchmark]: Witness Printer took 119.71ms. Allocated memory is still 861.9MB. Free memory was 433.1MB in the beginning and 426.8MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 06:50:38,749 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 88.1MB. Free memory was 60.1MB in the beginning and 60.1MB in the end (delta: 27.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 519.85ms. Allocated memory is still 88.1MB. Free memory was 54.5MB in the beginning and 56.8MB in the end (delta: -2.3MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.70ms. Allocated memory is still 88.1MB. Free memory was 56.8MB in the beginning and 54.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.21ms. Allocated memory is still 88.1MB. Free memory was 54.3MB in the beginning and 52.9MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 744.67ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 52.6MB in the beginning and 73.3MB in the end (delta: -20.7MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. * TraceAbstraction took 68369.65ms. Allocated memory was 107.0MB in the beginning and 861.9MB in the end (delta: 755.0MB). Free memory was 72.8MB in the beginning and 433.1MB in the end (delta: -360.3MB). Peak memory consumption was 515.8MB. Max. memory is 16.1GB. * Witness Printer took 119.71ms. Allocated memory is still 861.9MB. Free memory was 433.1MB in the beginning and 426.8MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 68 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 68.3s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 11.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 15.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3442 SdHoareTripleChecker+Valid, 5.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3401 mSDsluCounter, 3169 SdHoareTripleChecker+Invalid, 4.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2277 mSDsCounter, 1978 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5948 IncrementalHoareTripleChecker+Invalid, 7926 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1978 mSolverCounterUnsat, 892 mSDtfsCounter, 5948 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1537 GetRequests, 1133 SyntacticMatches, 30 SemanticMatches, 374 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11902 ImplicationChecksByTransitivity, 22.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1180occurred in iteration=12, InterpolantAutomatonStates: 216, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 14 MinimizatonAttempts, 831 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 3509 PreInvPairs, 3926 NumberOfFragments, 1855 HoareAnnotationTreeSize, 3509 FomulaSimplifications, 42113 FormulaSimplificationTreeSizeReduction, 2.6s HoareSimplificationTime, 40 FomulaSimplificationsInter, 122120 FormulaSimplificationTreeSizeReductionInter, 13.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 6.7s InterpolantComputationTime, 1366 NumberOfCodeBlocks, 1185 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1754 ConstructedInterpolants, 0 QuantifiedInterpolants, 4943 SizeOfPredicates, 52 NumberOfNonLiveVariables, 1563 ConjunctsInSsa, 137 ConjunctsInUnsatCore, 23 InterpolantComputations, 11 PerfectInterpolantSequences, 1040/1337 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || !(2 <= \old(waterLevel)))) && (!(1 == systemActive) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(2 <= waterLevel) && (!(1 <= waterLevel) || \old(pumpRunning) == 0)))) && ((!(waterLevel == 1) || pumpRunning == \old(pumpRunning)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (!(2 <= waterLevel) && (!(1 <= waterLevel) || \old(pumpRunning) == 0))) || pumpRunning == 1) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(methaneLevelCritical == 0) || pumpRunning == 1) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && aux-isMethaneAlarm()-aux == methaneLevelCritical)) || !(1 <= waterLevel)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == 1)) || ((((pumpRunning == 0 && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 923]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-19 06:50:38,790 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b8f0ca0-e50e-49a5-a7bd-2a177d5dff13/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE