./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e91d5c860cfea17112af53939b2fffb1e4c536355098377ab18c754994d1bc2b --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 13:45:58,830 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 13:45:58,832 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 13:45:58,859 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 13:45:58,860 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 13:45:58,863 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 13:45:58,866 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 13:45:58,870 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 13:45:58,872 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 13:45:58,878 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 13:45:58,880 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 13:45:58,882 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 13:45:58,882 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 13:45:58,887 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 13:45:58,889 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 13:45:58,891 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 13:45:58,893 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 13:45:58,894 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 13:45:58,896 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 13:45:58,902 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 13:45:58,904 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 13:45:58,906 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 13:45:58,907 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 13:45:58,908 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 13:45:58,918 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 13:45:58,919 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 13:45:58,919 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 13:45:58,921 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 13:45:58,921 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 13:45:58,922 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 13:45:58,923 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 13:45:58,924 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 13:45:58,926 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 13:45:58,927 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 13:45:58,928 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 13:45:58,929 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 13:45:58,929 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 13:45:58,930 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 13:45:58,930 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 13:45:58,931 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 13:45:58,932 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 13:45:58,933 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-23 13:45:58,984 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 13:45:58,984 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 13:45:58,985 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 13:45:58,985 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 13:45:58,986 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 13:45:58,987 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 13:45:58,987 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 13:45:58,987 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 13:45:58,987 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 13:45:58,988 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 13:45:58,989 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 13:45:58,989 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 13:45:58,989 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 13:45:58,990 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 13:45:58,990 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 13:45:58,990 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 13:45:58,991 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 13:45:58,991 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 13:45:58,992 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 13:45:58,992 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 13:45:58,993 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 13:45:58,993 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 13:45:58,993 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 13:45:58,993 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 13:45:58,994 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 13:45:58,994 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 13:45:58,994 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 13:45:58,995 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 13:45:58,995 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 13:45:58,995 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 13:45:58,996 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 13:45:58,996 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 13:45:58,996 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 13:45:58,997 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 13:45:58,997 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 13:45:58,997 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 13:45:58,998 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 13:45:58,998 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 13:45:58,998 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 13:45:58,998 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 13:45:58,999 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 13:45:58,999 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e91d5c860cfea17112af53939b2fffb1e4c536355098377ab18c754994d1bc2b [2022-11-23 13:45:59,298 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 13:45:59,325 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 13:45:59,329 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 13:45:59,331 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 13:45:59,331 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 13:45:59,332 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c [2022-11-23 13:46:02,308 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 13:46:02,608 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 13:46:02,608 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c [2022-11-23 13:46:02,637 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/data/84366d7bd/ab83b4b9945248868bf0a3e19900b725/FLAG56a62a33b [2022-11-23 13:46:02,651 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/data/84366d7bd/ab83b4b9945248868bf0a3e19900b725 [2022-11-23 13:46:02,654 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 13:46:02,676 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 13:46:02,677 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 13:46:02,678 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 13:46:02,683 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 13:46:02,684 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:46:02" (1/1) ... [2022-11-23 13:46:02,686 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3fe59e0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:02, skipping insertion in model container [2022-11-23 13:46:02,686 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:46:02" (1/1) ... [2022-11-23 13:46:02,697 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 13:46:02,768 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 13:46:03,015 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c[15987,16000] [2022-11-23 13:46:03,047 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 13:46:03,057 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 13:46:03,133 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c[15987,16000] [2022-11-23 13:46:03,155 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 13:46:03,193 INFO L208 MainTranslator]: Completed translation [2022-11-23 13:46:03,193 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03 WrapperNode [2022-11-23 13:46:03,193 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 13:46:03,195 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 13:46:03,197 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 13:46:03,198 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 13:46:03,206 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,229 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,265 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 225 [2022-11-23 13:46:03,265 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 13:46:03,266 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 13:46:03,266 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 13:46:03,266 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 13:46:03,277 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,277 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,279 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,280 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,285 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,289 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,291 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,292 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,295 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 13:46:03,296 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 13:46:03,296 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 13:46:03,296 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 13:46:03,297 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (1/1) ... [2022-11-23 13:46:03,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 13:46:03,316 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:03,330 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 13:46:03,352 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 13:46:03,387 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 13:46:03,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 13:46:03,388 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 13:46:03,388 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 13:46:03,388 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 13:46:03,388 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 13:46:03,388 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 13:46:03,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 13:46:03,389 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 13:46:03,389 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 13:46:03,389 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 13:46:03,389 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 13:46:03,389 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 13:46:03,389 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 13:46:03,390 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 13:46:03,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 13:46:03,390 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 13:46:03,390 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 13:46:03,390 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 13:46:03,390 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 13:46:03,469 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 13:46:03,472 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 13:46:03,839 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 13:46:03,967 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 13:46:03,969 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 13:46:03,972 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:03 BoogieIcfgContainer [2022-11-23 13:46:03,972 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 13:46:03,974 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 13:46:03,974 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 13:46:03,978 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 13:46:03,978 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:46:02" (1/3) ... [2022-11-23 13:46:03,979 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@410e638 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:46:03, skipping insertion in model container [2022-11-23 13:46:03,979 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:03" (2/3) ... [2022-11-23 13:46:03,979 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@410e638 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:46:03, skipping insertion in model container [2022-11-23 13:46:03,979 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:03" (3/3) ... [2022-11-23 13:46:03,981 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product53.cil.c [2022-11-23 13:46:04,016 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 13:46:04,017 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 13:46:04,098 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 13:46:04,141 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@26b81637, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 13:46:04,141 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 13:46:04,151 INFO L276 IsEmpty]: Start isEmpty. Operand has 62 states, 38 states have (on average 1.4473684210526316) internal successors, (55), 48 states have internal predecessors, (55), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-23 13:46:04,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-23 13:46:04,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:04,175 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:04,176 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:04,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:04,183 INFO L85 PathProgramCache]: Analyzing trace with hash 2066788619, now seen corresponding path program 1 times [2022-11-23 13:46:04,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:04,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [987624918] [2022-11-23 13:46:04,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:04,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:04,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:04,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:04,400 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:04,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [987624918] [2022-11-23 13:46:04,401 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [987624918] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:04,401 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:04,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 13:46:04,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1622736371] [2022-11-23 13:46:04,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:04,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 13:46:04,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:04,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 13:46:04,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 13:46:04,442 INFO L87 Difference]: Start difference. First operand has 62 states, 38 states have (on average 1.4473684210526316) internal successors, (55), 48 states have internal predecessors, (55), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:04,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:04,513 INFO L93 Difference]: Finished difference Result 122 states and 167 transitions. [2022-11-23 13:46:04,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 13:46:04,520 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-23 13:46:04,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:04,529 INFO L225 Difference]: With dead ends: 122 [2022-11-23 13:46:04,529 INFO L226 Difference]: Without dead ends: 57 [2022-11-23 13:46:04,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 13:46:04,540 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:04,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 62 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 13:46:04,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-23 13:46:04,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 57. [2022-11-23 13:46:04,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 35 states have (on average 1.3428571428571427) internal successors, (47), 44 states have internal predecessors, (47), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-23 13:46:04,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 74 transitions. [2022-11-23 13:46:04,591 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 74 transitions. Word has length 12 [2022-11-23 13:46:04,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:04,591 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 74 transitions. [2022-11-23 13:46:04,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:04,592 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 74 transitions. [2022-11-23 13:46:04,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-23 13:46:04,594 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:04,594 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:04,594 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 13:46:04,595 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:04,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:04,597 INFO L85 PathProgramCache]: Analyzing trace with hash 1228171401, now seen corresponding path program 1 times [2022-11-23 13:46:04,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:04,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382216141] [2022-11-23 13:46:04,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:04,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:04,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:04,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:04,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:04,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382216141] [2022-11-23 13:46:04,751 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382216141] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:04,751 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:04,751 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 13:46:04,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956499584] [2022-11-23 13:46:04,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:04,753 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 13:46:04,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:04,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 13:46:04,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:04,755 INFO L87 Difference]: Start difference. First operand 57 states and 74 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:04,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:04,833 INFO L93 Difference]: Finished difference Result 91 states and 119 transitions. [2022-11-23 13:46:04,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 13:46:04,833 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-23 13:46:04,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:04,835 INFO L225 Difference]: With dead ends: 91 [2022-11-23 13:46:04,835 INFO L226 Difference]: Without dead ends: 49 [2022-11-23 13:46:04,836 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:04,837 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 7 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:04,837 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 87 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 13:46:04,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2022-11-23 13:46:04,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2022-11-23 13:46:04,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 39 states have internal predecessors, (41), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 6 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-23 13:46:04,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 63 transitions. [2022-11-23 13:46:04,848 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 63 transitions. Word has length 13 [2022-11-23 13:46:04,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:04,848 INFO L495 AbstractCegarLoop]: Abstraction has 49 states and 63 transitions. [2022-11-23 13:46:04,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:04,848 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 63 transitions. [2022-11-23 13:46:04,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-23 13:46:04,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:04,849 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:04,850 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 13:46:04,850 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:04,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:04,851 INFO L85 PathProgramCache]: Analyzing trace with hash 1384655328, now seen corresponding path program 1 times [2022-11-23 13:46:04,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:04,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1467969668] [2022-11-23 13:46:04,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:04,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:04,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:05,011 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:05,011 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:05,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1467969668] [2022-11-23 13:46:05,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1467969668] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:05,012 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:05,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 13:46:05,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1888663573] [2022-11-23 13:46:05,012 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:05,012 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 13:46:05,013 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:05,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 13:46:05,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:05,014 INFO L87 Difference]: Start difference. First operand 49 states and 63 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:05,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:05,080 INFO L93 Difference]: Finished difference Result 96 states and 125 transitions. [2022-11-23 13:46:05,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 13:46:05,085 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-23 13:46:05,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:05,086 INFO L225 Difference]: With dead ends: 96 [2022-11-23 13:46:05,086 INFO L226 Difference]: Without dead ends: 49 [2022-11-23 13:46:05,087 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:05,088 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 52 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:05,088 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 46 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 13:46:05,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2022-11-23 13:46:05,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2022-11-23 13:46:05,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 30 states have (on average 1.3333333333333333) internal successors, (40), 39 states have internal predecessors, (40), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 6 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-23 13:46:05,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 62 transitions. [2022-11-23 13:46:05,097 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 62 transitions. Word has length 15 [2022-11-23 13:46:05,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:05,098 INFO L495 AbstractCegarLoop]: Abstraction has 49 states and 62 transitions. [2022-11-23 13:46:05,098 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:46:05,098 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 62 transitions. [2022-11-23 13:46:05,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-23 13:46:05,104 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:05,104 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:05,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 13:46:05,104 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:05,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:05,108 INFO L85 PathProgramCache]: Analyzing trace with hash 16176383, now seen corresponding path program 1 times [2022-11-23 13:46:05,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:05,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543501336] [2022-11-23 13:46:05,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:05,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:05,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:05,230 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:05,230 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:05,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543501336] [2022-11-23 13:46:05,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543501336] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:05,231 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:05,231 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 13:46:05,231 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095676176] [2022-11-23 13:46:05,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:05,232 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 13:46:05,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:05,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 13:46:05,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:05,233 INFO L87 Difference]: Start difference. First operand 49 states and 62 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 13:46:05,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:05,301 INFO L93 Difference]: Finished difference Result 130 states and 170 transitions. [2022-11-23 13:46:05,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 13:46:05,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-23 13:46:05,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:05,303 INFO L225 Difference]: With dead ends: 130 [2022-11-23 13:46:05,303 INFO L226 Difference]: Without dead ends: 83 [2022-11-23 13:46:05,304 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 13:46:05,305 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 37 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:05,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 97 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 13:46:05,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-23 13:46:05,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 81. [2022-11-23 13:46:05,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 53 states have (on average 1.2641509433962264) internal successors, (67), 61 states have internal predecessors, (67), 14 states have call successors, (14), 13 states have call predecessors, (14), 13 states have return successors, (20), 12 states have call predecessors, (20), 14 states have call successors, (20) [2022-11-23 13:46:05,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 101 transitions. [2022-11-23 13:46:05,325 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 101 transitions. Word has length 21 [2022-11-23 13:46:05,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:05,325 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 101 transitions. [2022-11-23 13:46:05,326 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 13:46:05,326 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 101 transitions. [2022-11-23 13:46:05,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-23 13:46:05,327 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:05,327 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:05,327 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 13:46:05,327 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:05,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:05,328 INFO L85 PathProgramCache]: Analyzing trace with hash -1946255968, now seen corresponding path program 1 times [2022-11-23 13:46:05,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:05,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559610977] [2022-11-23 13:46:05,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:05,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:05,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:05,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:05,666 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:05,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559610977] [2022-11-23 13:46:05,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559610977] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:05,667 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:05,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 13:46:05,669 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1503086211] [2022-11-23 13:46:05,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:05,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 13:46:05,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:05,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 13:46:05,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-23 13:46:05,677 INFO L87 Difference]: Start difference. First operand 81 states and 101 transitions. Second operand has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 13:46:05,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:05,857 INFO L93 Difference]: Finished difference Result 226 states and 280 transitions. [2022-11-23 13:46:05,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 13:46:05,863 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2022-11-23 13:46:05,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:05,870 INFO L225 Difference]: With dead ends: 226 [2022-11-23 13:46:05,871 INFO L226 Difference]: Without dead ends: 147 [2022-11-23 13:46:05,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-23 13:46:05,874 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 57 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:05,874 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 203 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 13:46:05,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2022-11-23 13:46:05,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 122. [2022-11-23 13:46:05,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 81 states have (on average 1.2098765432098766) internal successors, (98), 91 states have internal predecessors, (98), 19 states have call successors, (19), 18 states have call predecessors, (19), 21 states have return successors, (28), 19 states have call predecessors, (28), 19 states have call successors, (28) [2022-11-23 13:46:05,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 145 transitions. [2022-11-23 13:46:05,902 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 145 transitions. Word has length 28 [2022-11-23 13:46:05,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:05,903 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 145 transitions. [2022-11-23 13:46:05,903 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 13:46:05,903 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 145 transitions. [2022-11-23 13:46:05,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-23 13:46:05,905 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:05,905 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:05,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 13:46:05,905 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:05,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:05,906 INFO L85 PathProgramCache]: Analyzing trace with hash -1628976253, now seen corresponding path program 1 times [2022-11-23 13:46:05,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:05,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1067953643] [2022-11-23 13:46:05,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:05,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:05,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:06,194 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:06,194 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:06,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1067953643] [2022-11-23 13:46:06,195 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1067953643] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:06,195 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:06,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 13:46:06,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729792773] [2022-11-23 13:46:06,196 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:06,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 13:46:06,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:06,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 13:46:06,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-23 13:46:06,197 INFO L87 Difference]: Start difference. First operand 122 states and 145 transitions. Second operand has 8 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 13:46:06,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:06,705 INFO L93 Difference]: Finished difference Result 296 states and 368 transitions. [2022-11-23 13:46:06,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-23 13:46:06,705 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 31 [2022-11-23 13:46:06,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:06,707 INFO L225 Difference]: With dead ends: 296 [2022-11-23 13:46:06,707 INFO L226 Difference]: Without dead ends: 217 [2022-11-23 13:46:06,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-23 13:46:06,709 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 141 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 511 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 560 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 511 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:06,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 287 Invalid, 560 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 511 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 13:46:06,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2022-11-23 13:46:06,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 198. [2022-11-23 13:46:06,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 132 states have (on average 1.2121212121212122) internal successors, (160), 149 states have internal predecessors, (160), 31 states have call successors, (31), 27 states have call predecessors, (31), 34 states have return successors, (46), 32 states have call predecessors, (46), 31 states have call successors, (46) [2022-11-23 13:46:06,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 237 transitions. [2022-11-23 13:46:06,746 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 237 transitions. Word has length 31 [2022-11-23 13:46:06,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:06,746 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 237 transitions. [2022-11-23 13:46:06,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 13:46:06,747 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 237 transitions. [2022-11-23 13:46:06,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-23 13:46:06,749 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:06,749 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:06,749 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 13:46:06,749 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:06,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:06,750 INFO L85 PathProgramCache]: Analyzing trace with hash -327777137, now seen corresponding path program 1 times [2022-11-23 13:46:06,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:06,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30766617] [2022-11-23 13:46:06,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:06,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:06,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:07,167 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:07,167 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:07,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30766617] [2022-11-23 13:46:07,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30766617] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:07,168 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:07,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-23 13:46:07,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291004025] [2022-11-23 13:46:07,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:07,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 13:46:07,169 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:07,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 13:46:07,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-11-23 13:46:07,169 INFO L87 Difference]: Start difference. First operand 198 states and 237 transitions. Second operand has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-23 13:46:08,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:08,039 INFO L93 Difference]: Finished difference Result 360 states and 444 transitions. [2022-11-23 13:46:08,040 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-23 13:46:08,040 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2022-11-23 13:46:08,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:08,042 INFO L225 Difference]: With dead ends: 360 [2022-11-23 13:46:08,043 INFO L226 Difference]: Without dead ends: 272 [2022-11-23 13:46:08,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=113, Invalid=267, Unknown=0, NotChecked=0, Total=380 [2022-11-23 13:46:08,048 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 174 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 112 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 485 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 112 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:08,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 153 Invalid, 485 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [112 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 13:46:08,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-11-23 13:46:08,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 247. [2022-11-23 13:46:08,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 165 states have (on average 1.2424242424242424) internal successors, (205), 186 states have internal predecessors, (205), 38 states have call successors, (38), 32 states have call predecessors, (38), 43 states have return successors, (63), 40 states have call predecessors, (63), 38 states have call successors, (63) [2022-11-23 13:46:08,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 306 transitions. [2022-11-23 13:46:08,124 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 306 transitions. Word has length 47 [2022-11-23 13:46:08,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:08,125 INFO L495 AbstractCegarLoop]: Abstraction has 247 states and 306 transitions. [2022-11-23 13:46:08,125 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-23 13:46:08,126 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 306 transitions. [2022-11-23 13:46:08,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-23 13:46:08,134 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:08,134 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:08,134 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 13:46:08,134 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:08,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:08,135 INFO L85 PathProgramCache]: Analyzing trace with hash -924242484, now seen corresponding path program 1 times [2022-11-23 13:46:08,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:08,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [515229217] [2022-11-23 13:46:08,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:08,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:08,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:08,699 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:08,699 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:08,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [515229217] [2022-11-23 13:46:08,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [515229217] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:08,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1468558468] [2022-11-23 13:46:08,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:08,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:08,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:08,711 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:08,747 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 13:46:08,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:08,847 INFO L263 TraceCheckSpWp]: Trace formula consists of 260 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-23 13:46:08,853 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:09,196 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 13:46:09,197 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 13:46:09,798 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 13:46:09,798 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1468558468] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 13:46:09,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [760513179] [2022-11-23 13:46:09,817 INFO L159 IcfgInterpreter]: Started Sifa with 38 locations of interest [2022-11-23 13:46:09,818 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 13:46:09,822 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 13:46:09,827 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 13:46:09,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 13:46:12,210 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 31 for LOIs [2022-11-23 13:46:12,215 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-23 13:46:12,270 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 24 for LOIs [2022-11-23 13:46:12,312 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-23 13:46:12,340 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 13:46:14,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [760513179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:14,989 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-23 13:46:14,989 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [21] imperfect sequences [14, 9, 11] total 50 [2022-11-23 13:46:14,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747835880] [2022-11-23 13:46:14,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:14,990 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-23 13:46:14,991 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:14,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-23 13:46:14,992 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=2134, Unknown=0, NotChecked=0, Total=2450 [2022-11-23 13:46:14,992 INFO L87 Difference]: Start difference. First operand 247 states and 306 transitions. Second operand has 22 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 13:46:21,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:21,617 INFO L93 Difference]: Finished difference Result 668 states and 876 transitions. [2022-11-23 13:46:21,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-23 13:46:21,618 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 50 [2022-11-23 13:46:21,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:21,627 INFO L225 Difference]: With dead ends: 668 [2022-11-23 13:46:21,628 INFO L226 Difference]: Without dead ends: 516 [2022-11-23 13:46:21,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 112 SyntacticMatches, 3 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1690 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=611, Invalid=4081, Unknown=0, NotChecked=0, Total=4692 [2022-11-23 13:46:21,636 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 162 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 1303 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 465 SdHoareTripleChecker+Invalid, 1388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 1303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:21,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 465 Invalid, 1388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 1303 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-23 13:46:21,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2022-11-23 13:46:21,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 454. [2022-11-23 13:46:21,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 454 states, 313 states have (on average 1.2268370607028753) internal successors, (384), 343 states have internal predecessors, (384), 65 states have call successors, (65), 55 states have call predecessors, (65), 75 states have return successors, (110), 72 states have call predecessors, (110), 65 states have call successors, (110) [2022-11-23 13:46:21,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 454 states to 454 states and 559 transitions. [2022-11-23 13:46:21,744 INFO L78 Accepts]: Start accepts. Automaton has 454 states and 559 transitions. Word has length 50 [2022-11-23 13:46:21,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:21,746 INFO L495 AbstractCegarLoop]: Abstraction has 454 states and 559 transitions. [2022-11-23 13:46:21,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 13:46:21,746 INFO L276 IsEmpty]: Start isEmpty. Operand 454 states and 559 transitions. [2022-11-23 13:46:21,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-23 13:46:21,749 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:21,749 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:21,764 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 13:46:21,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:21,959 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:21,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:21,960 INFO L85 PathProgramCache]: Analyzing trace with hash -1132066367, now seen corresponding path program 1 times [2022-11-23 13:46:21,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:21,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909978435] [2022-11-23 13:46:21,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:21,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:21,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:22,485 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 13:46:22,485 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:22,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909978435] [2022-11-23 13:46:22,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909978435] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:22,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [106699615] [2022-11-23 13:46:22,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:22,486 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:22,486 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:22,487 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:22,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 13:46:22,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:22,568 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-23 13:46:22,571 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:22,816 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 13:46:22,816 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 13:46:23,369 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 13:46:23,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [106699615] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 13:46:23,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1831762296] [2022-11-23 13:46:23,371 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2022-11-23 13:46:23,372 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 13:46:23,372 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 13:46:23,372 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 13:46:23,372 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 13:46:27,052 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 129 for LOIs [2022-11-23 13:46:27,074 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2022-11-23 13:46:27,218 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 25 for LOIs [2022-11-23 13:46:27,256 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 25 for LOIs [2022-11-23 13:46:27,291 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-23 13:46:27,301 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 29 for LOIs [2022-11-23 13:46:27,304 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 13:46:33,721 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5975#(and (<= ~methaneLevelCritical~0 1) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~4#1|) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_~retValue_acc~10#1| ~waterLevel~0) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~4#1|) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-23 13:46:33,722 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 13:46:33,722 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 13:46:33,722 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 9, 11] total 30 [2022-11-23 13:46:33,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2120157270] [2022-11-23 13:46:33,722 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 13:46:33,723 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-23 13:46:33,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:33,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-23 13:46:33,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=334, Invalid=3088, Unknown=0, NotChecked=0, Total=3422 [2022-11-23 13:46:33,725 INFO L87 Difference]: Start difference. First operand 454 states and 559 transitions. Second operand has 30 states, 27 states have (on average 3.6666666666666665) internal successors, (99), 27 states have internal predecessors, (99), 13 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (17), 12 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-23 13:46:38,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:38,296 INFO L93 Difference]: Finished difference Result 983 states and 1250 transitions. [2022-11-23 13:46:38,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2022-11-23 13:46:38,297 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 27 states have (on average 3.6666666666666665) internal successors, (99), 27 states have internal predecessors, (99), 13 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (17), 12 states have call predecessors, (17), 13 states have call successors, (17) Word has length 53 [2022-11-23 13:46:38,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:38,301 INFO L225 Difference]: With dead ends: 983 [2022-11-23 13:46:38,301 INFO L226 Difference]: Without dead ends: 717 [2022-11-23 13:46:38,305 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 128 SyntacticMatches, 3 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4401 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=1422, Invalid=11234, Unknown=0, NotChecked=0, Total=12656 [2022-11-23 13:46:38,307 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 1185 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 2244 mSolverCounterSat, 816 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1190 SdHoareTripleChecker+Valid, 690 SdHoareTripleChecker+Invalid, 3060 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 816 IncrementalHoareTripleChecker+Valid, 2244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:38,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1190 Valid, 690 Invalid, 3060 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [816 Valid, 2244 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-23 13:46:38,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 717 states. [2022-11-23 13:46:38,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 717 to 486. [2022-11-23 13:46:38,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 332 states have (on average 1.1656626506024097) internal successors, (387), 359 states have internal predecessors, (387), 70 states have call successors, (70), 65 states have call predecessors, (70), 83 states have return successors, (95), 81 states have call predecessors, (95), 70 states have call successors, (95) [2022-11-23 13:46:38,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 552 transitions. [2022-11-23 13:46:38,408 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 552 transitions. Word has length 53 [2022-11-23 13:46:38,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:38,408 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 552 transitions. [2022-11-23 13:46:38,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 27 states have (on average 3.6666666666666665) internal successors, (99), 27 states have internal predecessors, (99), 13 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (17), 12 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-23 13:46:38,409 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 552 transitions. [2022-11-23 13:46:38,410 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-23 13:46:38,410 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:38,410 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:38,416 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-23 13:46:38,615 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-23 13:46:38,616 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:38,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:38,616 INFO L85 PathProgramCache]: Analyzing trace with hash -1638342415, now seen corresponding path program 2 times [2022-11-23 13:46:38,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:38,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764685195] [2022-11-23 13:46:38,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:38,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:38,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:39,404 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-23 13:46:39,404 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:39,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [764685195] [2022-11-23 13:46:39,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [764685195] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:39,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [507858005] [2022-11-23 13:46:39,404 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 13:46:39,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:39,405 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:39,407 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:39,430 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 13:46:39,498 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-23 13:46:39,499 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 13:46:39,500 INFO L263 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-23 13:46:39,504 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:39,718 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-11-23 13:46:39,718 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 13:46:40,027 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-11-23 13:46:40,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [507858005] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:40,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-23 13:46:40,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [18, 6] total 23 [2022-11-23 13:46:40,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1268063449] [2022-11-23 13:46:40,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:40,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 13:46:40,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:40,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 13:46:40,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=76, Invalid=430, Unknown=0, NotChecked=0, Total=506 [2022-11-23 13:46:40,030 INFO L87 Difference]: Start difference. First operand 486 states and 552 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-11-23 13:46:40,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:40,190 INFO L93 Difference]: Finished difference Result 797 states and 921 transitions. [2022-11-23 13:46:40,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 13:46:40,191 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 79 [2022-11-23 13:46:40,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:40,194 INFO L225 Difference]: With dead ends: 797 [2022-11-23 13:46:40,195 INFO L226 Difference]: Without dead ends: 532 [2022-11-23 13:46:40,196 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 153 SyntacticMatches, 2 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 166 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=81, Invalid=471, Unknown=0, NotChecked=0, Total=552 [2022-11-23 13:46:40,196 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 39 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:40,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 140 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 13:46:40,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-11-23 13:46:40,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 485. [2022-11-23 13:46:40,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 485 states, 331 states have (on average 1.1601208459214503) internal successors, (384), 358 states have internal predecessors, (384), 70 states have call successors, (70), 65 states have call predecessors, (70), 83 states have return successors, (95), 81 states have call predecessors, (95), 70 states have call successors, (95) [2022-11-23 13:46:40,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 485 states to 485 states and 549 transitions. [2022-11-23 13:46:40,286 INFO L78 Accepts]: Start accepts. Automaton has 485 states and 549 transitions. Word has length 79 [2022-11-23 13:46:40,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:40,287 INFO L495 AbstractCegarLoop]: Abstraction has 485 states and 549 transitions. [2022-11-23 13:46:40,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-11-23 13:46:40,287 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 549 transitions. [2022-11-23 13:46:40,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-11-23 13:46:40,289 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:40,290 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:40,301 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-23 13:46:40,496 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 13:46:40,496 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:40,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:40,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1865703158, now seen corresponding path program 1 times [2022-11-23 13:46:40,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:40,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [811589158] [2022-11-23 13:46:40,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:40,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:40,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:41,336 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-23 13:46:41,336 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:41,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [811589158] [2022-11-23 13:46:41,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [811589158] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:41,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1852533630] [2022-11-23 13:46:41,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:41,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:41,337 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:41,338 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:41,361 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-23 13:46:41,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:41,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-23 13:46:41,438 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:41,571 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 13:46:41,571 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 13:46:41,703 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 29 proven. 1 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-23 13:46:41,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1852533630] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 13:46:41,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [933368130] [2022-11-23 13:46:41,706 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2022-11-23 13:46:41,707 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 13:46:41,707 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 13:46:41,707 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 13:46:41,707 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 13:46:45,382 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 129 for LOIs [2022-11-23 13:46:45,401 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2022-11-23 13:46:45,523 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 25 for LOIs [2022-11-23 13:46:45,562 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 25 for LOIs [2022-11-23 13:46:45,689 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-23 13:46:45,696 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 26 for LOIs [2022-11-23 13:46:45,697 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 29 for LOIs [2022-11-23 13:46:45,700 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 13:46:53,023 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11422#(and (<= ~methaneLevelCritical~0 1) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~4#1|) (= ~head~0.offset 0) (<= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~10#1| ~waterLevel~0) (<= |#NULL.offset| 0) (<= 0 ~head~0.base) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (<= 0 ~pumpRunning~0) (<= ~head~0.base 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~4#1|) (<= 0 |#NULL.offset|) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |#StackHeapBarrier|) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-23 13:46:53,023 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 13:46:53,023 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 13:46:53,023 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 6, 6] total 23 [2022-11-23 13:46:53,023 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1488542065] [2022-11-23 13:46:53,023 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 13:46:53,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-23 13:46:53,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:53,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-23 13:46:53,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=268, Invalid=2594, Unknown=0, NotChecked=0, Total=2862 [2022-11-23 13:46:53,026 INFO L87 Difference]: Start difference. First operand 485 states and 549 transitions. Second operand has 23 states, 21 states have (on average 4.9523809523809526) internal successors, (104), 21 states have internal predecessors, (104), 9 states have call successors, (20), 5 states have call predecessors, (20), 7 states have return successors, (20), 9 states have call predecessors, (20), 8 states have call successors, (20) [2022-11-23 13:46:56,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:56,824 INFO L93 Difference]: Finished difference Result 1120 states and 1324 transitions. [2022-11-23 13:46:56,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-23 13:46:56,824 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 21 states have (on average 4.9523809523809526) internal successors, (104), 21 states have internal predecessors, (104), 9 states have call successors, (20), 5 states have call predecessors, (20), 7 states have return successors, (20), 9 states have call predecessors, (20), 8 states have call successors, (20) Word has length 82 [2022-11-23 13:46:56,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:56,833 INFO L225 Difference]: With dead ends: 1120 [2022-11-23 13:46:56,833 INFO L226 Difference]: Without dead ends: 822 [2022-11-23 13:46:56,837 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 216 SyntacticMatches, 7 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3616 ImplicationChecksByTransitivity, 9.7s TimeCoverageRelationStatistics Valid=1080, Invalid=9426, Unknown=0, NotChecked=0, Total=10506 [2022-11-23 13:46:56,837 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 999 mSDsluCounter, 457 mSDsCounter, 0 mSdLazyCounter, 2005 mSolverCounterSat, 586 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1006 SdHoareTripleChecker+Valid, 502 SdHoareTripleChecker+Invalid, 2591 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 586 IncrementalHoareTripleChecker+Valid, 2005 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:56,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1006 Valid, 502 Invalid, 2591 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [586 Valid, 2005 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-23 13:46:56,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2022-11-23 13:46:56,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 747. [2022-11-23 13:46:56,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 747 states, 501 states have (on average 1.1497005988023952) internal successors, (576), 551 states have internal predecessors, (576), 111 states have call successors, (111), 101 states have call predecessors, (111), 134 states have return successors, (166), 121 states have call predecessors, (166), 111 states have call successors, (166) [2022-11-23 13:46:56,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 747 states to 747 states and 853 transitions. [2022-11-23 13:46:56,975 INFO L78 Accepts]: Start accepts. Automaton has 747 states and 853 transitions. Word has length 82 [2022-11-23 13:46:56,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:56,976 INFO L495 AbstractCegarLoop]: Abstraction has 747 states and 853 transitions. [2022-11-23 13:46:56,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 21 states have (on average 4.9523809523809526) internal successors, (104), 21 states have internal predecessors, (104), 9 states have call successors, (20), 5 states have call predecessors, (20), 7 states have return successors, (20), 9 states have call predecessors, (20), 8 states have call successors, (20) [2022-11-23 13:46:56,977 INFO L276 IsEmpty]: Start isEmpty. Operand 747 states and 853 transitions. [2022-11-23 13:46:56,979 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-11-23 13:46:56,979 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:56,979 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:56,992 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-23 13:46:57,185 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:57,185 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:57,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:57,186 INFO L85 PathProgramCache]: Analyzing trace with hash -1673710427, now seen corresponding path program 1 times [2022-11-23 13:46:57,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:57,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1622281350] [2022-11-23 13:46:57,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:57,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:57,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:57,329 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2022-11-23 13:46:57,329 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:57,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1622281350] [2022-11-23 13:46:57,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1622281350] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:57,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 13:46:57,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 13:46:57,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1201570428] [2022-11-23 13:46:57,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:57,333 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 13:46:57,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:57,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 13:46:57,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 13:46:57,334 INFO L87 Difference]: Start difference. First operand 747 states and 853 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-11-23 13:46:57,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:57,508 INFO L93 Difference]: Finished difference Result 749 states and 854 transitions. [2022-11-23 13:46:57,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 13:46:57,509 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 83 [2022-11-23 13:46:57,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:57,514 INFO L225 Difference]: With dead ends: 749 [2022-11-23 13:46:57,514 INFO L226 Difference]: Without dead ends: 747 [2022-11-23 13:46:57,515 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 13:46:57,516 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 44 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:57,516 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 150 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 13:46:57,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 747 states. [2022-11-23 13:46:57,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 747 to 747. [2022-11-23 13:46:57,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 747 states, 501 states have (on average 1.1437125748502994) internal successors, (573), 551 states have internal predecessors, (573), 111 states have call successors, (111), 101 states have call predecessors, (111), 134 states have return successors, (166), 121 states have call predecessors, (166), 111 states have call successors, (166) [2022-11-23 13:46:57,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 747 states to 747 states and 850 transitions. [2022-11-23 13:46:57,654 INFO L78 Accepts]: Start accepts. Automaton has 747 states and 850 transitions. Word has length 83 [2022-11-23 13:46:57,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:57,655 INFO L495 AbstractCegarLoop]: Abstraction has 747 states and 850 transitions. [2022-11-23 13:46:57,655 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-11-23 13:46:57,655 INFO L276 IsEmpty]: Start isEmpty. Operand 747 states and 850 transitions. [2022-11-23 13:46:57,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-23 13:46:57,663 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:57,663 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:57,663 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-23 13:46:57,664 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:57,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:57,664 INFO L85 PathProgramCache]: Analyzing trace with hash -544063413, now seen corresponding path program 1 times [2022-11-23 13:46:57,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:57,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1062088139] [2022-11-23 13:46:57,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:57,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:57,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:58,410 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 28 proven. 26 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 13:46:58,410 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:58,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1062088139] [2022-11-23 13:46:58,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1062088139] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:58,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [675994179] [2022-11-23 13:46:58,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:58,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:58,411 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:58,415 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:58,444 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-23 13:46:58,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:58,524 INFO L263 TraceCheckSpWp]: Trace formula consists of 396 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-23 13:46:58,527 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:58,607 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 60 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 13:46:58,607 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 13:46:58,608 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [675994179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 13:46:58,608 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 13:46:58,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 18 [2022-11-23 13:46:58,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556162148] [2022-11-23 13:46:58,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 13:46:58,609 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 13:46:58,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:46:58,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 13:46:58,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2022-11-23 13:46:58,610 INFO L87 Difference]: Start difference. First operand 747 states and 850 transitions. Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-23 13:46:58,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:46:58,860 INFO L93 Difference]: Finished difference Result 1282 states and 1467 transitions. [2022-11-23 13:46:58,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 13:46:58,861 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 91 [2022-11-23 13:46:58,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:46:58,864 INFO L225 Difference]: With dead ends: 1282 [2022-11-23 13:46:58,865 INFO L226 Difference]: Without dead ends: 627 [2022-11-23 13:46:58,867 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=320, Unknown=0, NotChecked=0, Total=380 [2022-11-23 13:46:58,867 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 49 mSDsluCounter, 174 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 13:46:58,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 258 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 13:46:58,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 627 states. [2022-11-23 13:46:58,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 627 to 621. [2022-11-23 13:46:58,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 621 states, 417 states have (on average 1.1342925659472423) internal successors, (473), 459 states have internal predecessors, (473), 94 states have call successors, (94), 88 states have call predecessors, (94), 109 states have return successors, (124), 98 states have call predecessors, (124), 94 states have call successors, (124) [2022-11-23 13:46:58,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 621 states to 621 states and 691 transitions. [2022-11-23 13:46:58,971 INFO L78 Accepts]: Start accepts. Automaton has 621 states and 691 transitions. Word has length 91 [2022-11-23 13:46:58,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:46:58,972 INFO L495 AbstractCegarLoop]: Abstraction has 621 states and 691 transitions. [2022-11-23 13:46:58,972 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-23 13:46:58,972 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 691 transitions. [2022-11-23 13:46:58,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-23 13:46:58,974 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 13:46:58,974 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:46:58,985 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-23 13:46:59,185 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-23 13:46:59,186 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 13:46:59,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 13:46:59,186 INFO L85 PathProgramCache]: Analyzing trace with hash -1747543467, now seen corresponding path program 2 times [2022-11-23 13:46:59,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 13:46:59,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808974859] [2022-11-23 13:46:59,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 13:46:59,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 13:46:59,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 13:46:59,432 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 31 proven. 41 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-23 13:46:59,433 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 13:46:59,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808974859] [2022-11-23 13:46:59,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808974859] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 13:46:59,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1859947679] [2022-11-23 13:46:59,433 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 13:46:59,434 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 13:46:59,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 13:46:59,435 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 13:46:59,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-23 13:46:59,525 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-23 13:46:59,525 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 13:46:59,527 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 40 conjunts are in the unsatisfiable core [2022-11-23 13:46:59,530 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 13:46:59,701 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 64 proven. 7 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-11-23 13:46:59,701 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 13:47:00,284 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 52 proven. 7 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-11-23 13:47:00,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1859947679] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 13:47:00,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1342400022] [2022-11-23 13:47:00,289 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-11-23 13:47:00,289 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 13:47:00,291 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 13:47:00,291 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 13:47:00,291 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 13:47:03,476 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 127 for LOIs [2022-11-23 13:47:03,495 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-23 13:47:03,646 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 50 for LOIs [2022-11-23 13:47:03,971 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 60 for LOIs [2022-11-23 13:47:04,135 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2022-11-23 13:47:04,140 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-23 13:47:04,143 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 28 for LOIs [2022-11-23 13:47:04,148 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 13:47:11,030 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20741#(and (<= ~methaneLevelCritical~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~4#1|) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_~retValue_acc~10#1| ~waterLevel~0) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~4#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-23 13:47:11,031 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 13:47:11,031 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 13:47:11,031 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 21 [2022-11-23 13:47:11,031 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1065620782] [2022-11-23 13:47:11,031 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 13:47:11,032 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-23 13:47:11,032 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 13:47:11,033 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-23 13:47:11,034 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=2707, Unknown=0, NotChecked=0, Total=3080 [2022-11-23 13:47:11,034 INFO L87 Difference]: Start difference. First operand 621 states and 691 transitions. Second operand has 21 states, 20 states have (on average 5.95) internal successors, (119), 21 states have internal predecessors, (119), 9 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (26), 10 states have call predecessors, (26), 7 states have call successors, (26) [2022-11-23 13:47:12,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 13:47:12,744 INFO L93 Difference]: Finished difference Result 1364 states and 1603 transitions. [2022-11-23 13:47:12,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-23 13:47:12,745 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 5.95) internal successors, (119), 21 states have internal predecessors, (119), 9 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (26), 10 states have call predecessors, (26), 7 states have call successors, (26) Word has length 109 [2022-11-23 13:47:12,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 13:47:12,746 INFO L225 Difference]: With dead ends: 1364 [2022-11-23 13:47:12,746 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 13:47:12,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 368 GetRequests, 277 SyntacticMatches, 12 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2567 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=827, Invalid=5653, Unknown=0, NotChecked=0, Total=6480 [2022-11-23 13:47:12,751 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 315 mSDsluCounter, 576 mSDsCounter, 0 mSdLazyCounter, 861 mSolverCounterSat, 312 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 1173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 312 IncrementalHoareTripleChecker+Valid, 861 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 13:47:12,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [315 Valid, 683 Invalid, 1173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [312 Valid, 861 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 13:47:12,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 13:47:12,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 13:47:12,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 13:47:12,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 13:47:12,753 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 109 [2022-11-23 13:47:12,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 13:47:12,753 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 13:47:12,753 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 5.95) internal successors, (119), 21 states have internal predecessors, (119), 9 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (26), 10 states have call predecessors, (26), 7 states have call successors, (26) [2022-11-23 13:47:12,753 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 13:47:12,754 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 13:47:12,756 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 13:47:12,783 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-23 13:47:12,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-23 13:47:12,964 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 13:47:28,421 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 615 622) the Hoare annotation is: (or (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2022-11-23 13:47:28,421 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 615 622) no Hoare annotation was computed. [2022-11-23 13:47:28,421 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 522 528) no Hoare annotation was computed. [2022-11-23 13:47:28,421 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 522 528) the Hoare annotation is: true [2022-11-23 13:47:28,422 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 792 803) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 1)))) (let ((.cse1 (not (<= 2 ~waterLevel~0))) (.cse3 (not (= ~pumpRunning~0 1))) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (and (not (= |old(~methaneLevelCritical~0)| 0)) .cse4)) (.cse7 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~waterLevel~0))) (.cse2 (= ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse1 .cse2 .cse3) (or .cse7 .cse5 .cse0 .cse6 .cse8 .cse2) (or .cse7 .cse0 .cse8 .cse2 .cse4)))) [2022-11-23 13:47:28,422 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 792 803) no Hoare annotation was computed. [2022-11-23 13:47:28,422 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 896 925) no Hoare annotation was computed. [2022-11-23 13:47:28,422 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 896 925) the Hoare annotation is: true [2022-11-23 13:47:28,423 INFO L902 garLoopResultBuilder]: At program point L921(lines 896 925) the Hoare annotation is: true [2022-11-23 13:47:28,423 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2022-11-23 13:47:28,423 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 914) no Hoare annotation was computed. [2022-11-23 13:47:28,423 INFO L902 garLoopResultBuilder]: At program point L910-1(lines 910 914) the Hoare annotation is: true [2022-11-23 13:47:28,423 INFO L902 garLoopResultBuilder]: At program point L906-2(lines 906 920) the Hoare annotation is: true [2022-11-23 13:47:28,423 INFO L902 garLoopResultBuilder]: At program point L902(line 902) the Hoare annotation is: true [2022-11-23 13:47:28,423 INFO L899 garLoopResultBuilder]: For program point L902-1(line 902) no Hoare annotation was computed. [2022-11-23 13:47:28,424 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-23 13:47:28,424 INFO L895 garLoopResultBuilder]: At program point L601-1(lines 582 606) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse10 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (not .cse10)) (.cse1 (and (not .cse7) (not .cse8))) (.cse2 (not .cse9)) (.cse6 (and (or .cse7 .cse8) (<= 2 ~waterLevel~0) .cse9 .cse10 .cse5 (= ~pumpRunning~0 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse4 (and .cse0 .cse5) .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse6) (or .cse4 .cse1 .cse2 .cse6 .cse3)))) [2022-11-23 13:47:28,424 INFO L899 garLoopResultBuilder]: For program point L502-1(lines 501 520) no Hoare annotation was computed. [2022-11-23 13:47:28,425 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 598) no Hoare annotation was computed. [2022-11-23 13:47:28,425 INFO L895 garLoopResultBuilder]: At program point L586(lines 586 603) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-23 13:47:28,425 INFO L895 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse0 .cse1 .cse2 .cse3))) [2022-11-23 13:47:28,425 INFO L895 garLoopResultBuilder]: At program point L509-1(lines 509 515) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse10 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (not .cse10)) (.cse1 (and (not .cse7) (not .cse8))) (.cse2 (not .cse9)) (.cse6 (and (or .cse7 .cse8) (<= 2 ~waterLevel~0) .cse9 .cse10 .cse5 (= ~pumpRunning~0 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse4 (and .cse0 .cse5) .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse6) (or .cse4 .cse1 .cse2 .cse6 .cse3)))) [2022-11-23 13:47:28,426 INFO L895 garLoopResultBuilder]: At program point L596(line 596) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 1)))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) (= ~pumpRunning~0 1)) .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse5 .cse0 .cse1 .cse3)))) [2022-11-23 13:47:28,426 INFO L899 garLoopResultBuilder]: For program point L881(lines 881 887) no Hoare annotation was computed. [2022-11-23 13:47:28,426 INFO L895 garLoopResultBuilder]: At program point L592(line 592) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 1))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not .cse0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) .cse0 (= ~pumpRunning~0 1)) .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse4 .cse1 .cse2 .cse3)))) [2022-11-23 13:47:28,427 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 498 521) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (and .cse2 (= ~pumpRunning~0 1)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-23 13:47:28,427 INFO L895 garLoopResultBuilder]: At program point L877(lines 877 890) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse9 (= 1 ~systemActive~0)) (.cse10 (= |old(~pumpRunning~0)| 0)) (.cse5 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| ~waterLevel~0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not .cse11)) (.cse12 (= ~methaneLevelCritical~0 1))) (let ((.cse4 (= ~pumpRunning~0 0)) (.cse1 (and .cse8 (not .cse12))) (.cse3 (and (or .cse11 .cse12) (not (= |old(~waterLevel~0)| 1)) .cse9 .cse10 .cse5 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1|) .cse6 (= ~pumpRunning~0 1))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not .cse10)) (.cse2 (not .cse9))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse3 (and .cse4 .cse5 .cse6)) (or .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) .cse5) .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse0 (not (= |#NULL.offset| 0)) .cse2 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|)) (not (= ~head~0.offset 0)) .cse8 (not (= |#NULL.base| 0)) (not (= |old(~waterLevel~0)| 2)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))))) [2022-11-23 13:47:28,428 INFO L895 garLoopResultBuilder]: At program point L877-1(lines 869 893) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (and .cse6 (not (= ~methaneLevelCritical~0 1)))) (.cse4 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| ~waterLevel~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (and .cse3 .cse4 (= ~waterLevel~0 1))) (or .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) (and .cse3 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) .cse4) .cse5) (or .cse0 .cse1 .cse2 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse5) (or .cse0 (not (= |#NULL.offset| 0)) .cse2 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~10#1| |timeShift_getWaterLevel_#res#1|)) (not (= ~head~0.offset 0)) .cse6 (not (= |#NULL.base| 0)) (not (= |old(~waterLevel~0)| 2)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-23 13:47:28,428 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 498 521) no Hoare annotation was computed. [2022-11-23 13:47:28,428 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 760) no Hoare annotation was computed. [2022-11-23 13:47:28,428 INFO L895 garLoopResultBuilder]: At program point L473(lines 430 475) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-23 13:47:28,428 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2022-11-23 13:47:28,428 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2022-11-23 13:47:28,429 INFO L895 garLoopResultBuilder]: At program point L977(lines 977 984) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= |ULTIMATE.start_valid_product_~retValue_acc~8#1| 1) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= |ULTIMATE.start_main_~tmp~10#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= |ULTIMATE.start_valid_product_~retValue_acc~8#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-23 13:47:28,429 INFO L902 garLoopResultBuilder]: At program point L977-2(lines 977 984) the Hoare annotation is: true [2022-11-23 13:47:28,430 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-23 13:47:28,430 INFO L895 garLoopResultBuilder]: At program point L466-2(lines 460 471) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-23 13:47:28,430 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2022-11-23 13:47:28,430 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2022-11-23 13:47:28,430 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 13:47:28,431 INFO L902 garLoopResultBuilder]: At program point L479(lines 420 483) the Hoare annotation is: true [2022-11-23 13:47:28,431 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-23 13:47:28,431 INFO L895 garLoopResultBuilder]: At program point L476(lines 429 477) the Hoare annotation is: false [2022-11-23 13:47:28,431 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 475) no Hoare annotation was computed. [2022-11-23 13:47:28,431 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-23 13:47:28,432 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 530 554) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-23 13:47:28,432 INFO L895 garLoopResultBuilder]: At program point L544(line 544) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse1 (and .cse4 (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))) (or .cse3 .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0))) (or .cse3 .cse0 (not (= |#NULL.offset| 0)) (and (= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~11#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~11#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) .cse2 (not (= ~head~0.offset 0)) .cse4 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-23 13:47:28,432 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 530 554) no Hoare annotation was computed. [2022-11-23 13:47:28,433 INFO L895 garLoopResultBuilder]: At program point L538(lines 538 546) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse2 (not (= |#NULL.offset| 0))) (.cse3 (and (let ((.cse14 (< ~waterLevel~0 2)) (.cse13 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~11#1|))) (or (and (= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~11#1|) .cse13 .cse14) (and (not .cse14) .cse13 (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~11#1|)))) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|))) (.cse5 (not (= ~head~0.offset 0))) (.cse7 (not (= |#NULL.base| 0))) (.cse8 (not (<= 0 |#StackHeapBarrier|))) (.cse9 (not (= ~head~0.base 0))) (.cse10 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (and .cse6 (not (= ~methaneLevelCritical~0 1)))) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse1 .cse2 .cse3 .cse4 (not (= 2 ~waterLevel~0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse1 .cse11 .cse4 (not (<= 2 ~waterLevel~0)) (and .cse12 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 1))) (or .cse0 .cse1 .cse11 .cse4 (and .cse12 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)))))) [2022-11-23 13:47:28,433 INFO L895 garLoopResultBuilder]: At program point L534(lines 534 551) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-23 13:47:28,433 INFO L895 garLoopResultBuilder]: At program point L549(line 549) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-23 13:47:28,433 INFO L899 garLoopResultBuilder]: For program point L549-1(lines 530 554) no Hoare annotation was computed. [2022-11-23 13:47:28,433 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 780 791) no Hoare annotation was computed. [2022-11-23 13:47:28,434 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 780 791) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= ~pumpRunning~0 1)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-23 13:47:28,434 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 556 580) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-23 13:47:28,434 INFO L895 garLoopResultBuilder]: At program point L570(line 570) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1))))) [2022-11-23 13:47:28,434 INFO L895 garLoopResultBuilder]: At program point L566(line 566) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~5#1|) (= ~pumpRunning~0 1)) .cse2 (not (= |old(~pumpRunning~0)| 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-23 13:47:28,435 INFO L899 garLoopResultBuilder]: For program point L564(lines 564 572) no Hoare annotation was computed. [2022-11-23 13:47:28,435 INFO L895 garLoopResultBuilder]: At program point L560(lines 560 577) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-23 13:47:28,435 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1))))) [2022-11-23 13:47:28,435 INFO L899 garLoopResultBuilder]: For program point L575-1(lines 556 580) no Hoare annotation was computed. [2022-11-23 13:47:28,435 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 556 580) no Hoare annotation was computed. [2022-11-23 13:47:28,439 INFO L444 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 13:47:28,441 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 13:47:28,488 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 01:47:28 BoogieIcfgContainer [2022-11-23 13:47:28,498 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 13:47:28,499 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 13:47:28,499 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 13:47:28,499 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 13:47:28,500 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:03" (3/4) ... [2022-11-23 13:47:28,503 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 13:47:28,509 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 13:47:28,509 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 13:47:28,509 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 13:47:28,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 13:47:28,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 13:47:28,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 13:47:28,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 13:47:28,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 13:47:28,527 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-23 13:47:28,527 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-11-23 13:47:28,528 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-23 13:47:28,528 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 13:47:28,529 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 13:47:28,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && retValue_acc == 1) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && tmp == \result) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && retValue_acc == \result) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-23 13:47:28,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-11-23 13:47:28,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-11-23 13:47:28,562 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-11-23 13:47:28,563 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-11-23 13:47:28,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= waterLevel)) [2022-11-23 13:47:28,567 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= waterLevel) [2022-11-23 13:47:28,567 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && !(\old(waterLevel) == 1)) && 1 == systemActive) && \old(pumpRunning) == 0) && tmp == waterLevel) && 1 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && !(\old(waterLevel) == 1)) && 1 == systemActive) && \old(pumpRunning) == 0) && tmp == waterLevel) && 1 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || (tmp == \result && retValue_acc == \result)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-23 13:47:28,567 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1)) && (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || (tmp == \result && retValue_acc == \result)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-23 13:47:28,568 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) && ((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-11-23 13:47:28,573 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || (((((((1 == retValue_acc && \result == retValue_acc) && waterLevel < 2) || ((!(waterLevel < 2) && \result == retValue_acc) && 0 == retValue_acc)) && retValue_acc == tmp___0) && \result == tmp) && retValue_acc == \result) && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (((((((1 == retValue_acc && \result == retValue_acc) && waterLevel < 2) || ((!(waterLevel < 2) && \result == retValue_acc) && 0 == retValue_acc)) && retValue_acc == tmp___0) && \result == tmp) && retValue_acc == \result) && tmp == \result)) || !(1 == systemActive)) || !(2 == waterLevel)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && tmp == 1))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) [2022-11-23 13:47:28,626 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/witness.graphml [2022-11-23 13:47:28,629 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 13:47:28,630 INFO L158 Benchmark]: Toolchain (without parser) took 85954.15ms. Allocated memory was 161.5MB in the beginning and 708.8MB in the end (delta: 547.4MB). Free memory was 132.9MB in the beginning and 415.7MB in the end (delta: -282.8MB). Peak memory consumption was 262.5MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,630 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 127.9MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 13:47:28,630 INFO L158 Benchmark]: CACSL2BoogieTranslator took 516.51ms. Allocated memory is still 161.5MB. Free memory was 132.7MB in the beginning and 115.1MB in the end (delta: 17.6MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,631 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.88ms. Allocated memory is still 161.5MB. Free memory was 115.1MB in the beginning and 113.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,632 INFO L158 Benchmark]: Boogie Preprocessor took 28.96ms. Allocated memory is still 161.5MB. Free memory was 113.1MB in the beginning and 111.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,632 INFO L158 Benchmark]: RCFGBuilder took 676.02ms. Allocated memory is still 161.5MB. Free memory was 111.0MB in the beginning and 85.2MB in the end (delta: 25.8MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,633 INFO L158 Benchmark]: TraceAbstraction took 84524.55ms. Allocated memory was 161.5MB in the beginning and 708.8MB in the end (delta: 547.4MB). Free memory was 84.6MB in the beginning and 422.0MB in the end (delta: -337.4MB). Peak memory consumption was 384.0MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,633 INFO L158 Benchmark]: Witness Printer took 130.15ms. Allocated memory is still 708.8MB. Free memory was 422.0MB in the beginning and 415.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 13:47:28,637 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 127.9MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 516.51ms. Allocated memory is still 161.5MB. Free memory was 132.7MB in the beginning and 115.1MB in the end (delta: 17.6MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.88ms. Allocated memory is still 161.5MB. Free memory was 115.1MB in the beginning and 113.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.96ms. Allocated memory is still 161.5MB. Free memory was 113.1MB in the beginning and 111.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 676.02ms. Allocated memory is still 161.5MB. Free memory was 111.0MB in the beginning and 85.2MB in the end (delta: 25.8MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 84524.55ms. Allocated memory was 161.5MB in the beginning and 708.8MB in the end (delta: 547.4MB). Free memory was 84.6MB in the beginning and 422.0MB in the end (delta: -337.4MB). Peak memory consumption was 384.0MB. Max. memory is 16.1GB. * Witness Printer took 130.15ms. Allocated memory is still 708.8MB. Free memory was 422.0MB in the beginning and 415.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 760]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 62 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 84.4s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 19.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 15.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3298 SdHoareTripleChecker+Valid, 6.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3261 mSDsluCounter, 3823 SdHoareTripleChecker+Invalid, 5.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2983 mSDsCounter, 1998 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7716 IncrementalHoareTripleChecker+Invalid, 9714 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1998 mSolverCounterUnsat, 840 mSDtfsCounter, 7716 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1468 GetRequests, 1004 SyntacticMatches, 27 SemanticMatches, 437 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12593 ImplicationChecksByTransitivity, 36.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=747occurred in iteration=11, InterpolantAutomatonStates: 239, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 14 MinimizatonAttempts, 492 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 2184 PreInvPairs, 2589 NumberOfFragments, 2229 HoareAnnotationTreeSize, 2184 FomulaSimplifications, 45441 FormulaSimplificationTreeSizeReduction, 3.5s HoareSimplificationTime, 38 FomulaSimplificationsInter, 130265 FormulaSimplificationTreeSizeReductionInter, 11.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 8.5s InterpolantComputationTime, 1178 NumberOfCodeBlocks, 1076 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1526 ConstructedInterpolants, 0 QuantifiedInterpolants, 5665 SizeOfPredicates, 66 NumberOfNonLiveVariables, 1750 ConjunctsInSsa, 154 ConjunctsInUnsatCore, 25 InterpolantComputations, 10 PerfectInterpolantSequences, 681/933 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 2.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 46, DAG_INTERPRETER_EARLY_EXITS: 2, TOOLS_POST_APPLICATIONS: 62, TOOLS_POST_TIME: 0.5s, TOOLS_POST_CALL_APPLICATIONS: 26, TOOLS_POST_CALL_TIME: 0.9s, TOOLS_POST_RETURN_APPLICATIONS: 22, TOOLS_POST_RETURN_TIME: 0.7s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 110, TOOLS_QUANTIFIERELIM_TIME: 2.1s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 140, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 20, DOMAIN_JOIN_TIME: 0.2s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 46, DOMAIN_ISBOTTOM_TIME: 0.0s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.9s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.9s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 22, CALL_SUMMARIZER_CACHE_MISSES: 5, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 478, DAG_COMPRESSION_RETAINED_NODES: 123, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && retValue_acc == 1) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && tmp == \result) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && retValue_acc == \result) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || (((((((1 == retValue_acc && \result == retValue_acc) && waterLevel < 2) || ((!(waterLevel < 2) && \result == retValue_acc) && 0 == retValue_acc)) && retValue_acc == tmp___0) && \result == tmp) && retValue_acc == \result) && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (((((((1 == retValue_acc && \result == retValue_acc) && waterLevel < 2) || ((!(waterLevel < 2) && \result == retValue_acc) && 0 == retValue_acc)) && retValue_acc == tmp___0) && \result == tmp) && retValue_acc == \result) && tmp == \result)) || !(1 == systemActive)) || !(2 == waterLevel)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && tmp == 1))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) - InvariantResult [Line: 582]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= waterLevel)) - InvariantResult [Line: 760]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) && ((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1)) && (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || (tmp == \result && retValue_acc == \result)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == 1) || ((((pumpRunning == 0 && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 877]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && !(\old(waterLevel) == 1)) && 1 == systemActive) && \old(pumpRunning) == 0) && tmp == waterLevel) && 1 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && !(\old(waterLevel) == 1)) && 1 == systemActive) && \old(pumpRunning) == 0) && tmp == waterLevel) && 1 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || (tmp == \result && retValue_acc == \result)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= waterLevel) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && tmp == methaneLevelCritical) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((methaneLevelCritical == 0 || methaneLevelCritical == 1) && 2 <= waterLevel) && 1 == systemActive) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-23 13:47:28,678 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea368449-8341-418e-b8d8-316574d359ee/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE