./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 04:45:41,801 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 04:45:41,914 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-19 04:45:41,919 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 04:45:41,920 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 04:45:41,948 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 04:45:41,949 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 04:45:41,950 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 04:45:41,951 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 04:45:41,952 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 04:45:41,953 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-19 04:45:41,953 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-19 04:45:41,954 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-19 04:45:41,955 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-19 04:45:41,956 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-19 04:45:41,956 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-19 04:45:41,957 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-19 04:45:41,958 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-19 04:45:41,958 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-19 04:45:41,959 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-19 04:45:41,960 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-19 04:45:41,961 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-19 04:45:41,962 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 04:45:41,963 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 04:45:41,963 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 04:45:41,964 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 04:45:41,965 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 04:45:41,965 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 04:45:41,966 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 04:45:41,967 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 04:45:41,967 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 04:45:41,968 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 04:45:41,968 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 04:45:41,969 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 04:45:41,969 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 04:45:41,969 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 04:45:41,970 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 04:45:41,970 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 04:45:41,971 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 04:45:41,971 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 04:45:41,972 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-19 04:45:41,972 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 04:45:41,973 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 04:45:41,973 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-19 04:45:41,973 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 04:45:41,974 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa [2023-11-19 04:45:42,232 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 04:45:42,255 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 04:45:42,258 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 04:45:42,259 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 04:45:42,260 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 04:45:42,261 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2023-11-19 04:45:45,514 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 04:45:45,775 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 04:45:45,775 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2023-11-19 04:45:45,793 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/data/ecbea035c/f2eb67c5d7c14cb8bec85cc8dd8c7f41/FLAG84e749151 [2023-11-19 04:45:45,809 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/data/ecbea035c/f2eb67c5d7c14cb8bec85cc8dd8c7f41 [2023-11-19 04:45:45,811 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 04:45:45,813 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 04:45:45,815 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 04:45:45,815 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 04:45:45,821 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 04:45:45,822 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 04:45:45" (1/1) ... [2023-11-19 04:45:45,824 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23dea291 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:45, skipping insertion in model container [2023-11-19 04:45:45,824 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 04:45:45" (1/1) ... [2023-11-19 04:45:45,873 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 04:45:46,133 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2023-11-19 04:45:46,205 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 04:45:46,247 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 04:45:46,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-19 04:45:46,260 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121] [2023-11-19 04:45:46,260 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [369] [2023-11-19 04:45:46,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [397] [2023-11-19 04:45:46,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [435] [2023-11-19 04:45:46,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [444] [2023-11-19 04:45:46,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [540] [2023-11-19 04:45:46,262 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [906] [2023-11-19 04:45:46,306 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2023-11-19 04:45:46,383 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 04:45:46,422 INFO L206 MainTranslator]: Completed translation [2023-11-19 04:45:46,423 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46 WrapperNode [2023-11-19 04:45:46,423 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 04:45:46,425 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 04:45:46,425 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 04:45:46,425 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 04:45:46,434 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,457 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,508 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 233 [2023-11-19 04:45:46,509 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 04:45:46,509 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 04:45:46,510 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 04:45:46,510 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 04:45:46,536 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,536 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,553 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,561 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,567 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,582 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,584 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,585 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,588 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 04:45:46,589 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 04:45:46,590 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 04:45:46,590 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 04:45:46,591 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (1/1) ... [2023-11-19 04:45:46,597 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 04:45:46,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:45:46,646 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 04:45:46,660 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 04:45:46,688 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 04:45:46,688 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 04:45:46,688 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 04:45:46,688 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 04:45:46,689 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 04:45:46,689 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 04:45:46,689 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 04:45:46,689 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:45:46,689 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:45:46,690 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 04:45:46,690 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 04:45:46,691 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:45:46,691 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:45:46,692 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 04:45:46,692 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 04:45:46,693 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 04:45:46,693 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 04:45:46,694 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 04:45:46,694 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 04:45:46,694 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 04:45:46,816 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 04:45:46,819 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 04:45:47,152 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 04:45:47,287 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 04:45:47,287 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 04:45:47,293 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:45:47 BoogieIcfgContainer [2023-11-19 04:45:47,293 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 04:45:47,296 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 04:45:47,296 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 04:45:47,299 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 04:45:47,299 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 04:45:45" (1/3) ... [2023-11-19 04:45:47,300 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@38de5d6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 04:45:47, skipping insertion in model container [2023-11-19 04:45:47,301 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:45:46" (2/3) ... [2023-11-19 04:45:47,301 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@38de5d6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 04:45:47, skipping insertion in model container [2023-11-19 04:45:47,301 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:45:47" (3/3) ... [2023-11-19 04:45:47,302 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product55.cil.c [2023-11-19 04:45:47,324 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 04:45:47,324 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 04:45:47,399 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 04:45:47,407 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@24141de4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-19 04:45:47,407 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 04:45:47,412 INFO L276 IsEmpty]: Start isEmpty. Operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-19 04:45:47,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-19 04:45:47,422 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:47,423 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:47,423 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:47,429 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:47,430 INFO L85 PathProgramCache]: Analyzing trace with hash 2116247090, now seen corresponding path program 1 times [2023-11-19 04:45:47,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:47,457 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [916979585] [2023-11-19 04:45:47,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:47,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:47,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:47,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:47,639 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:47,639 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [916979585] [2023-11-19 04:45:47,640 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [916979585] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:47,641 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:47,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 04:45:47,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [835361573] [2023-11-19 04:45:47,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:47,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 04:45:47,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:47,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 04:45:47,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 04:45:47,684 INFO L87 Difference]: Start difference. First operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:47,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:47,763 INFO L93 Difference]: Finished difference Result 132 states and 185 transitions. [2023-11-19 04:45:47,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 04:45:47,766 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-19 04:45:47,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:47,778 INFO L225 Difference]: With dead ends: 132 [2023-11-19 04:45:47,779 INFO L226 Difference]: Without dead ends: 62 [2023-11-19 04:45:47,785 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 04:45:47,792 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:47,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:45:47,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-11-19 04:45:47,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2023-11-19 04:45:47,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 49 states have internal predecessors, (54), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-19 04:45:47,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 83 transitions. [2023-11-19 04:45:47,860 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 83 transitions. Word has length 12 [2023-11-19 04:45:47,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:47,861 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 83 transitions. [2023-11-19 04:45:47,862 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:47,862 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 83 transitions. [2023-11-19 04:45:47,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-19 04:45:47,866 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:47,866 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:47,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 04:45:47,867 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:47,869 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:47,869 INFO L85 PathProgramCache]: Analyzing trace with hash 1593473338, now seen corresponding path program 1 times [2023-11-19 04:45:47,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:47,870 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [729187477] [2023-11-19 04:45:47,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:47,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:47,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:47,988 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:47,989 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:47,989 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [729187477] [2023-11-19 04:45:47,989 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [729187477] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:47,990 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:47,990 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:45:47,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911295265] [2023-11-19 04:45:47,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:47,992 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 04:45:47,992 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:47,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 04:45:47,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:45:47,994 INFO L87 Difference]: Start difference. First operand 62 states and 83 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:48,042 INFO L93 Difference]: Finished difference Result 96 states and 128 transitions. [2023-11-19 04:45:48,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 04:45:48,043 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-19 04:45:48,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:48,045 INFO L225 Difference]: With dead ends: 96 [2023-11-19 04:45:48,045 INFO L226 Difference]: Without dead ends: 54 [2023-11-19 04:45:48,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:45:48,048 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:48,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 97 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:45:48,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-11-19 04:45:48,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2023-11-19 04:45:48,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 34 states have (on average 1.411764705882353) internal successors, (48), 44 states have internal predecessors, (48), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 7 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-19 04:45:48,060 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 72 transitions. [2023-11-19 04:45:48,060 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 72 transitions. Word has length 13 [2023-11-19 04:45:48,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:48,060 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 72 transitions. [2023-11-19 04:45:48,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,061 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 72 transitions. [2023-11-19 04:45:48,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-19 04:45:48,062 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:48,063 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:48,063 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 04:45:48,063 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:48,064 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:48,064 INFO L85 PathProgramCache]: Analyzing trace with hash -1580106845, now seen corresponding path program 1 times [2023-11-19 04:45:48,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:48,065 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874170290] [2023-11-19 04:45:48,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:48,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:48,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:48,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:48,216 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:48,216 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874170290] [2023-11-19 04:45:48,217 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874170290] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:48,217 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:48,217 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:45:48,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705833133] [2023-11-19 04:45:48,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:48,218 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-19 04:45:48,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:48,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-19 04:45:48,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-19 04:45:48,220 INFO L87 Difference]: Start difference. First operand 54 states and 72 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:48,374 INFO L93 Difference]: Finished difference Result 149 states and 204 transitions. [2023-11-19 04:45:48,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-19 04:45:48,375 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-19 04:45:48,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:48,378 INFO L225 Difference]: With dead ends: 149 [2023-11-19 04:45:48,378 INFO L226 Difference]: Without dead ends: 97 [2023-11-19 04:45:48,379 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-19 04:45:48,381 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 85 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:48,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 134 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:45:48,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2023-11-19 04:45:48,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 80. [2023-11-19 04:45:48,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 52 states have (on average 1.4038461538461537) internal successors, (73), 65 states have internal predecessors, (73), 16 states have call successors, (16), 11 states have call predecessors, (16), 11 states have return successors, (17), 10 states have call predecessors, (17), 16 states have call successors, (17) [2023-11-19 04:45:48,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2023-11-19 04:45:48,402 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 16 [2023-11-19 04:45:48,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:48,403 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2023-11-19 04:45:48,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,403 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2023-11-19 04:45:48,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-19 04:45:48,405 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:48,405 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:48,406 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 04:45:48,406 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:48,407 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:48,407 INFO L85 PathProgramCache]: Analyzing trace with hash 964095493, now seen corresponding path program 1 times [2023-11-19 04:45:48,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:48,407 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1876934524] [2023-11-19 04:45:48,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:48,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:48,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:48,572 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:48,573 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:48,573 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1876934524] [2023-11-19 04:45:48,573 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1876934524] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:48,574 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:48,575 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:45:48,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1735143434] [2023-11-19 04:45:48,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:48,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-19 04:45:48,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:48,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-19 04:45:48,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-19 04:45:48,578 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:48,716 INFO L93 Difference]: Finished difference Result 193 states and 265 transitions. [2023-11-19 04:45:48,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-19 04:45:48,717 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-19 04:45:48,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:48,726 INFO L225 Difference]: With dead ends: 193 [2023-11-19 04:45:48,726 INFO L226 Difference]: Without dead ends: 115 [2023-11-19 04:45:48,731 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-19 04:45:48,738 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 39 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 63 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:48,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 160 Invalid, 63 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:45:48,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2023-11-19 04:45:48,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 111. [2023-11-19 04:45:48,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 76 states have (on average 1.3157894736842106) internal successors, (100), 87 states have internal predecessors, (100), 18 states have call successors, (18), 16 states have call predecessors, (18), 16 states have return successors, (26), 16 states have call predecessors, (26), 18 states have call successors, (26) [2023-11-19 04:45:48,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 144 transitions. [2023-11-19 04:45:48,769 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 144 transitions. Word has length 19 [2023-11-19 04:45:48,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:48,769 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 144 transitions. [2023-11-19 04:45:48,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:45:48,770 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 144 transitions. [2023-11-19 04:45:48,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-19 04:45:48,772 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:48,772 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:48,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 04:45:48,773 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:48,773 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:48,773 INFO L85 PathProgramCache]: Analyzing trace with hash -29199681, now seen corresponding path program 1 times [2023-11-19 04:45:48,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:48,774 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15714568] [2023-11-19 04:45:48,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:48,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:48,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:48,865 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:48,865 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:48,866 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15714568] [2023-11-19 04:45:48,867 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15714568] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:48,867 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:48,867 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:45:48,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67976667] [2023-11-19 04:45:48,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:48,870 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 04:45:48,870 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:48,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 04:45:48,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:45:48,873 INFO L87 Difference]: Start difference. First operand 111 states and 144 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 04:45:48,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:48,945 INFO L93 Difference]: Finished difference Result 222 states and 288 transitions. [2023-11-19 04:45:48,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 04:45:48,946 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 32 [2023-11-19 04:45:48,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:48,948 INFO L225 Difference]: With dead ends: 222 [2023-11-19 04:45:48,949 INFO L226 Difference]: Without dead ends: 85 [2023-11-19 04:45:48,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:45:48,955 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 26 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:48,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 128 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:45:48,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2023-11-19 04:45:48,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2023-11-19 04:45:49,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 57 states have (on average 1.263157894736842) internal successors, (72), 65 states have internal predecessors, (72), 14 states have call successors, (14), 13 states have call predecessors, (14), 13 states have return successors, (20), 12 states have call predecessors, (20), 14 states have call successors, (20) [2023-11-19 04:45:49,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 106 transitions. [2023-11-19 04:45:49,016 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 106 transitions. Word has length 32 [2023-11-19 04:45:49,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:49,016 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 106 transitions. [2023-11-19 04:45:49,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 04:45:49,016 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 106 transitions. [2023-11-19 04:45:49,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-19 04:45:49,018 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:49,018 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:49,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 04:45:49,018 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:49,019 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:49,019 INFO L85 PathProgramCache]: Analyzing trace with hash 118978017, now seen corresponding path program 1 times [2023-11-19 04:45:49,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:49,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184296480] [2023-11-19 04:45:49,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:49,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:49,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:49,298 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:49,298 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:49,298 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184296480] [2023-11-19 04:45:49,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184296480] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:49,299 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:49,299 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 04:45:49,299 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272176453] [2023-11-19 04:45:49,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:49,300 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 04:45:49,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:49,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 04:45:49,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-19 04:45:49,302 INFO L87 Difference]: Start difference. First operand 85 states and 106 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 04:45:49,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:49,419 INFO L93 Difference]: Finished difference Result 228 states and 285 transitions. [2023-11-19 04:45:49,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 04:45:49,420 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 29 [2023-11-19 04:45:49,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:49,422 INFO L225 Difference]: With dead ends: 228 [2023-11-19 04:45:49,422 INFO L226 Difference]: Without dead ends: 145 [2023-11-19 04:45:49,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2023-11-19 04:45:49,429 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 54 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:49,432 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 205 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:45:49,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2023-11-19 04:45:49,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 128. [2023-11-19 04:45:49,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 97 states have internal predecessors, (106), 19 states have call successors, (19), 18 states have call predecessors, (19), 21 states have return successors, (28), 19 states have call predecessors, (28), 19 states have call successors, (28) [2023-11-19 04:45:49,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 153 transitions. [2023-11-19 04:45:49,475 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 153 transitions. Word has length 29 [2023-11-19 04:45:49,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:49,476 INFO L495 AbstractCegarLoop]: Abstraction has 128 states and 153 transitions. [2023-11-19 04:45:49,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 04:45:49,477 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 153 transitions. [2023-11-19 04:45:49,479 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-19 04:45:49,479 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:49,479 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:49,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 04:45:49,480 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:49,482 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:49,482 INFO L85 PathProgramCache]: Analyzing trace with hash -1441577713, now seen corresponding path program 1 times [2023-11-19 04:45:49,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:49,482 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704113155] [2023-11-19 04:45:49,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:49,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:49,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:49,815 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:49,815 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:49,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [704113155] [2023-11-19 04:45:49,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [704113155] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:49,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:45:49,816 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-19 04:45:49,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966281782] [2023-11-19 04:45:49,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:49,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-19 04:45:49,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:49,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 04:45:49,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-19 04:45:49,819 INFO L87 Difference]: Start difference. First operand 128 states and 153 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-19 04:45:50,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:50,343 INFO L93 Difference]: Finished difference Result 314 states and 392 transitions. [2023-11-19 04:45:50,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-19 04:45:50,344 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-11-19 04:45:50,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:50,347 INFO L225 Difference]: With dead ends: 314 [2023-11-19 04:45:50,347 INFO L226 Difference]: Without dead ends: 231 [2023-11-19 04:45:50,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2023-11-19 04:45:50,352 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 163 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 426 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 426 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:50,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 291 Invalid, 479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 426 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-19 04:45:50,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2023-11-19 04:45:50,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 208. [2023-11-19 04:45:50,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 142 states have (on average 1.2183098591549295) internal successors, (173), 159 states have internal predecessors, (173), 31 states have call successors, (31), 27 states have call predecessors, (31), 34 states have return successors, (46), 32 states have call predecessors, (46), 31 states have call successors, (46) [2023-11-19 04:45:50,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 250 transitions. [2023-11-19 04:45:50,391 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 250 transitions. Word has length 32 [2023-11-19 04:45:50,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:50,393 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 250 transitions. [2023-11-19 04:45:50,393 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-19 04:45:50,393 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 250 transitions. [2023-11-19 04:45:50,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-19 04:45:50,403 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:50,404 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:50,404 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 04:45:50,405 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:50,405 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:50,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1660882848, now seen corresponding path program 1 times [2023-11-19 04:45:50,406 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:50,406 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [928479857] [2023-11-19 04:45:50,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:50,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:50,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:50,540 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-19 04:45:50,540 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:50,541 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [928479857] [2023-11-19 04:45:50,541 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [928479857] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:45:50,541 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [869728912] [2023-11-19 04:45:50,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:50,541 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:45:50,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:45:50,554 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:45:50,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 04:45:50,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:50,681 INFO L262 TraceCheckSpWp]: Trace formula consists of 241 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-19 04:45:50,688 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:45:50,806 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:50,806 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-19 04:45:50,806 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [869728912] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:50,807 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-19 04:45:50,807 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2023-11-19 04:45:50,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [876567834] [2023-11-19 04:45:50,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:50,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 04:45:50,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:50,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 04:45:50,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-11-19 04:45:50,809 INFO L87 Difference]: Start difference. First operand 208 states and 250 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 04:45:50,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:50,875 INFO L93 Difference]: Finished difference Result 303 states and 376 transitions. [2023-11-19 04:45:50,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 04:45:50,876 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2023-11-19 04:45:50,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:50,878 INFO L225 Difference]: With dead ends: 303 [2023-11-19 04:45:50,879 INFO L226 Difference]: Without dead ends: 207 [2023-11-19 04:45:50,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-11-19 04:45:50,880 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 32 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:50,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 108 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:45:50,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2023-11-19 04:45:50,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 207. [2023-11-19 04:45:50,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 142 states have (on average 1.1901408450704225) internal successors, (169), 158 states have internal predecessors, (169), 30 states have call successors, (30), 27 states have call predecessors, (30), 34 states have return successors, (43), 32 states have call predecessors, (43), 30 states have call successors, (43) [2023-11-19 04:45:50,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 242 transitions. [2023-11-19 04:45:50,906 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 242 transitions. Word has length 56 [2023-11-19 04:45:50,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:50,907 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 242 transitions. [2023-11-19 04:45:50,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 04:45:50,907 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 242 transitions. [2023-11-19 04:45:50,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-19 04:45:50,908 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:50,909 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:50,935 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 04:45:51,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2023-11-19 04:45:51,130 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:51,131 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:51,131 INFO L85 PathProgramCache]: Analyzing trace with hash -649858008, now seen corresponding path program 1 times [2023-11-19 04:45:51,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:51,131 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947804247] [2023-11-19 04:45:51,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:51,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:51,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:51,557 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-19 04:45:51,557 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:51,557 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947804247] [2023-11-19 04:45:51,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947804247] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:45:51,558 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1977356416] [2023-11-19 04:45:51,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:51,558 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:45:51,559 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:45:51,560 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:45:51,588 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-19 04:45:51,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:51,681 INFO L262 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 14 conjunts are in the unsatisfiable core [2023-11-19 04:45:51,686 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:45:52,099 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:52,099 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-19 04:45:52,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1977356416] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:45:52,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-19 04:45:52,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 15 [2023-11-19 04:45:52,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907839255] [2023-11-19 04:45:52,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:45:52,103 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-19 04:45:52,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:52,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-19 04:45:52,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2023-11-19 04:45:52,105 INFO L87 Difference]: Start difference. First operand 207 states and 242 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-19 04:45:52,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:45:52,543 INFO L93 Difference]: Finished difference Result 411 states and 492 transitions. [2023-11-19 04:45:52,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-19 04:45:52,544 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 60 [2023-11-19 04:45:52,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:45:52,549 INFO L225 Difference]: With dead ends: 411 [2023-11-19 04:45:52,549 INFO L226 Difference]: Without dead ends: 277 [2023-11-19 04:45:52,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=86, Invalid=294, Unknown=0, NotChecked=0, Total=380 [2023-11-19 04:45:52,552 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 195 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 356 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-19 04:45:52,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 151 Invalid, 356 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-19 04:45:52,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2023-11-19 04:45:52,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 224. [2023-11-19 04:45:52,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 156 states have (on average 1.1730769230769231) internal successors, (183), 168 states have internal predecessors, (183), 33 states have call successors, (33), 32 states have call predecessors, (33), 34 states have return successors, (41), 32 states have call predecessors, (41), 33 states have call successors, (41) [2023-11-19 04:45:52,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 257 transitions. [2023-11-19 04:45:52,596 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 257 transitions. Word has length 60 [2023-11-19 04:45:52,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:45:52,597 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 257 transitions. [2023-11-19 04:45:52,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-19 04:45:52,597 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 257 transitions. [2023-11-19 04:45:52,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-19 04:45:52,599 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:45:52,599 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:45:52,631 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-19 04:45:52,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:45:52,812 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:45:52,813 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:45:52,813 INFO L85 PathProgramCache]: Analyzing trace with hash 322551610, now seen corresponding path program 1 times [2023-11-19 04:45:52,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:45:52,813 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572678215] [2023-11-19 04:45:52,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:52,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:45:52,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:53,261 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-19 04:45:53,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:45:53,261 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572678215] [2023-11-19 04:45:53,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572678215] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:45:53,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [305316012] [2023-11-19 04:45:53,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:45:53,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:45:53,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:45:53,264 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:45:53,267 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-19 04:45:53,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:45:53,362 INFO L262 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 19 conjunts are in the unsatisfiable core [2023-11-19 04:45:53,368 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:45:53,711 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:45:53,711 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 04:45:54,139 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-19 04:45:54,139 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [305316012] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 04:45:54,139 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1411183275] [2023-11-19 04:45:54,165 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2023-11-19 04:45:54,165 INFO L166 IcfgInterpreter]: Building call graph [2023-11-19 04:45:54,171 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-19 04:45:54,179 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-19 04:45:54,180 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-19 04:45:57,176 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 10 for LOIs [2023-11-19 04:45:57,180 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 18 for LOIs [2023-11-19 04:45:57,348 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 28 for LOIs [2023-11-19 04:45:57,462 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 31 for LOIs [2023-11-19 04:45:57,534 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 22 for LOIs [2023-11-19 04:45:57,537 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-19 04:45:59,582 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5149#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0))' at error location [2023-11-19 04:45:59,582 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-19 04:45:59,582 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 04:45:59,583 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 10] total 27 [2023-11-19 04:45:59,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311128744] [2023-11-19 04:45:59,583 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 04:45:59,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2023-11-19 04:45:59,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:45:59,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2023-11-19 04:45:59,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=342, Invalid=2964, Unknown=0, NotChecked=0, Total=3306 [2023-11-19 04:45:59,587 INFO L87 Difference]: Start difference. First operand 224 states and 257 transitions. Second operand has 27 states, 24 states have (on average 4.083333333333333) internal successors, (98), 23 states have internal predecessors, (98), 11 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 10 states have call predecessors, (17), 10 states have call successors, (17) [2023-11-19 04:46:01,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:46:01,377 INFO L93 Difference]: Finished difference Result 569 states and 670 transitions. [2023-11-19 04:46:01,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-19 04:46:01,378 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 24 states have (on average 4.083333333333333) internal successors, (98), 23 states have internal predecessors, (98), 11 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 10 states have call predecessors, (17), 10 states have call successors, (17) Word has length 63 [2023-11-19 04:46:01,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:46:01,381 INFO L225 Difference]: With dead ends: 569 [2023-11-19 04:46:01,382 INFO L226 Difference]: Without dead ends: 446 [2023-11-19 04:46:01,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 147 SyntacticMatches, 8 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3116 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=1037, Invalid=7153, Unknown=0, NotChecked=0, Total=8190 [2023-11-19 04:46:01,387 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 862 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 912 mSolverCounterSat, 516 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 867 SdHoareTripleChecker+Valid, 532 SdHoareTripleChecker+Invalid, 1428 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 516 IncrementalHoareTripleChecker+Valid, 912 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-19 04:46:01,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [867 Valid, 532 Invalid, 1428 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [516 Valid, 912 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-19 04:46:01,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2023-11-19 04:46:01,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 341. [2023-11-19 04:46:01,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 341 states, 238 states have (on average 1.1680672268907564) internal successors, (278), 255 states have internal predecessors, (278), 50 states have call successors, (50), 48 states have call predecessors, (50), 52 states have return successors, (63), 50 states have call predecessors, (63), 50 states have call successors, (63) [2023-11-19 04:46:01,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 341 states and 391 transitions. [2023-11-19 04:46:01,427 INFO L78 Accepts]: Start accepts. Automaton has 341 states and 391 transitions. Word has length 63 [2023-11-19 04:46:01,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:46:01,427 INFO L495 AbstractCegarLoop]: Abstraction has 341 states and 391 transitions. [2023-11-19 04:46:01,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 24 states have (on average 4.083333333333333) internal successors, (98), 23 states have internal predecessors, (98), 11 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 10 states have call predecessors, (17), 10 states have call successors, (17) [2023-11-19 04:46:01,428 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 391 transitions. [2023-11-19 04:46:01,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2023-11-19 04:46:01,430 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:46:01,430 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:46:01,455 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-19 04:46:01,648 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-19 04:46:01,648 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:46:01,649 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:46:01,649 INFO L85 PathProgramCache]: Analyzing trace with hash -471941201, now seen corresponding path program 2 times [2023-11-19 04:46:01,649 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:46:01,649 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118359599] [2023-11-19 04:46:01,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:46:01,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:46:01,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:46:02,369 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 30 proven. 27 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-19 04:46:02,369 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:46:02,370 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118359599] [2023-11-19 04:46:02,370 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118359599] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:46:02,370 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [143164111] [2023-11-19 04:46:02,370 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-19 04:46:02,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:46:02,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:46:02,372 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:46:02,392 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-19 04:46:02,471 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-11-19 04:46:02,471 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-19 04:46:02,473 INFO L262 TraceCheckSpWp]: Trace formula consists of 269 conjuncts, 22 conjunts are in the unsatisfiable core [2023-11-19 04:46:02,484 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:46:02,592 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-19 04:46:02,592 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-19 04:46:02,592 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [143164111] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:46:02,593 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-19 04:46:02,593 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 19 [2023-11-19 04:46:02,593 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133280393] [2023-11-19 04:46:02,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:46:02,594 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 04:46:02,594 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:46:02,595 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 04:46:02,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=290, Unknown=0, NotChecked=0, Total=342 [2023-11-19 04:46:02,595 INFO L87 Difference]: Start difference. First operand 341 states and 391 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-19 04:46:02,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:46:02,786 INFO L93 Difference]: Finished difference Result 749 states and 876 transitions. [2023-11-19 04:46:02,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 04:46:02,787 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 94 [2023-11-19 04:46:02,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:46:02,793 INFO L225 Difference]: With dead ends: 749 [2023-11-19 04:46:02,793 INFO L226 Difference]: Without dead ends: 431 [2023-11-19 04:46:02,795 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=58, Invalid=322, Unknown=0, NotChecked=0, Total=380 [2023-11-19 04:46:02,795 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 49 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:46:02,796 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 260 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:46:02,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 431 states. [2023-11-19 04:46:02,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 431 to 425. [2023-11-19 04:46:02,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 425 states, 301 states have (on average 1.169435215946844) internal successors, (352), 321 states have internal predecessors, (352), 62 states have call successors, (62), 59 states have call predecessors, (62), 61 states have return successors, (78), 60 states have call predecessors, (78), 62 states have call successors, (78) [2023-11-19 04:46:02,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 492 transitions. [2023-11-19 04:46:02,849 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 492 transitions. Word has length 94 [2023-11-19 04:46:02,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:46:02,850 INFO L495 AbstractCegarLoop]: Abstraction has 425 states and 492 transitions. [2023-11-19 04:46:02,850 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-19 04:46:02,850 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 492 transitions. [2023-11-19 04:46:02,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-19 04:46:02,857 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:46:02,858 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:46:02,885 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-19 04:46:03,079 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-19 04:46:03,079 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:46:03,080 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:46:03,080 INFO L85 PathProgramCache]: Analyzing trace with hash -208625465, now seen corresponding path program 1 times [2023-11-19 04:46:03,080 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:46:03,080 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812721329] [2023-11-19 04:46:03,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:46:03,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:46:03,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:46:03,260 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 56 proven. 5 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2023-11-19 04:46:03,260 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:46:03,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812721329] [2023-11-19 04:46:03,261 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1812721329] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:46:03,261 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1891830574] [2023-11-19 04:46:03,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:46:03,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:46:03,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:46:03,262 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:46:03,280 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-19 04:46:03,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:46:03,380 INFO L262 TraceCheckSpWp]: Trace formula consists of 390 conjuncts, 33 conjunts are in the unsatisfiable core [2023-11-19 04:46:03,389 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:46:04,059 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 59 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:46:04,059 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 04:46:05,052 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 73 proven. 28 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-19 04:46:05,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1891830574] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 04:46:05,053 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [454844671] [2023-11-19 04:46:05,059 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2023-11-19 04:46:05,060 INFO L166 IcfgInterpreter]: Building call graph [2023-11-19 04:46:05,061 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-19 04:46:05,061 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-19 04:46:05,061 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-19 04:46:07,418 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 136 for LOIs [2023-11-19 04:46:07,528 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 18 for LOIs [2023-11-19 04:46:07,760 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 28 for LOIs [2023-11-19 04:46:07,857 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 31 for LOIs [2023-11-19 04:46:07,915 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 22 for LOIs [2023-11-19 04:46:07,917 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 26 for LOIs [2023-11-19 04:46:07,921 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-19 04:46:11,909 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8984#(and (or (and (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_22| Int)) (and (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_22| 0)) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_22| 2147483648)) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_22| 2147483647))) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| 0) (not (= 0 ~systemActive~0))) (and (<= |timeShift_isMethaneAlarm_#res#1| 2147483647) (<= |timeShift_isMethaneLevelCritical_#res#1| 2147483647) (<= 0 (+ |timeShift_isMethaneAlarm_#res#1| 2147483648)) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (<= 0 (+ |timeShift_isMethaneLevelCritical_#res#1| 2147483648)))) (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0))' at error location [2023-11-19 04:46:11,909 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-19 04:46:11,910 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 04:46:11,910 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 18, 17] total 35 [2023-11-19 04:46:11,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650980424] [2023-11-19 04:46:11,910 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 04:46:11,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2023-11-19 04:46:11,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:46:11,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2023-11-19 04:46:11,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=579, Invalid=4533, Unknown=0, NotChecked=0, Total=5112 [2023-11-19 04:46:11,923 INFO L87 Difference]: Start difference. First operand 425 states and 492 transitions. Second operand has 35 states, 34 states have (on average 4.852941176470588) internal successors, (165), 33 states have internal predecessors, (165), 18 states have call successors, (28), 9 states have call predecessors, (28), 13 states have return successors, (29), 18 states have call predecessors, (29), 18 states have call successors, (29) [2023-11-19 04:46:14,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:46:14,294 INFO L93 Difference]: Finished difference Result 700 states and 818 transitions. [2023-11-19 04:46:14,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2023-11-19 04:46:14,299 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 4.852941176470588) internal successors, (165), 33 states have internal predecessors, (165), 18 states have call successors, (28), 9 states have call predecessors, (28), 13 states have return successors, (29), 18 states have call predecessors, (29), 18 states have call successors, (29) Word has length 110 [2023-11-19 04:46:14,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:46:14,299 INFO L225 Difference]: With dead ends: 700 [2023-11-19 04:46:14,299 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 04:46:14,305 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 378 GetRequests, 271 SyntacticMatches, 3 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3436 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=1428, Invalid=9702, Unknown=0, NotChecked=0, Total=11130 [2023-11-19 04:46:14,306 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 548 mSDsluCounter, 558 mSDsCounter, 0 mSdLazyCounter, 1474 mSolverCounterSat, 350 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 548 SdHoareTripleChecker+Valid, 629 SdHoareTripleChecker+Invalid, 1824 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 350 IncrementalHoareTripleChecker+Valid, 1474 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:46:14,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [548 Valid, 629 Invalid, 1824 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [350 Valid, 1474 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2023-11-19 04:46:14,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 04:46:14,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 04:46:14,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:46:14,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 04:46:14,308 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2023-11-19 04:46:14,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:46:14,308 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 04:46:14,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 4.852941176470588) internal successors, (165), 33 states have internal predecessors, (165), 18 states have call successors, (28), 9 states have call predecessors, (28), 13 states have return successors, (29), 18 states have call predecessors, (29), 18 states have call successors, (29) [2023-11-19 04:46:14,309 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 04:46:14,309 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 04:46:14,311 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 04:46:14,343 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-11-19 04:46:14,528 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-19 04:46:14,530 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 04:46:17,014 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 252 259) no Hoare annotation was computed. [2023-11-19 04:46:17,014 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 252 259) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= 1 ~systemActive~0)) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2023-11-19 04:46:17,014 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2023-11-19 04:46:17,015 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2023-11-19 04:46:17,015 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 933 944) the Hoare annotation is: (let ((.cse3 (= |old(~methaneLevelCritical~0)| 0)) (.cse8 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (not .cse8)) (.cse6 (not (= ~pumpRunning~0 1))) (.cse5 (not (= ~waterLevel~0 1))) (.cse7 (not .cse3)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse4 .cse6) (or .cse7 .cse8 .cse1 .cse2 .cse6) (or .cse5 .cse7 .cse0 .cse8 .cse1) (or .cse7 .cse0 .cse8 .cse1 .cse2)))) [2023-11-19 04:46:17,015 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 933 944) no Hoare annotation was computed. [2023-11-19 04:46:17,015 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 446 475) no Hoare annotation was computed. [2023-11-19 04:46:17,015 INFO L899 garLoopResultBuilder]: For program point L471(lines 446 475) no Hoare annotation was computed. [2023-11-19 04:46:17,016 INFO L899 garLoopResultBuilder]: For program point L467(line 467) no Hoare annotation was computed. [2023-11-19 04:46:17,016 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 464) no Hoare annotation was computed. [2023-11-19 04:46:17,016 INFO L902 garLoopResultBuilder]: At program point L460-1(lines 460 464) the Hoare annotation is: true [2023-11-19 04:46:17,016 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 446 475) the Hoare annotation is: true [2023-11-19 04:46:17,016 INFO L902 garLoopResultBuilder]: At program point L456-2(lines 456 470) the Hoare annotation is: true [2023-11-19 04:46:17,016 INFO L902 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: true [2023-11-19 04:46:17,017 INFO L899 garLoopResultBuilder]: For program point L452-1(line 452) no Hoare annotation was computed. [2023-11-19 04:46:17,017 INFO L899 garLoopResultBuilder]: For program point L440(line 440) no Hoare annotation was computed. [2023-11-19 04:46:17,017 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse3 (= ~waterLevel~0 1))) (or .cse2 .cse0 (and .cse3 (= 2 ~waterLevel~0)) .cse1) (or .cse2 (not (= 0 ~systemActive~0))))) [2023-11-19 04:46:17,017 INFO L899 garLoopResultBuilder]: For program point L238-1(lines 219 243) no Hoare annotation was computed. [2023-11-19 04:46:17,017 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2023-11-19 04:46:17,018 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 235) no Hoare annotation was computed. [2023-11-19 04:46:17,018 INFO L899 garLoopResultBuilder]: For program point L384(lines 384 390) no Hoare annotation was computed. [2023-11-19 04:46:17,018 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 240) no Hoare annotation was computed. [2023-11-19 04:46:17,018 INFO L899 garLoopResultBuilder]: For program point L380(lines 380 393) no Hoare annotation was computed. [2023-11-19 04:46:17,018 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 372 396) no Hoare annotation was computed. [2023-11-19 04:46:17,019 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 135 158) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse1 (= ~waterLevel~0 1))) (or .cse0 .cse2 (and .cse1 .cse3) .cse4) (or .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse4 (and .cse3 (= ~pumpRunning~0 1))))) [2023-11-19 04:46:17,019 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2023-11-19 04:46:17,019 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2023-11-19 04:46:17,019 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (or (< |timeShift_processEnvironment_~tmp~3#1| (+ ~methaneLevelCritical~0 1)) (< |timeShift_processEnvironment_~tmp~3#1| 1)) (= ~waterLevel~0 1) (= ~pumpRunning~0 1) (let ((.cse1 (+ |timeShift_processEnvironment_~tmp~3#1| 1))) (or (< ~methaneLevelCritical~0 .cse1) (< 0 .cse1)))) (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse3 .cse0 .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse3 (not (= 0 ~systemActive~0))))) [2023-11-19 04:46:17,019 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2023-11-19 04:46:17,020 INFO L895 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (or (< |timeShift_processEnvironment_~tmp~3#1| (+ ~methaneLevelCritical~0 1)) (< |timeShift_processEnvironment_~tmp~3#1| 1)) (= ~waterLevel~0 1) (= ~pumpRunning~0 1) (let ((.cse1 (+ |timeShift_processEnvironment_~tmp~3#1| 1))) (or (< ~methaneLevelCritical~0 .cse1) (< 0 .cse1)))) .cse2 .cse3) (or .cse4 .cse0 .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (or .cse4 (not (= 0 ~systemActive~0))))) [2023-11-19 04:46:17,020 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-11-19 04:46:17,020 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2023-11-19 04:46:17,020 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 534) no Hoare annotation was computed. [2023-11-19 04:46:17,020 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-19 04:46:17,021 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-19 04:46:17,021 INFO L899 garLoopResultBuilder]: For program point L527-2(lines 527 534) no Hoare annotation was computed. [2023-11-19 04:46:17,021 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 364) no Hoare annotation was computed. [2023-11-19 04:46:17,021 INFO L899 garLoopResultBuilder]: For program point L358-1(lines 358 364) no Hoare annotation was computed. [2023-11-19 04:46:17,021 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2023-11-19 04:46:17,022 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 04:46:17,022 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2023-11-19 04:46:17,022 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-19 04:46:17,022 INFO L899 garLoopResultBuilder]: For program point L116(lines 55 120) no Hoare annotation was computed. [2023-11-19 04:46:17,022 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2023-11-19 04:46:17,022 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2023-11-19 04:46:17,023 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 04:46:17,023 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-19 04:46:17,023 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2023-11-19 04:46:17,023 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2023-11-19 04:46:17,023 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-19 04:46:17,024 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (not (= |old(~pumpRunning~0)| 0)) (< 0 ~waterLevel~0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-11-19 04:46:17,024 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2023-11-19 04:46:17,024 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 167 191) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (not (= |old(~pumpRunning~0)| 0)) (< 0 ~waterLevel~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2023-11-19 04:46:17,024 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2023-11-19 04:46:17,025 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (not (= |old(~pumpRunning~0)| 0)) (< 0 ~waterLevel~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) .cse1) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1))) [2023-11-19 04:46:17,025 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2023-11-19 04:46:17,025 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2023-11-19 04:46:17,025 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 921 932) no Hoare annotation was computed. [2023-11-19 04:46:17,025 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 921 932) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= 2 ~waterLevel~0) .cse0 (not (= ~pumpRunning~0 1)) (not (= |old(~waterLevel~0)| 2))))) [2023-11-19 04:46:17,025 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1) (or .cse2 .cse1 (not (= |old(~pumpRunning~0)| 1))))) [2023-11-19 04:46:17,026 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1) (or .cse2 (and (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~2#1|) (= ~pumpRunning~0 1)) .cse1 (not (= |old(~pumpRunning~0)| 1))))) [2023-11-19 04:46:17,026 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 193 217) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or .cse0 .cse2 .cse3 .cse1) (or .cse2 .cse3 .cse1 (not (= 2 ~waterLevel~0))))) [2023-11-19 04:46:17,026 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2023-11-19 04:46:17,026 INFO L899 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2023-11-19 04:46:17,026 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 193 217) no Hoare annotation was computed. [2023-11-19 04:46:17,027 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1))) (or .cse1 .cse2 .cse3 (not (= 2 ~waterLevel~0))))) [2023-11-19 04:46:17,027 INFO L899 garLoopResultBuilder]: For program point L212-1(lines 193 217) no Hoare annotation was computed. [2023-11-19 04:46:17,030 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:46:17,032 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 04:46:17,051 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 04:46:17 BoogieIcfgContainer [2023-11-19 04:46:17,051 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 04:46:17,052 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 04:46:17,052 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 04:46:17,053 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 04:46:17,053 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:45:47" (3/4) ... [2023-11-19 04:46:17,055 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 04:46:17,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 04:46:17,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 04:46:17,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 04:46:17,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 04:46:17,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 04:46:17,060 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:46:17,060 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 04:46:17,060 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:46:17,082 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 44 nodes and edges [2023-11-19 04:46:17,083 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-19 04:46:17,083 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2023-11-19 04:46:17,085 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 04:46:17,086 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 04:46:17,120 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-11-19 04:46:17,195 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-11-19 04:46:17,263 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/witness.graphml [2023-11-19 04:46:17,263 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/witness.yml [2023-11-19 04:46:17,264 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 04:46:17,264 INFO L158 Benchmark]: Toolchain (without parser) took 31451.39ms. Allocated memory was 182.5MB in the beginning and 589.3MB in the end (delta: 406.8MB). Free memory was 133.9MB in the beginning and 432.9MB in the end (delta: -299.0MB). Peak memory consumption was 111.0MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,265 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory is still 84.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 04:46:17,265 INFO L158 Benchmark]: CACSL2BoogieTranslator took 609.07ms. Allocated memory is still 182.5MB. Free memory was 133.2MB in the beginning and 113.4MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,266 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.00ms. Allocated memory is still 182.5MB. Free memory was 113.4MB in the beginning and 111.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,267 INFO L158 Benchmark]: Boogie Preprocessor took 79.30ms. Allocated memory is still 182.5MB. Free memory was 111.4MB in the beginning and 109.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,267 INFO L158 Benchmark]: RCFGBuilder took 703.60ms. Allocated memory is still 182.5MB. Free memory was 109.3MB in the beginning and 82.1MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,268 INFO L158 Benchmark]: TraceAbstraction took 29755.67ms. Allocated memory was 182.5MB in the beginning and 589.3MB in the end (delta: 406.8MB). Free memory was 81.5MB in the beginning and 440.3MB in the end (delta: -358.8MB). Peak memory consumption was 285.0MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,268 INFO L158 Benchmark]: Witness Printer took 211.87ms. Allocated memory is still 589.3MB. Free memory was 440.3MB in the beginning and 432.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-19 04:46:17,271 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory is still 84.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 609.07ms. Allocated memory is still 182.5MB. Free memory was 133.2MB in the beginning and 113.4MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.00ms. Allocated memory is still 182.5MB. Free memory was 113.4MB in the beginning and 111.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 79.30ms. Allocated memory is still 182.5MB. Free memory was 111.4MB in the beginning and 109.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 703.60ms. Allocated memory is still 182.5MB. Free memory was 109.3MB in the beginning and 82.1MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 29755.67ms. Allocated memory was 182.5MB in the beginning and 589.3MB in the end (delta: 406.8MB). Free memory was 81.5MB in the beginning and 440.3MB in the end (delta: -358.8MB). Peak memory consumption was 285.0MB. Max. memory is 16.1GB. * Witness Printer took 211.87ms. Allocated memory is still 589.3MB. Free memory was 440.3MB in the beginning and 432.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 121]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121] - GenericResultAtLocation [Line: 369]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [369] - GenericResultAtLocation [Line: 397]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [397] - GenericResultAtLocation [Line: 435]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [435] - GenericResultAtLocation [Line: 444]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [444] - GenericResultAtLocation [Line: 540]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [540] - GenericResultAtLocation [Line: 906]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [906] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 67 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 29.7s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 6.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2099 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2067 mSDsluCounter, 2766 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1973 mSDsCounter, 1027 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3564 IncrementalHoareTripleChecker+Invalid, 4591 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1027 mSolverCounterUnsat, 793 mSDtfsCounter, 3564 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 909 GetRequests, 640 SyntacticMatches, 13 SemanticMatches, 256 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6708 ImplicationChecksByTransitivity, 9.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=425occurred in iteration=11, InterpolantAutomatonStates: 131, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 225 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 25 LocationsWithAnnotation, 730 PreInvPairs, 767 NumberOfFragments, 963 HoareAnnotationTreeSize, 730 FomulaSimplifications, 9071 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 25 FomulaSimplificationsInter, 4658 FormulaSimplificationTreeSizeReductionInter, 2.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.9s InterpolantComputationTime, 919 NumberOfCodeBlocks, 889 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1073 ConstructedInterpolants, 0 QuantifiedInterpolants, 3591 SizeOfPredicates, 26 NumberOfNonLiveVariables, 1416 ConjunctsInSsa, 92 ConjunctsInUnsatCore, 19 InterpolantComputations, 10 PerfectInterpolantSequences, 500/664 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) RESULT: Ultimate proved your program to be correct! [2023-11-19 04:46:17,325 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a6389630-a58a-4c47-8559-922483f57e75/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE