./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:14:11,017 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:14:11,131 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 21:14:11,149 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:14:11,150 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:14:11,195 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:14:11,196 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:14:11,197 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:14:11,199 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:14:11,204 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:14:11,205 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:14:11,206 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:14:11,207 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:14:11,209 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:14:11,209 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:14:11,210 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:14:11,211 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:14:11,211 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:14:11,212 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:14:11,213 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:14:11,213 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:14:11,214 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:14:11,215 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:14:11,216 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 21:14:11,217 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:14:11,217 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:14:11,218 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:14:11,218 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:14:11,219 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 21:14:11,220 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:14:11,221 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 21:14:11,222 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:14:11,222 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 21:14:11,223 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:14:11,223 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:14:11,223 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:14:11,224 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:14:11,224 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:11,225 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:14:11,225 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:14:11,225 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 21:14:11,226 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:14:11,226 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:14:11,227 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:14:11,228 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 21:14:11,228 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:14:11,228 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:14:11,229 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2023-11-23 21:14:11,536 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:14:11,560 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:14:11,563 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:14:11,564 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:14:11,565 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:14:11,566 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2023-11-23 21:14:14,709 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:14:15,098 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:14:15,099 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2023-11-23 21:14:15,143 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/data/f42103043/0f0c635b3119436ba29aa406f520cd55/FLAGcc576e12c [2023-11-23 21:14:15,171 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/data/f42103043/0f0c635b3119436ba29aa406f520cd55 [2023-11-23 21:14:15,180 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:14:15,182 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:14:15,187 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:15,187 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:14:15,195 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:14:15,196 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,197 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@216cf7c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15, skipping insertion in model container [2023-11-23 21:14:15,198 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,326 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:14:15,627 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2023-11-23 21:14:15,652 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:15,664 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:14:15,675 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2023-11-23 21:14:15,677 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] [2023-11-23 21:14:15,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] [2023-11-23 21:14:15,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] [2023-11-23 21:14:15,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] [2023-11-23 21:14:15,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] [2023-11-23 21:14:15,679 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] [2023-11-23 21:14:15,679 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] [2023-11-23 21:14:15,733 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2023-11-23 21:14:15,747 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:15,769 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:14:15,770 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15 WrapperNode [2023-11-23 21:14:15,770 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:15,771 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:15,772 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:14:15,772 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:14:15,780 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,795 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,827 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 221 [2023-11-23 21:14:15,827 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:15,828 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:14:15,828 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:14:15,829 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:14:15,839 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,839 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,842 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,842 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,849 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,854 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,856 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,858 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,861 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:14:15,862 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:14:15,863 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:14:15,863 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:14:15,864 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (1/1) ... [2023-11-23 21:14:15,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:15,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:15,929 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:14:15,936 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:14:15,968 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:14:15,969 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 21:14:15,969 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 21:14:15,969 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-23 21:14:15,970 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-23 21:14:15,970 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 21:14:15,971 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 21:14:15,972 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 21:14:15,972 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 21:14:15,972 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:15,972 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:15,973 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 21:14:15,973 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 21:14:15,973 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 21:14:15,973 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 21:14:15,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 21:14:15,974 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 21:14:15,974 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 21:14:15,974 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:14:15,976 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:14:16,069 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:14:16,071 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:14:16,368 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:14:16,527 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:14:16,527 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:14:16,529 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:16 BoogieIcfgContainer [2023-11-23 21:14:16,529 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:14:16,533 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:14:16,533 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:14:16,537 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:14:16,537 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:14:15" (1/3) ... [2023-11-23 21:14:16,538 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1373dfcf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:16, skipping insertion in model container [2023-11-23 21:14:16,538 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:15" (2/3) ... [2023-11-23 21:14:16,539 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1373dfcf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:16, skipping insertion in model container [2023-11-23 21:14:16,539 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:16" (3/3) ... [2023-11-23 21:14:16,540 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2023-11-23 21:14:16,562 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:14:16,562 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 21:14:16,621 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:14:16,629 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@34de4a29, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:14:16,629 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 21:14:16,634 INFO L276 IsEmpty]: Start isEmpty. Operand has 65 states, 41 states have (on average 1.4390243902439024) internal successors, (59), 50 states have internal predecessors, (59), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-23 21:14:16,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 21:14:16,668 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:16,669 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:16,670 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:16,678 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:16,679 INFO L85 PathProgramCache]: Analyzing trace with hash -1693987261, now seen corresponding path program 1 times [2023-11-23 21:14:16,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:16,692 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1838692383] [2023-11-23 21:14:16,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:16,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:16,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:16,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:16,909 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:16,910 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1838692383] [2023-11-23 21:14:16,910 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1838692383] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:16,911 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:16,911 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:16,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433234017] [2023-11-23 21:14:16,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:16,935 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 21:14:16,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:17,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 21:14:17,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:17,024 INFO L87 Difference]: Start difference. First operand has 65 states, 41 states have (on average 1.4390243902439024) internal successors, (59), 50 states have internal predecessors, (59), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:17,104 INFO L93 Difference]: Finished difference Result 128 states and 175 transitions. [2023-11-23 21:14:17,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 21:14:17,106 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-23 21:14:17,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:17,116 INFO L225 Difference]: With dead ends: 128 [2023-11-23 21:14:17,116 INFO L226 Difference]: Without dead ends: 60 [2023-11-23 21:14:17,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:17,129 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:17,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:17,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2023-11-23 21:14:17,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 60. [2023-11-23 21:14:17,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 38 states have (on average 1.3421052631578947) internal successors, (51), 46 states have internal predecessors, (51), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-23 21:14:17,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 78 transitions. [2023-11-23 21:14:17,187 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 78 transitions. Word has length 16 [2023-11-23 21:14:17,187 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:17,187 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 78 transitions. [2023-11-23 21:14:17,188 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,188 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 78 transitions. [2023-11-23 21:14:17,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-23 21:14:17,190 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:17,190 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:17,190 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:14:17,191 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:17,191 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:17,192 INFO L85 PathProgramCache]: Analyzing trace with hash -237819326, now seen corresponding path program 1 times [2023-11-23 21:14:17,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:17,192 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974529371] [2023-11-23 21:14:17,192 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:17,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:17,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:17,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:17,330 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:17,330 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974529371] [2023-11-23 21:14:17,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974529371] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:17,331 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:17,332 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:14:17,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925172934] [2023-11-23 21:14:17,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:17,334 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:17,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:17,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:17,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:17,340 INFO L87 Difference]: Start difference. First operand 60 states and 78 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:17,418 INFO L93 Difference]: Finished difference Result 92 states and 118 transitions. [2023-11-23 21:14:17,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:17,419 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-23 21:14:17,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:17,421 INFO L225 Difference]: With dead ends: 92 [2023-11-23 21:14:17,423 INFO L226 Difference]: Without dead ends: 52 [2023-11-23 21:14:17,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:17,426 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:17,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 88 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:17,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2023-11-23 21:14:17,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2023-11-23 21:14:17,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 33 states have (on average 1.3636363636363635) internal successors, (45), 41 states have internal predecessors, (45), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-23 21:14:17,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 67 transitions. [2023-11-23 21:14:17,440 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 67 transitions. Word has length 17 [2023-11-23 21:14:17,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:17,441 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 67 transitions. [2023-11-23 21:14:17,441 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,441 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 67 transitions. [2023-11-23 21:14:17,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-23 21:14:17,443 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:17,443 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:17,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:14:17,444 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:17,444 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:17,445 INFO L85 PathProgramCache]: Analyzing trace with hash 1455549560, now seen corresponding path program 1 times [2023-11-23 21:14:17,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:17,445 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1808300439] [2023-11-23 21:14:17,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:17,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:17,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:17,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:17,577 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:17,577 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1808300439] [2023-11-23 21:14:17,577 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1808300439] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:17,577 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:17,578 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:14:17,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484155240] [2023-11-23 21:14:17,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:17,578 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:17,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:17,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:17,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:17,580 INFO L87 Difference]: Start difference. First operand 52 states and 67 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:17,653 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2023-11-23 21:14:17,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:17,654 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-23 21:14:17,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:17,657 INFO L225 Difference]: With dead ends: 152 [2023-11-23 21:14:17,657 INFO L226 Difference]: Without dead ends: 102 [2023-11-23 21:14:17,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:17,660 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 61 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:17,661 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 112 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:17,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2023-11-23 21:14:17,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 99. [2023-11-23 21:14:17,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 77 states have internal predecessors, (85), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2023-11-23 21:14:17,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 129 transitions. [2023-11-23 21:14:17,687 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 129 transitions. Word has length 20 [2023-11-23 21:14:17,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:17,688 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 129 transitions. [2023-11-23 21:14:17,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:17,688 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 129 transitions. [2023-11-23 21:14:17,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-23 21:14:17,690 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:17,691 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:17,691 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:14:17,691 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:17,692 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:17,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1879029371, now seen corresponding path program 1 times [2023-11-23 21:14:17,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:17,693 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953933352] [2023-11-23 21:14:17,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:17,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:17,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:17,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:17,851 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:17,851 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953933352] [2023-11-23 21:14:17,851 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953933352] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:17,852 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:17,852 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:14:17,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [824026300] [2023-11-23 21:14:17,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:17,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:17,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:17,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:17,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:17,854 INFO L87 Difference]: Start difference. First operand 99 states and 129 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:18,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:18,021 INFO L93 Difference]: Finished difference Result 270 states and 359 transitions. [2023-11-23 21:14:18,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:14:18,022 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-23 21:14:18,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:18,029 INFO L225 Difference]: With dead ends: 270 [2023-11-23 21:14:18,029 INFO L226 Difference]: Without dead ends: 173 [2023-11-23 21:14:18,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:14:18,040 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 37 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:18,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 137 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:18,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2023-11-23 21:14:18,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 168. [2023-11-23 21:14:18,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 111 states have (on average 1.3063063063063063) internal successors, (145), 126 states have internal predecessors, (145), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2023-11-23 21:14:18,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 213 transitions. [2023-11-23 21:14:18,099 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 213 transitions. Word has length 23 [2023-11-23 21:14:18,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:18,100 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 213 transitions. [2023-11-23 21:14:18,100 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:18,100 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 213 transitions. [2023-11-23 21:14:18,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-23 21:14:18,107 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:18,107 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:18,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:14:18,107 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:18,110 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:18,110 INFO L85 PathProgramCache]: Analyzing trace with hash -1700230723, now seen corresponding path program 1 times [2023-11-23 21:14:18,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:18,110 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1814182905] [2023-11-23 21:14:18,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:18,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:18,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:18,593 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:18,593 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:18,594 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1814182905] [2023-11-23 21:14:18,594 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1814182905] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:18,594 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:18,595 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-23 21:14:18,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1437396232] [2023-11-23 21:14:18,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:18,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 21:14:18,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:18,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 21:14:18,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:18,598 INFO L87 Difference]: Start difference. First operand 168 states and 213 transitions. Second operand has 8 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-23 21:14:18,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:18,971 INFO L93 Difference]: Finished difference Result 483 states and 611 transitions. [2023-11-23 21:14:18,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:14:18,972 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-11-23 21:14:18,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:18,977 INFO L225 Difference]: With dead ends: 483 [2023-11-23 21:14:18,977 INFO L226 Difference]: Without dead ends: 317 [2023-11-23 21:14:18,980 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2023-11-23 21:14:18,981 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 139 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:18,982 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 299 Invalid, 264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:18,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2023-11-23 21:14:19,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 298. [2023-11-23 21:14:19,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 201 states have (on average 1.2885572139303483) internal successors, (259), 221 states have internal predecessors, (259), 47 states have call successors, (47), 45 states have call predecessors, (47), 49 states have return successors, (59), 47 states have call predecessors, (59), 47 states have call successors, (59) [2023-11-23 21:14:19,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 365 transitions. [2023-11-23 21:14:19,028 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 365 transitions. Word has length 32 [2023-11-23 21:14:19,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:19,028 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 365 transitions. [2023-11-23 21:14:19,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-23 21:14:19,029 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 365 transitions. [2023-11-23 21:14:19,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-23 21:14:19,031 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:19,031 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:19,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:14:19,031 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:19,032 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:19,032 INFO L85 PathProgramCache]: Analyzing trace with hash -893971849, now seen corresponding path program 1 times [2023-11-23 21:14:19,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:19,033 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2130069640] [2023-11-23 21:14:19,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:19,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:19,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:19,163 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:14:19,163 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:19,163 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2130069640] [2023-11-23 21:14:19,163 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2130069640] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:19,164 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:19,164 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:14:19,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915105515] [2023-11-23 21:14:19,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:19,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:14:19,165 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:19,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:14:19,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:19,166 INFO L87 Difference]: Start difference. First operand 298 states and 365 transitions. Second operand has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-23 21:14:19,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:19,475 INFO L93 Difference]: Finished difference Result 880 states and 1098 transitions. [2023-11-23 21:14:19,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:14:19,476 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 35 [2023-11-23 21:14:19,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:19,486 INFO L225 Difference]: With dead ends: 880 [2023-11-23 21:14:19,487 INFO L226 Difference]: Without dead ends: 584 [2023-11-23 21:14:19,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-23 21:14:19,500 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 43 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:19,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 226 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:19,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 584 states. [2023-11-23 21:14:19,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 584 to 560. [2023-11-23 21:14:19,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 560 states, 383 states have (on average 1.2715404699738904) internal successors, (487), 414 states have internal predecessors, (487), 86 states have call successors, (86), 82 states have call predecessors, (86), 90 states have return successors, (110), 86 states have call predecessors, (110), 86 states have call successors, (110) [2023-11-23 21:14:19,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 560 states to 560 states and 683 transitions. [2023-11-23 21:14:19,572 INFO L78 Accepts]: Start accepts. Automaton has 560 states and 683 transitions. Word has length 35 [2023-11-23 21:14:19,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:19,572 INFO L495 AbstractCegarLoop]: Abstraction has 560 states and 683 transitions. [2023-11-23 21:14:19,573 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-23 21:14:19,573 INFO L276 IsEmpty]: Start isEmpty. Operand 560 states and 683 transitions. [2023-11-23 21:14:19,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-23 21:14:19,576 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:19,576 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:19,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:14:19,576 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:19,577 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:19,577 INFO L85 PathProgramCache]: Analyzing trace with hash 605602311, now seen corresponding path program 1 times [2023-11-23 21:14:19,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:19,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021833346] [2023-11-23 21:14:19,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:19,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:19,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:19,889 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:19,890 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:19,890 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021833346] [2023-11-23 21:14:19,890 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021833346] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:19,890 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:19,890 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2023-11-23 21:14:19,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1193398517] [2023-11-23 21:14:19,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:19,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-23 21:14:19,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:19,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-23 21:14:19,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2023-11-23 21:14:19,893 INFO L87 Difference]: Start difference. First operand 560 states and 683 transitions. Second operand has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 11 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-23 21:14:20,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:20,731 INFO L93 Difference]: Finished difference Result 1132 states and 1498 transitions. [2023-11-23 21:14:20,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-23 21:14:20,732 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 11 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) Word has length 38 [2023-11-23 21:14:20,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:20,741 INFO L225 Difference]: With dead ends: 1132 [2023-11-23 21:14:20,741 INFO L226 Difference]: Without dead ends: 906 [2023-11-23 21:14:20,743 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 228 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=263, Invalid=729, Unknown=0, NotChecked=0, Total=992 [2023-11-23 21:14:20,744 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 388 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 323 mSolverCounterSat, 217 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 395 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 540 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 217 IncrementalHoareTripleChecker+Valid, 323 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:20,745 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [395 Valid, 227 Invalid, 540 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [217 Valid, 323 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-23 21:14:20,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 906 states. [2023-11-23 21:14:20,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 906 to 715. [2023-11-23 21:14:20,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 715 states, 491 states have (on average 1.274949083503055) internal successors, (626), 529 states have internal predecessors, (626), 110 states have call successors, (110), 98 states have call predecessors, (110), 113 states have return successors, (155), 112 states have call predecessors, (155), 110 states have call successors, (155) [2023-11-23 21:14:20,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 715 states to 715 states and 891 transitions. [2023-11-23 21:14:20,855 INFO L78 Accepts]: Start accepts. Automaton has 715 states and 891 transitions. Word has length 38 [2023-11-23 21:14:20,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:20,856 INFO L495 AbstractCegarLoop]: Abstraction has 715 states and 891 transitions. [2023-11-23 21:14:20,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 11 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-23 21:14:20,856 INFO L276 IsEmpty]: Start isEmpty. Operand 715 states and 891 transitions. [2023-11-23 21:14:20,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-23 21:14:20,860 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:20,861 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:20,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-23 21:14:20,861 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:20,862 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:20,862 INFO L85 PathProgramCache]: Analyzing trace with hash 1829923219, now seen corresponding path program 1 times [2023-11-23 21:14:20,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:20,863 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594661770] [2023-11-23 21:14:20,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:20,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:20,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:20,929 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:14:20,929 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:20,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594661770] [2023-11-23 21:14:20,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594661770] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:20,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:20,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:14:20,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881378186] [2023-11-23 21:14:20,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:20,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:20,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:20,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:20,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:20,933 INFO L87 Difference]: Start difference. First operand 715 states and 891 transitions. Second operand has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-23 21:14:21,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:21,125 INFO L93 Difference]: Finished difference Result 1164 states and 1448 transitions. [2023-11-23 21:14:21,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:14:21,126 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 60 [2023-11-23 21:14:21,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:21,130 INFO L225 Difference]: With dead ends: 1164 [2023-11-23 21:14:21,130 INFO L226 Difference]: Without dead ends: 451 [2023-11-23 21:14:21,132 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:21,133 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 85 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:21,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 116 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:21,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2023-11-23 21:14:21,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 443. [2023-11-23 21:14:21,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 443 states, 309 states have (on average 1.2588996763754046) internal successors, (389), 332 states have internal predecessors, (389), 66 states have call successors, (66), 60 states have call predecessors, (66), 67 states have return successors, (85), 67 states have call predecessors, (85), 66 states have call successors, (85) [2023-11-23 21:14:21,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 443 states to 443 states and 540 transitions. [2023-11-23 21:14:21,195 INFO L78 Accepts]: Start accepts. Automaton has 443 states and 540 transitions. Word has length 60 [2023-11-23 21:14:21,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:21,196 INFO L495 AbstractCegarLoop]: Abstraction has 443 states and 540 transitions. [2023-11-23 21:14:21,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-23 21:14:21,197 INFO L276 IsEmpty]: Start isEmpty. Operand 443 states and 540 transitions. [2023-11-23 21:14:21,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2023-11-23 21:14:21,204 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:21,204 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:21,204 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-23 21:14:21,204 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:21,205 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:21,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1364689831, now seen corresponding path program 1 times [2023-11-23 21:14:21,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:21,205 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610202165] [2023-11-23 21:14:21,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:21,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:21,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:21,875 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 5 proven. 11 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-23 21:14:21,876 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:21,877 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1610202165] [2023-11-23 21:14:21,877 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1610202165] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:21,878 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2145033815] [2023-11-23 21:14:21,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:21,878 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:21,878 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:21,883 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:21,929 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 21:14:22,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:22,028 INFO L262 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 21 conjunts are in the unsatisfiable core [2023-11-23 21:14:22,044 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:22,527 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:22,527 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:23,016 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-23 21:14:23,017 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2145033815] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:23,017 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [655798362] [2023-11-23 21:14:23,046 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2023-11-23 21:14:23,046 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:23,051 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:23,057 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:23,058 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:27,622 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 142 for LOIs [2023-11-23 21:14:27,720 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-11-23 21:14:27,949 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 32 for LOIs [2023-11-23 21:14:28,149 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 28 for LOIs [2023-11-23 21:14:28,163 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 19 for LOIs [2023-11-23 21:14:28,169 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 23 for LOIs [2023-11-23 21:14:28,173 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:33,077 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9514#(and (<= ~methaneLevelCritical~0 1) (<= 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 2147483648)) (<= 0 |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1|) (<= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1|) (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| ~methaneLevelCritical~0) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)))' at error location [2023-11-23 21:14:33,078 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:33,078 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:33,078 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 11, 11] total 24 [2023-11-23 21:14:33,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1885972667] [2023-11-23 21:14:33,078 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:33,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2023-11-23 21:14:33,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:33,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2023-11-23 21:14:33,083 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=368, Invalid=3054, Unknown=0, NotChecked=0, Total=3422 [2023-11-23 21:14:33,083 INFO L87 Difference]: Start difference. First operand 443 states and 540 transitions. Second operand has 24 states, 21 states have (on average 4.238095238095238) internal successors, (89), 20 states have internal predecessors, (89), 11 states have call successors, (23), 9 states have call predecessors, (23), 9 states have return successors, (21), 8 states have call predecessors, (21), 11 states have call successors, (21) [2023-11-23 21:14:34,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:34,915 INFO L93 Difference]: Finished difference Result 1446 states and 1832 transitions. [2023-11-23 21:14:34,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2023-11-23 21:14:34,916 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 21 states have (on average 4.238095238095238) internal successors, (89), 20 states have internal predecessors, (89), 11 states have call successors, (23), 9 states have call predecessors, (23), 9 states have return successors, (21), 8 states have call predecessors, (21), 11 states have call successors, (21) Word has length 67 [2023-11-23 21:14:34,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:34,924 INFO L225 Difference]: With dead ends: 1446 [2023-11-23 21:14:34,925 INFO L226 Difference]: Without dead ends: 1115 [2023-11-23 21:14:34,930 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 160 SyntacticMatches, 3 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2888 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=1000, Invalid=6482, Unknown=0, NotChecked=0, Total=7482 [2023-11-23 21:14:34,932 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 751 mSDsluCounter, 389 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 443 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 759 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 1121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 443 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:34,933 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [759 Valid, 441 Invalid, 1121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [443 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-23 21:14:34,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1115 states. [2023-11-23 21:14:35,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1115 to 1010. [2023-11-23 21:14:35,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1010 states, 705 states have (on average 1.252482269503546) internal successors, (883), 762 states have internal predecessors, (883), 150 states have call successors, (150), 129 states have call predecessors, (150), 154 states have return successors, (216), 162 states have call predecessors, (216), 150 states have call successors, (216) [2023-11-23 21:14:35,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1010 states to 1010 states and 1249 transitions. [2023-11-23 21:14:35,058 INFO L78 Accepts]: Start accepts. Automaton has 1010 states and 1249 transitions. Word has length 67 [2023-11-23 21:14:35,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:35,060 INFO L495 AbstractCegarLoop]: Abstraction has 1010 states and 1249 transitions. [2023-11-23 21:14:35,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 21 states have (on average 4.238095238095238) internal successors, (89), 20 states have internal predecessors, (89), 11 states have call successors, (23), 9 states have call predecessors, (23), 9 states have return successors, (21), 8 states have call predecessors, (21), 11 states have call successors, (21) [2023-11-23 21:14:35,061 INFO L276 IsEmpty]: Start isEmpty. Operand 1010 states and 1249 transitions. [2023-11-23 21:14:35,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2023-11-23 21:14:35,066 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:35,066 INFO L195 NwaCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:35,093 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:35,288 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:35,288 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:35,289 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:35,289 INFO L85 PathProgramCache]: Analyzing trace with hash 935000358, now seen corresponding path program 1 times [2023-11-23 21:14:35,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:35,290 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80417275] [2023-11-23 21:14:35,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:35,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:35,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:36,408 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 55 proven. 55 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2023-11-23 21:14:36,408 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:36,408 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80417275] [2023-11-23 21:14:36,408 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80417275] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:36,408 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [514009284] [2023-11-23 21:14:36,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:36,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:36,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:36,412 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:36,439 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-23 21:14:36,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:36,553 INFO L262 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 34 conjunts are in the unsatisfiable core [2023-11-23 21:14:36,559 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:37,087 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 84 proven. 44 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2023-11-23 21:14:37,088 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:37,825 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 76 proven. 26 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2023-11-23 21:14:37,825 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [514009284] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:37,826 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1302446887] [2023-11-23 21:14:37,833 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2023-11-23 21:14:37,833 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:37,834 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:37,834 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:37,835 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:41,326 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 142 for LOIs [2023-11-23 21:14:41,444 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-11-23 21:14:41,736 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 32 for LOIs [2023-11-23 21:14:41,858 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 28 for LOIs [2023-11-23 21:14:41,868 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 19 for LOIs [2023-11-23 21:14:41,872 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 23 for LOIs [2023-11-23 21:14:41,875 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 26 for LOIs [2023-11-23 21:14:41,879 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:46,923 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13608#(and (<= ~methaneLevelCritical~0 1) (<= 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 2147483648)) (<= 0 |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1|) (<= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1|) (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| ~methaneLevelCritical~0) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)))' at error location [2023-11-23 21:14:46,923 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:46,923 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:46,923 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 13, 14] total 38 [2023-11-23 21:14:46,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755946885] [2023-11-23 21:14:46,924 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:46,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-11-23 21:14:46,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:46,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-11-23 21:14:46,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=563, Invalid=5137, Unknown=0, NotChecked=0, Total=5700 [2023-11-23 21:14:46,929 INFO L87 Difference]: Start difference. First operand 1010 states and 1249 transitions. Second operand has 38 states, 34 states have (on average 4.970588235294118) internal successors, (169), 37 states have internal predecessors, (169), 23 states have call successors, (39), 8 states have call predecessors, (39), 15 states have return successors, (41), 18 states have call predecessors, (41), 23 states have call successors, (41) [2023-11-23 21:14:48,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:48,647 INFO L93 Difference]: Finished difference Result 1893 states and 2373 transitions. [2023-11-23 21:14:48,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-11-23 21:14:48,648 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 34 states have (on average 4.970588235294118) internal successors, (169), 37 states have internal predecessors, (169), 23 states have call successors, (39), 8 states have call predecessors, (39), 15 states have return successors, (41), 18 states have call predecessors, (41), 23 states have call successors, (41) Word has length 121 [2023-11-23 21:14:48,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:48,650 INFO L225 Difference]: With dead ends: 1893 [2023-11-23 21:14:48,650 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 21:14:48,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 415 GetRequests, 313 SyntacticMatches, 3 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3832 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=1203, Invalid=8897, Unknown=0, NotChecked=0, Total=10100 [2023-11-23 21:14:48,659 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 635 mSDsluCounter, 473 mSDsCounter, 0 mSdLazyCounter, 823 mSolverCounterSat, 402 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 638 SdHoareTripleChecker+Valid, 535 SdHoareTripleChecker+Invalid, 1225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 402 IncrementalHoareTripleChecker+Valid, 823 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:48,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [638 Valid, 535 Invalid, 1225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [402 Valid, 823 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-23 21:14:48,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 21:14:48,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 21:14:48,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:48,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 21:14:48,661 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2023-11-23 21:14:48,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:48,662 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 21:14:48,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 34 states have (on average 4.970588235294118) internal successors, (169), 37 states have internal predecessors, (169), 23 states have call successors, (39), 8 states have call predecessors, (39), 15 states have return successors, (41), 18 states have call predecessors, (41), 23 states have call successors, (41) [2023-11-23 21:14:48,662 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 21:14:48,663 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 21:14:48,665 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 21:14:48,687 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-23 21:14:48,887 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-23 21:14:48,889 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 21:14:53,778 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2023-11-23 21:14:53,779 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 851 858) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (not (= 1 ~systemActive~0)) (= |old(~pumpRunning~0)| 0)) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2023-11-23 21:14:53,779 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2023-11-23 21:14:53,779 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2023-11-23 21:14:53,779 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 186 197) the Hoare annotation is: (let ((.cse8 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse7 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse6 (not (= 1 ~systemActive~0))) (.cse1 (not .cse7)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (and .cse8 (not (= |old(~methaneLevelCritical~0)| 1)))) (.cse9 (not (= 2 ~waterLevel~0))) (.cse4 (= ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (or .cse7 .cse8 .cse2 .cse6 .cse9) (or .cse1 .cse2 .cse6 .cse3 .cse9 .cse4) (or .cse1 .cse2 .cse3 .cse9 .cse4 .cse5)))) [2023-11-23 21:14:53,780 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2023-11-23 21:14:53,780 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 198 206) the Hoare annotation is: true [2023-11-23 21:14:53,780 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2023-11-23 21:14:53,780 INFO L895 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 1))) (let ((.cse7 (= 2 ~waterLevel~0)) (.cse12 (= 1 ~systemActive~0)) (.cse10 (= ~methaneLevelCritical~0 0)) (.cse13 (not .cse11)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse6 (= ~waterLevel~0 1))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (not .cse10) .cse13)) (.cse3 (not .cse12)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse9 (and .cse7 (or .cse10 .cse11) .cse12 (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13) (or .cse6 .cse10)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse0 .cse2 (and .cse6 .cse7) .cse8 .cse5) (or .cse2 .cse3 .cse8 (and .cse6 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse9) (or .cse0 .cse2 .cse3 .cse8 .cse9))))) [2023-11-23 21:14:53,780 INFO L899 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2023-11-23 21:14:53,781 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2023-11-23 21:14:53,782 INFO L899 garLoopResultBuilder]: For program point L273-1(lines 265 289) no Hoare annotation was computed. [2023-11-23 21:14:53,782 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse5 .cse3))) [2023-11-23 21:14:53,782 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) (or .cse3 .cse4 .cse0 .cse5) (or .cse3 .cse4 .cse0 .cse1) (or .cse3 .cse0 .cse2 .cse5) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 .cse1 .cse2) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2))) [2023-11-23 21:14:53,782 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 742 765) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse6 (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (= 2 ~waterLevel~0)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse0 .cse2 (and .cse6 .cse7) .cse8 .cse5) (or .cse2 .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse8)))) [2023-11-23 21:14:53,783 INFO L895 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not .cse7)) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 .cse5) (or .cse2 .cse3 .cse6 (and .cse4 (= 2 ~waterLevel~0) .cse7)) (or .cse0 .cse2 .cse6 .cse5)))) [2023-11-23 21:14:53,783 INFO L899 garLoopResultBuilder]: For program point L819-1(lines 800 824) no Hoare annotation was computed. [2023-11-23 21:14:53,783 INFO L899 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2023-11-23 21:14:53,783 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2023-11-23 21:14:53,783 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2023-11-23 21:14:53,784 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-11-23 21:14:53,784 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-11-23 21:14:53,784 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-11-23 21:14:53,784 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-11-23 21:14:53,784 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-11-23 21:14:53,784 INFO L899 garLoopResultBuilder]: For program point L77(lines 52 81) no Hoare annotation was computed. [2023-11-23 21:14:53,785 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-11-23 21:14:53,785 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-11-23 21:14:53,785 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-11-23 21:14:53,785 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (or .cse7 (= ~methaneLevelCritical~0 1))) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 (or .cse0 .cse7))))) [2023-11-23 21:14:53,785 INFO L895 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (or .cse7 (= ~methaneLevelCritical~0 1))) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 (or .cse0 .cse7))))) [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2023-11-23 21:14:53,786 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2023-11-23 21:14:53,787 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 21:14:53,787 INFO L899 garLoopResultBuilder]: For program point L731(lines 668 735) no Hoare annotation was computed. [2023-11-23 21:14:53,787 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2023-11-23 21:14:53,787 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2023-11-23 21:14:53,787 INFO L895 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (or .cse7 (= ~methaneLevelCritical~0 1))) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 (or .cse0 .cse7))))) [2023-11-23 21:14:53,787 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 21:14:53,788 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (and (= 2 ~waterLevel~0) (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1)) (or (< 1 |old(~waterLevel~0)|) (not (= ~pumpRunning~0 0))) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-23 21:14:53,788 INFO L895 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2023-11-23 21:14:53,788 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2023-11-23 21:14:53,788 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2))) [2023-11-23 21:14:53,788 INFO L899 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2023-11-23 21:14:53,789 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2023-11-23 21:14:53,789 INFO L895 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-11-23 21:14:53,789 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2023-11-23 21:14:53,789 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (= 2 ~waterLevel~0))))) [2023-11-23 21:14:53,789 INFO L895 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 1))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-11-23 21:14:53,790 INFO L899 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2023-11-23 21:14:53,790 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2023-11-23 21:14:53,790 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-11-23 21:14:53,790 INFO L899 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2023-11-23 21:14:53,790 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2023-11-23 21:14:53,790 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2023-11-23 21:14:53,791 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 174 185) the Hoare annotation is: (let ((.cse5 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse6 (= 2 ~waterLevel~0)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and .cse5 (not (= ~methaneLevelCritical~0 1)))) (.cse4 (= ~waterLevel~0 1)) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse0 .cse5) .cse6 .cse2 .cse3 .cse7) (or .cse0 .cse6 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse4 .cse8)))) [2023-11-23 21:14:53,793 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:53,796 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 21:14:53,814 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:14:53 BoogieIcfgContainer [2023-11-23 21:14:53,815 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 21:14:53,815 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 21:14:53,815 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 21:14:53,816 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 21:14:53,816 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:16" (3/4) ... [2023-11-23 21:14:53,818 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 21:14:53,822 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 21:14:53,823 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 21:14:53,823 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 21:14:53,823 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-23 21:14:53,823 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 21:14:53,823 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 21:14:53,824 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:53,824 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 21:14:53,843 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-11-23 21:14:53,844 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-23 21:14:53,845 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 21:14:53,846 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:14:53,846 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:14:53,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((0 == systemActive)))) && ((((!((\old(pumpRunning) == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && ((((!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1))) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) [2023-11-23 21:14:53,954 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((0 == systemActive)))) && ((((!((\old(pumpRunning) == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && ((((!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1))) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) [2023-11-23 21:14:54,013 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 21:14:54,013 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 21:14:54,013 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 21:14:54,015 INFO L158 Benchmark]: Toolchain (without parser) took 38832.16ms. Allocated memory was 119.5MB in the beginning and 906.0MB in the end (delta: 786.4MB). Free memory was 58.8MB in the beginning and 659.4MB in the end (delta: -600.6MB). Peak memory consumption was 186.6MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,015 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 119.5MB. Free memory is still 89.5MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:14:54,016 INFO L158 Benchmark]: CACSL2BoogieTranslator took 583.69ms. Allocated memory was 119.5MB in the beginning and 161.5MB in the end (delta: 41.9MB). Free memory was 58.6MB in the beginning and 115.1MB in the end (delta: -56.5MB). Peak memory consumption was 7.4MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,016 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.17ms. Allocated memory is still 161.5MB. Free memory was 115.1MB in the beginning and 112.5MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,016 INFO L158 Benchmark]: Boogie Preprocessor took 33.33ms. Allocated memory is still 161.5MB. Free memory was 112.5MB in the beginning and 111.0MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:14:54,017 INFO L158 Benchmark]: RCFGBuilder took 667.17ms. Allocated memory is still 161.5MB. Free memory was 111.0MB in the beginning and 83.2MB in the end (delta: 27.8MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,018 INFO L158 Benchmark]: TraceAbstraction took 37282.25ms. Allocated memory was 161.5MB in the beginning and 906.0MB in the end (delta: 744.5MB). Free memory was 82.7MB in the beginning and 666.7MB in the end (delta: -584.0MB). Peak memory consumption was 410.0MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,018 INFO L158 Benchmark]: Witness Printer took 198.26ms. Allocated memory is still 906.0MB. Free memory was 666.7MB in the beginning and 659.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 21:14:54,021 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 119.5MB. Free memory is still 89.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 583.69ms. Allocated memory was 119.5MB in the beginning and 161.5MB in the end (delta: 41.9MB). Free memory was 58.6MB in the beginning and 115.1MB in the end (delta: -56.5MB). Peak memory consumption was 7.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.17ms. Allocated memory is still 161.5MB. Free memory was 115.1MB in the beginning and 112.5MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.33ms. Allocated memory is still 161.5MB. Free memory was 112.5MB in the beginning and 111.0MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 667.17ms. Allocated memory is still 161.5MB. Free memory was 111.0MB in the beginning and 83.2MB in the end (delta: 27.8MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * TraceAbstraction took 37282.25ms. Allocated memory was 161.5MB in the beginning and 906.0MB in the end (delta: 744.5MB). Free memory was 82.7MB in the beginning and 666.7MB in the end (delta: -584.0MB). Peak memory consumption was 410.0MB. Max. memory is 16.1GB. * Witness Printer took 198.26ms. Allocated memory is still 906.0MB. Free memory was 666.7MB in the beginning and 659.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 153]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [153] - GenericResultAtLocation [Line: 262]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [262] - GenericResultAtLocation [Line: 290]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [290] - GenericResultAtLocation [Line: 656]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [656] - GenericResultAtLocation [Line: 665]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [665] - GenericResultAtLocation [Line: 736]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [736] - GenericResultAtLocation [Line: 976]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [976] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 65 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 37.2s, OverallIterations: 10, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2178 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2153 mSDsluCounter, 2247 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1662 mSDsCounter, 1100 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2381 IncrementalHoareTripleChecker+Invalid, 3481 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1100 mSolverCounterUnsat, 585 mSDtfsCounter, 2381 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 738 GetRequests, 496 SyntacticMatches, 6 SemanticMatches, 236 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6961 ImplicationChecksByTransitivity, 13.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1010occurred in iteration=9, InterpolantAutomatonStates: 130, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 355 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 1288 PreInvPairs, 1428 NumberOfFragments, 1480 HoareAnnotationTreeSize, 1288 FomulaSimplifications, 20099 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 24 FomulaSimplificationsInter, 24408 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 5.3s InterpolantComputationTime, 617 NumberOfCodeBlocks, 617 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 791 ConstructedInterpolants, 0 QuantifiedInterpolants, 2855 SizeOfPredicates, 17 NumberOfNonLiveVariables, 670 ConjunctsInSsa, 55 ConjunctsInUnsatCore, 14 InterpolantComputations, 8 PerfectInterpolantSequences, 402/552 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && ((methaneLevelCritical == 0) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive)) && (waterLevel == 1)) || (((((pumpRunning == 0) && ((methaneLevelCritical == 0) || (methaneLevelCritical == 1))) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((pumpRunning == 0) && (2 == waterLevel)) && ((methaneLevelCritical == 0) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((2 == waterLevel) && ((methaneLevelCritical == 0) || (methaneLevelCritical == 1))) && (1 == systemActive)) && (splverifierCounter == 0)) && ((pumpRunning == 0) || (methaneLevelCritical == 0)))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((0 == systemActive)))) && ((((!((\old(pumpRunning) == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && ((((!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1))) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) RESULT: Ultimate proved your program to be correct! [2023-11-23 21:14:54,076 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c2bec7e-fbde-4508-8d8f-c011a236c968/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE