./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:12:26,508 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:12:26,621 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 21:12:26,628 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:12:26,628 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:12:26,666 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:12:26,667 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:12:26,667 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:12:26,670 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:12:26,675 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:12:26,675 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:12:26,676 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:12:26,676 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:12:26,678 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:12:26,678 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:12:26,679 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:12:26,679 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:12:26,679 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:12:26,680 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:12:26,680 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:12:26,681 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:12:26,681 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:12:26,682 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:12:26,683 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 21:12:26,683 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:12:26,683 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:12:26,684 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:12:26,684 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:12:26,685 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 21:12:26,685 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:12:26,686 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 21:12:26,686 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:12:26,687 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 21:12:26,687 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:12:26,687 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:12:26,687 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:12:26,688 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:12:26,688 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:12:26,688 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:12:26,688 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:12:26,688 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 21:12:26,689 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:12:26,689 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:12:26,689 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:12:26,690 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 21:12:26,690 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:12:26,690 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:12:26,690 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b [2023-11-23 21:12:26,950 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:12:26,978 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:12:26,980 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:12:26,982 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:12:26,983 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:12:26,984 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2023-11-23 21:12:30,019 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:12:30,252 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:12:30,256 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2023-11-23 21:12:30,274 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/data/c81845a01/d229de5c9770484f9c3c7784ff69b334/FLAGb6a16fd4d [2023-11-23 21:12:30,286 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/data/c81845a01/d229de5c9770484f9c3c7784ff69b334 [2023-11-23 21:12:30,288 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:12:30,290 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:12:30,291 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:12:30,291 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:12:30,297 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:12:30,297 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,298 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a7e05ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30, skipping insertion in model container [2023-11-23 21:12:30,299 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,371 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:12:30,572 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2023-11-23 21:12:30,644 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:12:30,656 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:12:30,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-23 21:12:30,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [316] [2023-11-23 21:12:30,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [386] [2023-11-23 21:12:30,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [395] [2023-11-23 21:12:30,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [761] [2023-11-23 21:12:30,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [860] [2023-11-23 21:12:30,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [886] [2023-11-23 21:12:30,671 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [990] [2023-11-23 21:12:30,690 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2023-11-23 21:12:30,772 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:12:30,810 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:12:30,811 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30 WrapperNode [2023-11-23 21:12:30,811 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:12:30,812 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:12:30,812 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:12:30,812 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:12:30,819 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,840 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,870 INFO L138 Inliner]: procedures = 58, calls = 106, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 220 [2023-11-23 21:12:30,871 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:12:30,871 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:12:30,872 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:12:30,872 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:12:30,882 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,882 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,885 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,885 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,892 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,897 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,899 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,901 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,905 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:12:30,906 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:12:30,906 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:12:30,906 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:12:30,907 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (1/1) ... [2023-11-23 21:12:30,914 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:12:30,935 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:12:30,947 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:12:31,037 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:12:31,066 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:12:31,066 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 21:12:31,067 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 21:12:31,067 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 21:12:31,067 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 21:12:31,067 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-23 21:12:31,067 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-23 21:12:31,068 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 21:12:31,069 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 21:12:31,069 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:12:31,069 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:12:31,070 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 21:12:31,070 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 21:12:31,071 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-23 21:12:31,072 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-23 21:12:31,072 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-23 21:12:31,072 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-23 21:12:31,072 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 21:12:31,094 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 21:12:31,094 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 21:12:31,094 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 21:12:31,095 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 21:12:31,095 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:12:31,095 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:12:31,184 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:12:31,187 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:12:31,535 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:12:31,682 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:12:31,683 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:12:31,685 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:12:31 BoogieIcfgContainer [2023-11-23 21:12:31,685 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:12:31,688 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:12:31,688 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:12:31,691 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:12:31,692 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:12:30" (1/3) ... [2023-11-23 21:12:31,692 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@504b9cb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:12:31, skipping insertion in model container [2023-11-23 21:12:31,693 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:12:30" (2/3) ... [2023-11-23 21:12:31,693 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@504b9cb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:12:31, skipping insertion in model container [2023-11-23 21:12:31,693 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:12:31" (3/3) ... [2023-11-23 21:12:31,695 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product63.cil.c [2023-11-23 21:12:31,715 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:12:31,715 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 21:12:31,780 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:12:31,785 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@27e675c5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:12:31,786 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 21:12:31,790 INFO L276 IsEmpty]: Start isEmpty. Operand has 79 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 59 states have internal predecessors, (68), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-23 21:12:31,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 21:12:31,802 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:31,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:31,803 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:31,811 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:31,811 INFO L85 PathProgramCache]: Analyzing trace with hash -1237295484, now seen corresponding path program 1 times [2023-11-23 21:12:31,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:31,822 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69858812] [2023-11-23 21:12:31,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:31,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:31,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:32,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:12:32,072 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:32,072 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69858812] [2023-11-23 21:12:32,073 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69858812] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:32,074 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:32,074 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:12:32,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367254448] [2023-11-23 21:12:32,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:32,084 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 21:12:32,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:32,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 21:12:32,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:12:32,145 INFO L87 Difference]: Start difference. First operand has 79 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 59 states have internal predecessors, (68), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:32,268 INFO L93 Difference]: Finished difference Result 156 states and 213 transitions. [2023-11-23 21:12:32,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 21:12:32,270 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-23 21:12:32,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:32,283 INFO L225 Difference]: With dead ends: 156 [2023-11-23 21:12:32,283 INFO L226 Difference]: Without dead ends: 74 [2023-11-23 21:12:32,288 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:12:32,299 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 85 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:32,300 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 85 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:12:32,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2023-11-23 21:12:32,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2023-11-23 21:12:32,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 45 states have (on average 1.3333333333333333) internal successors, (60), 55 states have internal predecessors, (60), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-23 21:12:32,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 97 transitions. [2023-11-23 21:12:32,372 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 97 transitions. Word has length 16 [2023-11-23 21:12:32,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:32,373 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 97 transitions. [2023-11-23 21:12:32,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,374 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 97 transitions. [2023-11-23 21:12:32,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-23 21:12:32,378 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:32,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:32,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:12:32,380 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:32,381 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:32,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1042358192, now seen corresponding path program 1 times [2023-11-23 21:12:32,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:32,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576060242] [2023-11-23 21:12:32,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:32,383 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:32,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:32,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:12:32,502 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:32,502 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576060242] [2023-11-23 21:12:32,503 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576060242] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:32,503 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:32,503 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:12:32,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797363093] [2023-11-23 21:12:32,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:32,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:12:32,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:32,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:12:32,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:12:32,507 INFO L87 Difference]: Start difference. First operand 74 states and 97 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:32,584 INFO L93 Difference]: Finished difference Result 120 states and 156 transitions. [2023-11-23 21:12:32,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:12:32,587 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-23 21:12:32,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:32,589 INFO L225 Difference]: With dead ends: 120 [2023-11-23 21:12:32,591 INFO L226 Difference]: Without dead ends: 66 [2023-11-23 21:12:32,592 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:12:32,594 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 14 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:32,595 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 125 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:12:32,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2023-11-23 21:12:32,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2023-11-23 21:12:32,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 40 states have (on average 1.35) internal successors, (54), 50 states have internal predecessors, (54), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-23 21:12:32,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 86 transitions. [2023-11-23 21:12:32,607 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 86 transitions. Word has length 17 [2023-11-23 21:12:32,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:32,608 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 86 transitions. [2023-11-23 21:12:32,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,609 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 86 transitions. [2023-11-23 21:12:32,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-23 21:12:32,611 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:32,612 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:32,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:12:32,614 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:32,614 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:32,616 INFO L85 PathProgramCache]: Analyzing trace with hash 1451612221, now seen corresponding path program 1 times [2023-11-23 21:12:32,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:32,617 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2098904968] [2023-11-23 21:12:32,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:32,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:32,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:32,723 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:12:32,724 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:32,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2098904968] [2023-11-23 21:12:32,725 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2098904968] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:32,725 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:32,725 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:12:32,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [647951504] [2023-11-23 21:12:32,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:32,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:12:32,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:32,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:12:32,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:12:32,728 INFO L87 Difference]: Start difference. First operand 66 states and 86 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:32,804 INFO L93 Difference]: Finished difference Result 194 states and 255 transitions. [2023-11-23 21:12:32,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:12:32,805 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-23 21:12:32,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:32,807 INFO L225 Difference]: With dead ends: 194 [2023-11-23 21:12:32,809 INFO L226 Difference]: Without dead ends: 130 [2023-11-23 21:12:32,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:12:32,812 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 73 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:32,814 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 153 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:12:32,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2023-11-23 21:12:32,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 127. [2023-11-23 21:12:32,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 76 states have (on average 1.355263157894737) internal successors, (103), 95 states have internal predecessors, (103), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2023-11-23 21:12:32,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 167 transitions. [2023-11-23 21:12:32,855 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 167 transitions. Word has length 20 [2023-11-23 21:12:32,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:32,855 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 167 transitions. [2023-11-23 21:12:32,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:32,856 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 167 transitions. [2023-11-23 21:12:32,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-23 21:12:32,863 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:32,863 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:32,863 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:12:32,863 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:32,864 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:32,870 INFO L85 PathProgramCache]: Analyzing trace with hash 246769009, now seen corresponding path program 1 times [2023-11-23 21:12:32,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:32,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926463073] [2023-11-23 21:12:32,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:32,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:32,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:33,097 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:12:33,098 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:33,099 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926463073] [2023-11-23 21:12:33,099 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926463073] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:33,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:33,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:12:33,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054004403] [2023-11-23 21:12:33,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:33,101 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:12:33,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:33,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:12:33,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:12:33,103 INFO L87 Difference]: Start difference. First operand 127 states and 167 transitions. Second operand has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:33,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:33,343 INFO L93 Difference]: Finished difference Result 373 states and 496 transitions. [2023-11-23 21:12:33,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:12:33,343 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-23 21:12:33,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:33,348 INFO L225 Difference]: With dead ends: 373 [2023-11-23 21:12:33,348 INFO L226 Difference]: Without dead ends: 248 [2023-11-23 21:12:33,349 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-23 21:12:33,351 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 63 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:33,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 311 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:12:33,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-23 21:12:33,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 242. [2023-11-23 21:12:33,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 145 states have (on average 1.3448275862068966) internal successors, (195), 180 states have internal predecessors, (195), 62 states have call successors, (62), 34 states have call predecessors, (62), 34 states have return successors, (62), 40 states have call predecessors, (62), 62 states have call successors, (62) [2023-11-23 21:12:33,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 319 transitions. [2023-11-23 21:12:33,392 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 319 transitions. Word has length 23 [2023-11-23 21:12:33,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:33,393 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 319 transitions. [2023-11-23 21:12:33,393 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:12:33,393 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 319 transitions. [2023-11-23 21:12:33,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-23 21:12:33,395 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:33,396 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:33,396 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:12:33,396 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:33,397 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:33,397 INFO L85 PathProgramCache]: Analyzing trace with hash 244238874, now seen corresponding path program 1 times [2023-11-23 21:12:33,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:33,397 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360873083] [2023-11-23 21:12:33,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:33,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:33,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:33,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:12:33,586 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:33,587 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360873083] [2023-11-23 21:12:33,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360873083] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:33,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:33,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:12:33,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265114133] [2023-11-23 21:12:33,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:33,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:12:33,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:33,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:12:33,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:12:33,591 INFO L87 Difference]: Start difference. First operand 242 states and 319 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:12:33,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:33,721 INFO L93 Difference]: Finished difference Result 650 states and 874 transitions. [2023-11-23 21:12:33,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:12:33,722 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 26 [2023-11-23 21:12:33,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:33,729 INFO L225 Difference]: With dead ends: 650 [2023-11-23 21:12:33,729 INFO L226 Difference]: Without dead ends: 410 [2023-11-23 21:12:33,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:12:33,739 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 47 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:33,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 188 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:12:33,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2023-11-23 21:12:33,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 404. [2023-11-23 21:12:33,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 259 states have (on average 1.2702702702702702) internal successors, (329), 288 states have internal predecessors, (329), 80 states have call successors, (80), 64 states have call predecessors, (80), 64 states have return successors, (104), 70 states have call predecessors, (104), 80 states have call successors, (104) [2023-11-23 21:12:33,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 513 transitions. [2023-11-23 21:12:33,830 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 513 transitions. Word has length 26 [2023-11-23 21:12:33,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:33,830 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 513 transitions. [2023-11-23 21:12:33,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:12:33,831 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 513 transitions. [2023-11-23 21:12:33,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-23 21:12:33,838 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:33,839 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:33,839 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:12:33,839 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:33,840 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:33,841 INFO L85 PathProgramCache]: Analyzing trace with hash 680310422, now seen corresponding path program 1 times [2023-11-23 21:12:33,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:33,842 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [583078287] [2023-11-23 21:12:33,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:33,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:33,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:34,217 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:12:34,217 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:34,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [583078287] [2023-11-23 21:12:34,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [583078287] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:34,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:34,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-23 21:12:34,218 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1453189315] [2023-11-23 21:12:34,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:34,219 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-23 21:12:34,219 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:34,220 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-23 21:12:34,220 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:12:34,221 INFO L87 Difference]: Start difference. First operand 404 states and 513 transitions. Second operand has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2023-11-23 21:12:34,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:34,530 INFO L93 Difference]: Finished difference Result 1114 states and 1407 transitions. [2023-11-23 21:12:34,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:12:34,530 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 44 [2023-11-23 21:12:34,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:34,536 INFO L225 Difference]: With dead ends: 1114 [2023-11-23 21:12:34,536 INFO L226 Difference]: Without dead ends: 712 [2023-11-23 21:12:34,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2023-11-23 21:12:34,539 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 128 mSDsluCounter, 293 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 267 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:34,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 398 Invalid, 267 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:12:34,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2023-11-23 21:12:34,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 676. [2023-11-23 21:12:34,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 676 states, 447 states have (on average 1.250559284116331) internal successors, (559), 482 states have internal predecessors, (559), 114 states have call successors, (114), 102 states have call predecessors, (114), 114 states have return successors, (150), 114 states have call predecessors, (150), 114 states have call successors, (150) [2023-11-23 21:12:34,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 676 states to 676 states and 823 transitions. [2023-11-23 21:12:34,603 INFO L78 Accepts]: Start accepts. Automaton has 676 states and 823 transitions. Word has length 44 [2023-11-23 21:12:34,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:34,603 INFO L495 AbstractCegarLoop]: Abstraction has 676 states and 823 transitions. [2023-11-23 21:12:34,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2023-11-23 21:12:34,608 INFO L276 IsEmpty]: Start isEmpty. Operand 676 states and 823 transitions. [2023-11-23 21:12:34,611 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-23 21:12:34,611 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:34,611 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:34,611 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:12:34,612 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:34,612 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:34,612 INFO L85 PathProgramCache]: Analyzing trace with hash -481057917, now seen corresponding path program 1 times [2023-11-23 21:12:34,613 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:34,613 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [167106904] [2023-11-23 21:12:34,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:34,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:34,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:35,245 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:12:35,245 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:35,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [167106904] [2023-11-23 21:12:35,246 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [167106904] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:35,246 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:35,246 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2023-11-23 21:12:35,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349394132] [2023-11-23 21:12:35,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:35,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-23 21:12:35,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:35,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-23 21:12:35,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=172, Unknown=0, NotChecked=0, Total=210 [2023-11-23 21:12:35,248 INFO L87 Difference]: Start difference. First operand 676 states and 823 transitions. Second operand has 15 states, 12 states have (on average 2.5833333333333335) internal successors, (31), 12 states have internal predecessors, (31), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) [2023-11-23 21:12:36,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:36,920 INFO L93 Difference]: Finished difference Result 1379 states and 1772 transitions. [2023-11-23 21:12:36,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-23 21:12:36,921 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 2.5833333333333335) internal successors, (31), 12 states have internal predecessors, (31), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) Word has length 47 [2023-11-23 21:12:36,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:36,933 INFO L225 Difference]: With dead ends: 1379 [2023-11-23 21:12:36,933 INFO L226 Difference]: Without dead ends: 1105 [2023-11-23 21:12:36,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 648 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=559, Invalid=1891, Unknown=0, NotChecked=0, Total=2450 [2023-11-23 21:12:36,938 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 612 mSDsluCounter, 362 mSDsCounter, 0 mSdLazyCounter, 666 mSolverCounterSat, 418 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 619 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 1084 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 418 IncrementalHoareTripleChecker+Valid, 666 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:36,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [619 Valid, 424 Invalid, 1084 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [418 Valid, 666 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-23 21:12:36,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1105 states. [2023-11-23 21:12:37,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1105 to 912. [2023-11-23 21:12:37,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 912 states, 604 states have (on average 1.2483443708609272) internal successors, (754), 649 states have internal predecessors, (754), 151 states have call successors, (151), 122 states have call predecessors, (151), 156 states have return successors, (227), 165 states have call predecessors, (227), 151 states have call successors, (227) [2023-11-23 21:12:37,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 912 states to 912 states and 1132 transitions. [2023-11-23 21:12:37,081 INFO L78 Accepts]: Start accepts. Automaton has 912 states and 1132 transitions. Word has length 47 [2023-11-23 21:12:37,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:37,082 INFO L495 AbstractCegarLoop]: Abstraction has 912 states and 1132 transitions. [2023-11-23 21:12:37,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 2.5833333333333335) internal successors, (31), 12 states have internal predecessors, (31), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) [2023-11-23 21:12:37,082 INFO L276 IsEmpty]: Start isEmpty. Operand 912 states and 1132 transitions. [2023-11-23 21:12:37,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2023-11-23 21:12:37,089 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:37,089 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:37,089 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-23 21:12:37,090 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:37,090 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:37,091 INFO L85 PathProgramCache]: Analyzing trace with hash -1523225798, now seen corresponding path program 1 times [2023-11-23 21:12:37,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:37,092 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [603609375] [2023-11-23 21:12:37,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:37,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:37,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:37,179 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:12:37,179 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:37,179 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [603609375] [2023-11-23 21:12:37,179 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [603609375] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:37,180 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:37,180 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:12:37,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202875442] [2023-11-23 21:12:37,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:37,182 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:12:37,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:37,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:12:37,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:12:37,183 INFO L87 Difference]: Start difference. First operand 912 states and 1132 transitions. Second operand has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2023-11-23 21:12:37,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:37,366 INFO L93 Difference]: Finished difference Result 1028 states and 1278 transitions. [2023-11-23 21:12:37,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:12:37,367 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 68 [2023-11-23 21:12:37,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:37,370 INFO L225 Difference]: With dead ends: 1028 [2023-11-23 21:12:37,371 INFO L226 Difference]: Without dead ends: 426 [2023-11-23 21:12:37,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:12:37,374 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 106 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:37,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 146 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:12:37,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2023-11-23 21:12:37,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 390. [2023-11-23 21:12:37,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 254 states have (on average 1.1811023622047243) internal successors, (300), 271 states have internal predecessors, (300), 66 states have call successors, (66), 55 states have call predecessors, (66), 69 states have return successors, (98), 72 states have call predecessors, (98), 66 states have call successors, (98) [2023-11-23 21:12:37,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 464 transitions. [2023-11-23 21:12:37,432 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 464 transitions. Word has length 68 [2023-11-23 21:12:37,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:37,432 INFO L495 AbstractCegarLoop]: Abstraction has 390 states and 464 transitions. [2023-11-23 21:12:37,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2023-11-23 21:12:37,433 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 464 transitions. [2023-11-23 21:12:37,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-23 21:12:37,435 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:12:37,435 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:37,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-23 21:12:37,436 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:12:37,436 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:12:37,437 INFO L85 PathProgramCache]: Analyzing trace with hash 1681741403, now seen corresponding path program 1 times [2023-11-23 21:12:37,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:12:37,437 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505383039] [2023-11-23 21:12:37,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:12:37,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:12:37,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:12:37,677 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-23 21:12:37,677 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:12:37,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505383039] [2023-11-23 21:12:37,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505383039] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:12:37,678 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:12:37,678 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-23 21:12:37,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685894721] [2023-11-23 21:12:37,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:12:37,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-23 21:12:37,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:12:37,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-23 21:12:37,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2023-11-23 21:12:37,682 INFO L87 Difference]: Start difference. First operand 390 states and 464 transitions. Second operand has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-11-23 21:12:38,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:12:38,013 INFO L93 Difference]: Finished difference Result 829 states and 1009 transitions. [2023-11-23 21:12:38,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-23 21:12:38,014 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 90 [2023-11-23 21:12:38,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:12:38,015 INFO L225 Difference]: With dead ends: 829 [2023-11-23 21:12:38,015 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 21:12:38,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2023-11-23 21:12:38,018 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 65 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:12:38,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 365 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:12:38,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 21:12:38,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 21:12:38,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:12:38,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 21:12:38,020 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 90 [2023-11-23 21:12:38,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:12:38,020 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 21:12:38,020 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-11-23 21:12:38,021 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 21:12:38,021 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 21:12:38,023 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 21:12:38,024 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-23 21:12:38,026 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 21:12:40,862 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2023-11-23 21:12:40,863 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))))) (and (or .cse0 .cse1 (not (= 1 ~systemActive~0))) (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)))) [2023-11-23 21:12:40,863 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2023-11-23 21:12:40,863 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2023-11-23 21:12:40,863 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 123 147) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methaneLevelCritical~0 1))))) [2023-11-23 21:12:40,863 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 (not (= ~methaneLevelCritical~0 1))) .cse0))) [2023-11-23 21:12:40,864 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 (not (= ~methaneLevelCritical~0 1))) .cse0))) [2023-11-23 21:12:40,864 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2023-11-23 21:12:40,864 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2023-11-23 21:12:40,864 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) (= ~pumpRunning~0 0) (and .cse2 (not (= ~methaneLevelCritical~0 1))) .cse0))) [2023-11-23 21:12:40,864 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2023-11-23 21:12:40,864 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2023-11-23 21:12:40,864 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 914 925) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 0)))) (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (and .cse4 (not (= |old(~methaneLevelCritical~0)| 1))))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse3 .cse1 .cse2) (or .cse4 .cse0 .cse3 .cse1)))) [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 914 925) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L902 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: true [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point L769-1(line 769) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 763 792) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point L788(lines 763 792) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point L784(line 784) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 763 792) the Hoare annotation is: true [2023-11-23 21:12:40,865 INFO L899 garLoopResultBuilder]: For program point L777(lines 777 781) no Hoare annotation was computed. [2023-11-23 21:12:40,865 INFO L902 garLoopResultBuilder]: At program point L777-1(lines 777 781) the Hoare annotation is: true [2023-11-23 21:12:40,865 INFO L902 garLoopResultBuilder]: At program point L773-2(lines 773 787) the Hoare annotation is: true [2023-11-23 21:12:40,866 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 926 934) the Hoare annotation is: true [2023-11-23 21:12:40,866 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 926 934) no Hoare annotation was computed. [2023-11-23 21:12:40,866 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and .cse3 (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0))) (or .cse2 .cse0 (not (= 0 ~systemActive~0))) (or .cse1 .cse3) (or .cse2 .cse0 .cse1)))) [2023-11-23 21:12:40,866 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (= 0 ~systemActive~0))) (or .cse2 .cse0 .cse1))) [2023-11-23 21:12:40,866 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2023-11-23 21:12:40,866 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2)) (or (not .cse2) .cse0 (not (= 0 ~systemActive~0))) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1)))) [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L168-1(lines 149 173) no Hoare annotation was computed. [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L391(line 391) no Hoare annotation was computed. [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2023-11-23 21:12:40,867 INFO L895 garLoopResultBuilder]: At program point L867(line 867) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (< 1 |old(~waterLevel~0)|)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not .cse3) (not (= ~methaneLevelCritical~0 1)))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) (and .cse3 (<= 2 ~waterLevel~0))) (or .cse4 .cse5 .cse1 .cse2 .cse6) (or .cse5 .cse0 .cse1 .cse7) (or .cse4 .cse5 .cse1 .cse6 .cse7)))) [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L867-1(line 867) no Hoare annotation was computed. [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2023-11-23 21:12:40,867 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 88) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< 1 |old(~waterLevel~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse3 (= ~pumpRunning~0 0) .cse0 .cse5) (or .cse2 .cse3 .cse0 .cse4 .cse5))) [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 391) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 882) no Hoare annotation was computed. [2023-11-23 21:12:40,868 INFO L899 garLoopResultBuilder]: For program point L869-1(lines 861 885) no Hoare annotation was computed. [2023-11-23 21:12:40,869 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not .cse3) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (= |timeShift_processEnvironment_~tmp~2#1| 0))) (or .cse0 .cse1 .cse2)))) [2023-11-23 21:12:40,869 INFO L895 garLoopResultBuilder]: At program point L378(lines 329 379) the Hoare annotation is: false [2023-11-23 21:12:40,869 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 372) no Hoare annotation was computed. [2023-11-23 21:12:40,869 INFO L895 garLoopResultBuilder]: At program point L366-2(lines 360 373) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= 0 ~systemActive~0)) (and .cse0 (= 1 ~systemActive~0) .cse1))) [2023-11-23 21:12:40,869 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2023-11-23 21:12:40,869 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2023-11-23 21:12:40,869 INFO L895 garLoopResultBuilder]: At program point L375(lines 330 377) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (or .cse3 (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse1 (= 1 ~systemActive~0) .cse2 (or .cse0 .cse3))))) [2023-11-23 21:12:40,870 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (or .cse3 (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse1 (= 1 ~systemActive~0) .cse2 (or .cse0 .cse3))))) [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 854) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L847-2(lines 847 854) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L331(lines 330 377) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 21:12:40,870 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 373) no Hoare annotation was computed. [2023-11-23 21:12:40,871 INFO L895 garLoopResultBuilder]: At program point L352(line 352) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= 0 ~systemActive~0)) (and .cse0 (= 1 ~systemActive~0) .cse1))) [2023-11-23 21:12:40,871 INFO L899 garLoopResultBuilder]: For program point L381(lines 320 385) no Hoare annotation was computed. [2023-11-23 21:12:40,871 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 346) no Hoare annotation was computed. [2023-11-23 21:12:40,871 INFO L899 garLoopResultBuilder]: For program point L340-1(lines 340 346) no Hoare annotation was computed. [2023-11-23 21:12:40,871 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse0 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= 1 ~systemActive~0) .cse1))) [2023-11-23 21:12:40,871 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 (not (= ~methaneLevelCritical~0 1))) .cse0))) [2023-11-23 21:12:40,871 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2023-11-23 21:12:40,872 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 97 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methaneLevelCritical~0 1))))) [2023-11-23 21:12:40,876 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2023-11-23 21:12:40,876 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not .cse1)) (.cse4 (and .cse2 (not (= ~methaneLevelCritical~0 1)))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (= ~pumpRunning~0 0) .cse4 .cse0) (or .cse3 .cse4 .cse0 (< 1 ~waterLevel~0))))) [2023-11-23 21:12:40,877 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2023-11-23 21:12:40,877 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not .cse1)) (.cse4 (and .cse2 (not (= ~methaneLevelCritical~0 1)))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (= ~pumpRunning~0 0) .cse4 .cse0) (or .cse3 .cse4 .cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (< 1 ~waterLevel~0))))) [2023-11-23 21:12:40,877 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2023-11-23 21:12:40,877 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2023-11-23 21:12:40,877 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 902 913) no Hoare annotation was computed. [2023-11-23 21:12:40,878 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 902 913) the Hoare annotation is: true [2023-11-23 21:12:40,878 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2023-11-23 21:12:40,878 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 207 217) the Hoare annotation is: true [2023-11-23 21:12:40,878 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2023-11-23 21:12:40,878 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2023-11-23 21:12:40,881 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:12:40,883 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 21:12:40,900 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:12:40 BoogieIcfgContainer [2023-11-23 21:12:40,900 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 21:12:40,901 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 21:12:40,901 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 21:12:40,901 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 21:12:40,902 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:12:31" (3/4) ... [2023-11-23 21:12:40,904 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 21:12:40,907 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 21:12:40,907 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 21:12:40,907 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 21:12:40,907 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-23 21:12:40,908 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-23 21:12:40,927 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-11-23 21:12:40,928 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-23 21:12:40,928 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 21:12:40,929 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:12:40,930 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:12:40,965 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || (waterLevel <= 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((0 == systemActive)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || !((0 == systemActive)))) [2023-11-23 21:12:41,017 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || (waterLevel <= 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((0 == systemActive)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || !((0 == systemActive)))) [2023-11-23 21:12:41,074 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 21:12:41,075 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 21:12:41,075 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 21:12:41,076 INFO L158 Benchmark]: Toolchain (without parser) took 10785.93ms. Allocated memory was 130.0MB in the beginning and 268.4MB in the end (delta: 138.4MB). Free memory was 89.9MB in the beginning and 207.1MB in the end (delta: -117.2MB). Peak memory consumption was 22.9MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,076 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 130.0MB. Free memory is still 75.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:12:41,077 INFO L158 Benchmark]: CACSL2BoogieTranslator took 520.17ms. Allocated memory is still 130.0MB. Free memory was 89.5MB in the beginning and 69.8MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,078 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.94ms. Allocated memory is still 130.0MB. Free memory was 69.8MB in the beginning and 67.5MB in the end (delta: 2.3MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:12:41,078 INFO L158 Benchmark]: Boogie Preprocessor took 33.70ms. Allocated memory is still 130.0MB. Free memory was 67.5MB in the beginning and 65.8MB in the end (delta: 1.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,079 INFO L158 Benchmark]: RCFGBuilder took 779.03ms. Allocated memory was 130.0MB in the beginning and 184.5MB in the end (delta: 54.5MB). Free memory was 65.8MB in the beginning and 128.2MB in the end (delta: -62.4MB). Peak memory consumption was 11.7MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,080 INFO L158 Benchmark]: TraceAbstraction took 9212.51ms. Allocated memory was 184.5MB in the beginning and 268.4MB in the end (delta: 83.9MB). Free memory was 128.2MB in the beginning and 214.4MB in the end (delta: -86.3MB). Peak memory consumption was 137.1MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,080 INFO L158 Benchmark]: Witness Printer took 174.42ms. Allocated memory is still 268.4MB. Free memory was 214.4MB in the beginning and 207.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 21:12:41,083 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 130.0MB. Free memory is still 75.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 520.17ms. Allocated memory is still 130.0MB. Free memory was 89.5MB in the beginning and 69.8MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.94ms. Allocated memory is still 130.0MB. Free memory was 69.8MB in the beginning and 67.5MB in the end (delta: 2.3MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 33.70ms. Allocated memory is still 130.0MB. Free memory was 67.5MB in the beginning and 65.8MB in the end (delta: 1.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 779.03ms. Allocated memory was 130.0MB in the beginning and 184.5MB in the end (delta: 54.5MB). Free memory was 65.8MB in the beginning and 128.2MB in the end (delta: -62.4MB). Peak memory consumption was 11.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9212.51ms. Allocated memory was 184.5MB in the beginning and 268.4MB in the end (delta: 83.9MB). Free memory was 128.2MB in the beginning and 214.4MB in the end (delta: -86.3MB). Peak memory consumption was 137.1MB. Max. memory is 16.1GB. * Witness Printer took 174.42ms. Allocated memory is still 268.4MB. Free memory was 214.4MB in the beginning and 207.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 316]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [316] - GenericResultAtLocation [Line: 386]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [386] - GenericResultAtLocation [Line: 395]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [395] - GenericResultAtLocation [Line: 761]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [761] - GenericResultAtLocation [Line: 860]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [860] - GenericResultAtLocation [Line: 886]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [886] - GenericResultAtLocation [Line: 990]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [990] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 391]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 79 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.1s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1128 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1108 mSDsluCounter, 2195 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1499 mSDsCounter, 446 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1591 IncrementalHoareTripleChecker+Invalid, 2037 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 446 mSolverCounterUnsat, 696 mSDtfsCounter, 1591 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 112 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 677 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=912occurred in iteration=7, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 9 MinimizatonAttempts, 280 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 1125 PreInvPairs, 1213 NumberOfFragments, 1016 HoareAnnotationTreeSize, 1125 FomulaSimplifications, 4144 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 31 FomulaSimplificationsInter, 9431 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 351 NumberOfCodeBlocks, 351 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 342 ConstructedInterpolants, 0 QuantifiedInterpolants, 820 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 64/64 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && ((methaneLevelCritical == 0) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive)) || (((((methaneLevelCritical == 0) || (methaneLevelCritical == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && ((pumpRunning == 0) || (methaneLevelCritical == 0)))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((1 == systemActive))) || (waterLevel <= 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || !((0 == systemActive)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-23 21:12:41,120 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba4ab672-5db1-48d8-a605-1eb21857d3ba/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE