./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 18:50:58,835 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 18:50:58,904 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 18:50:58,910 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 18:50:58,911 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 18:50:58,947 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 18:50:58,948 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 18:50:58,949 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 18:50:58,949 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 18:50:58,950 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 18:50:58,962 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 18:50:58,963 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 18:50:58,963 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 18:50:58,964 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 18:50:58,965 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 18:50:58,965 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 18:50:58,966 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 18:50:58,966 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 18:50:58,967 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 18:50:58,968 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 18:50:58,968 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 18:50:58,969 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 18:50:58,970 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 18:50:58,970 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 18:50:58,971 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 18:50:58,971 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 18:50:58,972 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 18:50:58,972 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 18:50:58,973 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 18:50:58,973 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 18:50:58,974 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 18:50:58,974 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 18:50:58,974 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 18:50:58,975 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 18:50:58,975 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 18:50:58,975 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 18:50:58,975 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 18:50:58,975 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 18:50:58,976 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 18:50:58,976 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 18:50:58,976 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 18:50:58,977 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 18:50:58,977 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 18:50:58,977 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 18:50:58,977 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 18:50:58,978 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 18:50:58,978 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 18:50:58,978 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a [2023-12-02 18:50:59,181 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 18:50:59,212 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 18:50:59,217 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 18:50:59,219 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 18:50:59,220 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 18:50:59,221 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2023-12-02 18:51:01,960 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 18:51:02,178 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 18:51:02,179 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2023-12-02 18:51:02,191 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/data/146d394ef/3e76aafad8774af89f86f114aa99e465/FLAG1e87f3d6c [2023-12-02 18:51:02,201 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/data/146d394ef/3e76aafad8774af89f86f114aa99e465 [2023-12-02 18:51:02,203 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 18:51:02,204 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 18:51:02,206 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 18:51:02,206 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 18:51:02,211 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 18:51:02,212 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,213 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7e7fe4ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02, skipping insertion in model container [2023-12-02 18:51:02,214 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,260 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 18:51:02,503 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2023-12-02 18:51:02,508 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 18:51:02,519 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 18:51:02,530 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-12-02 18:51:02,532 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [309] [2023-12-02 18:51:02,532 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [379] [2023-12-02 18:51:02,532 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [417] [2023-12-02 18:51:02,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [783] [2023-12-02 18:51:02,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [879] [2023-12-02 18:51:02,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [983] [2023-12-02 18:51:02,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1010] [2023-12-02 18:51:02,593 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2023-12-02 18:51:02,593 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 18:51:02,617 INFO L206 MainTranslator]: Completed translation [2023-12-02 18:51:02,617 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02 WrapperNode [2023-12-02 18:51:02,617 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 18:51:02,618 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 18:51:02,619 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 18:51:02,619 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 18:51:02,627 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,643 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,674 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 218 [2023-12-02 18:51:02,674 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 18:51:02,675 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 18:51:02,675 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 18:51:02,676 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 18:51:02,686 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,686 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,690 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,690 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,697 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,702 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,704 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,706 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,710 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 18:51:02,711 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 18:51:02,711 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 18:51:02,711 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 18:51:02,712 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (1/1) ... [2023-12-02 18:51:02,719 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 18:51:02,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:51:02,746 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 18:51:02,751 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 18:51:02,788 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 18:51:02,788 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 18:51:02,788 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 18:51:02,788 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 18:51:02,788 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 18:51:02,789 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-12-02 18:51:02,789 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-12-02 18:51:02,789 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 18:51:02,789 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 18:51:02,789 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 18:51:02,790 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 18:51:02,790 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 18:51:02,790 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 18:51:02,790 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 18:51:02,790 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 18:51:02,790 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 18:51:02,791 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 18:51:02,791 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 18:51:02,791 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 18:51:02,791 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 18:51:02,791 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 18:51:02,792 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 18:51:02,792 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 18:51:02,792 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 18:51:02,885 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 18:51:02,888 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 18:51:03,158 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 18:51:03,260 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 18:51:03,260 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 18:51:03,262 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 06:51:03 BoogieIcfgContainer [2023-12-02 18:51:03,262 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 18:51:03,265 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 18:51:03,265 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 18:51:03,269 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 18:51:03,269 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 06:51:02" (1/3) ... [2023-12-02 18:51:03,270 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@670811df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 06:51:03, skipping insertion in model container [2023-12-02 18:51:03,270 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:51:02" (2/3) ... [2023-12-02 18:51:03,271 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@670811df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 06:51:03, skipping insertion in model container [2023-12-02 18:51:03,271 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 06:51:03" (3/3) ... [2023-12-02 18:51:03,272 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product62.cil.c [2023-12-02 18:51:03,291 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 18:51:03,292 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 18:51:03,341 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 18:51:03,348 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2c295d69, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 18:51:03,348 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 18:51:03,377 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 44 states have (on average 1.3863636363636365) internal successors, (61), 54 states have internal predecessors, (61), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-12-02 18:51:03,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-12-02 18:51:03,385 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:03,385 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:03,386 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:03,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:03,391 INFO L85 PathProgramCache]: Analyzing trace with hash 2004049415, now seen corresponding path program 1 times [2023-12-02 18:51:03,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:03,402 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [167796066] [2023-12-02 18:51:03,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:03,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:03,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:03,572 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:03,573 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:03,573 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [167796066] [2023-12-02 18:51:03,574 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [167796066] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:03,574 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:03,574 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 18:51:03,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264172742] [2023-12-02 18:51:03,577 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:03,582 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 18:51:03,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:03,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 18:51:03,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 18:51:03,614 INFO L87 Difference]: Start difference. First operand has 74 states, 44 states have (on average 1.3863636363636365) internal successors, (61), 54 states have internal predecessors, (61), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:03,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:03,679 INFO L93 Difference]: Finished difference Result 146 states and 195 transitions. [2023-12-02 18:51:03,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 18:51:03,681 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-12-02 18:51:03,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:03,688 INFO L225 Difference]: With dead ends: 146 [2023-12-02 18:51:03,689 INFO L226 Difference]: Without dead ends: 69 [2023-12-02 18:51:03,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 18:51:03,695 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:03,696 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:51:03,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-12-02 18:51:03,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-12-02 18:51:03,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 41 states have (on average 1.2926829268292683) internal successors, (53), 50 states have internal predecessors, (53), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-12-02 18:51:03,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2023-12-02 18:51:03,735 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 16 [2023-12-02 18:51:03,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:03,736 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2023-12-02 18:51:03,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:03,736 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2023-12-02 18:51:03,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-12-02 18:51:03,739 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:03,739 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:03,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 18:51:03,739 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:03,740 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:03,740 INFO L85 PathProgramCache]: Analyzing trace with hash -1999456432, now seen corresponding path program 1 times [2023-12-02 18:51:03,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:03,741 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1655028352] [2023-12-02 18:51:03,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:03,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:03,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:03,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:03,829 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:03,829 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1655028352] [2023-12-02 18:51:03,830 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1655028352] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:03,830 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:03,830 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:51:03,830 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [170573986] [2023-12-02 18:51:03,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:03,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 18:51:03,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:03,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 18:51:03,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:51:03,833 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:03,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:03,881 INFO L93 Difference]: Finished difference Result 115 states and 147 transitions. [2023-12-02 18:51:03,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 18:51:03,882 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-12-02 18:51:03,882 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:03,884 INFO L225 Difference]: With dead ends: 115 [2023-12-02 18:51:03,884 INFO L226 Difference]: Without dead ends: 61 [2023-12-02 18:51:03,885 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:51:03,887 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 7 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:03,888 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 115 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:51:03,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-12-02 18:51:03,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-12-02 18:51:03,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 36 states have (on average 1.3055555555555556) internal successors, (47), 45 states have internal predecessors, (47), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-12-02 18:51:03,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 77 transitions. [2023-12-02 18:51:03,900 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 77 transitions. Word has length 17 [2023-12-02 18:51:03,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:03,900 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 77 transitions. [2023-12-02 18:51:03,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:03,901 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 77 transitions. [2023-12-02 18:51:03,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-12-02 18:51:03,902 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:03,902 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:03,902 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 18:51:03,903 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:03,903 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:03,903 INFO L85 PathProgramCache]: Analyzing trace with hash -660525143, now seen corresponding path program 1 times [2023-12-02 18:51:03,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:03,904 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [233874658] [2023-12-02 18:51:03,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:03,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:03,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:04,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:04,063 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:04,063 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [233874658] [2023-12-02 18:51:04,064 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [233874658] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:04,064 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:04,064 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 18:51:04,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721951889] [2023-12-02 18:51:04,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:04,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 18:51:04,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:04,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 18:51:04,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:51:04,066 INFO L87 Difference]: Start difference. First operand 61 states and 77 transitions. Second operand has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:04,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:04,170 INFO L93 Difference]: Finished difference Result 120 states and 153 transitions. [2023-12-02 18:51:04,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 18:51:04,171 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2023-12-02 18:51:04,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:04,172 INFO L225 Difference]: With dead ends: 120 [2023-12-02 18:51:04,173 INFO L226 Difference]: Without dead ends: 61 [2023-12-02 18:51:04,173 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:51:04,175 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 67 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:04,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 81 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:51:04,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-12-02 18:51:04,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-12-02 18:51:04,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 36 states have (on average 1.2777777777777777) internal successors, (46), 45 states have internal predecessors, (46), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-12-02 18:51:04,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2023-12-02 18:51:04,188 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 19 [2023-12-02 18:51:04,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:04,188 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2023-12-02 18:51:04,188 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 18:51:04,188 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2023-12-02 18:51:04,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-12-02 18:51:04,190 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:04,190 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:04,190 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 18:51:04,191 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:04,191 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:04,191 INFO L85 PathProgramCache]: Analyzing trace with hash -2044324204, now seen corresponding path program 1 times [2023-12-02 18:51:04,191 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:04,192 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569088328] [2023-12-02 18:51:04,192 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:04,192 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:04,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:04,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:04,295 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:04,295 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569088328] [2023-12-02 18:51:04,295 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569088328] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:04,295 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:04,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-12-02 18:51:04,296 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937147820] [2023-12-02 18:51:04,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:04,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 18:51:04,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:04,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 18:51:04,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:51:04,298 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 18:51:04,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:04,559 INFO L93 Difference]: Finished difference Result 190 states and 234 transitions. [2023-12-02 18:51:04,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 18:51:04,560 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2023-12-02 18:51:04,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:04,562 INFO L225 Difference]: With dead ends: 190 [2023-12-02 18:51:04,562 INFO L226 Difference]: Without dead ends: 131 [2023-12-02 18:51:04,563 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-12-02 18:51:04,564 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 122 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:04,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 160 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:51:04,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2023-12-02 18:51:04,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 125. [2023-12-02 18:51:04,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 79 states have (on average 1.2025316455696202) internal successors, (95), 87 states have internal predecessors, (95), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-12-02 18:51:04,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 146 transitions. [2023-12-02 18:51:04,588 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 146 transitions. Word has length 30 [2023-12-02 18:51:04,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:04,589 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 146 transitions. [2023-12-02 18:51:04,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 18:51:04,589 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 146 transitions. [2023-12-02 18:51:04,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-12-02 18:51:04,590 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:04,591 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:04,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 18:51:04,591 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:04,591 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:04,592 INFO L85 PathProgramCache]: Analyzing trace with hash 321529314, now seen corresponding path program 1 times [2023-12-02 18:51:04,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:04,592 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091117494] [2023-12-02 18:51:04,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:04,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:04,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:04,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:04,708 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:04,708 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2091117494] [2023-12-02 18:51:04,708 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2091117494] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:04,709 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:04,709 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-12-02 18:51:04,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555420810] [2023-12-02 18:51:04,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:04,710 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 18:51:04,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:04,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 18:51:04,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:51:04,711 INFO L87 Difference]: Start difference. First operand 125 states and 146 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 18:51:04,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:04,948 INFO L93 Difference]: Finished difference Result 133 states and 152 transitions. [2023-12-02 18:51:04,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-12-02 18:51:04,949 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 35 [2023-12-02 18:51:04,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:04,951 INFO L225 Difference]: With dead ends: 133 [2023-12-02 18:51:04,951 INFO L226 Difference]: Without dead ends: 131 [2023-12-02 18:51:04,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-12-02 18:51:04,953 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 76 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:04,954 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 151 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:51:04,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2023-12-02 18:51:04,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 125. [2023-12-02 18:51:04,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 79 states have (on average 1.1772151898734178) internal successors, (93), 87 states have internal predecessors, (93), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-12-02 18:51:04,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 144 transitions. [2023-12-02 18:51:04,973 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 144 transitions. Word has length 35 [2023-12-02 18:51:04,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:04,974 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 144 transitions. [2023-12-02 18:51:04,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 18:51:04,975 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 144 transitions. [2023-12-02 18:51:04,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-12-02 18:51:04,976 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:04,976 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:04,976 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 18:51:04,977 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:04,977 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:04,977 INFO L85 PathProgramCache]: Analyzing trace with hash -1874191834, now seen corresponding path program 1 times [2023-12-02 18:51:04,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:04,977 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [341896642] [2023-12-02 18:51:04,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:04,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:04,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:05,218 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 18:51:05,219 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:05,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [341896642] [2023-12-02 18:51:05,219 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [341896642] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:05,219 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:05,219 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 18:51:05,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1825799052] [2023-12-02 18:51:05,220 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:05,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-12-02 18:51:05,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:05,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-12-02 18:51:05,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 18:51:05,222 INFO L87 Difference]: Start difference. First operand 125 states and 144 transitions. Second operand has 7 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 18:51:05,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:05,426 INFO L93 Difference]: Finished difference Result 305 states and 355 transitions. [2023-12-02 18:51:05,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 18:51:05,430 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 40 [2023-12-02 18:51:05,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:05,432 INFO L225 Difference]: With dead ends: 305 [2023-12-02 18:51:05,432 INFO L226 Difference]: Without dead ends: 182 [2023-12-02 18:51:05,433 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2023-12-02 18:51:05,434 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 71 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:05,435 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 345 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:51:05,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-12-02 18:51:05,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 164. [2023-12-02 18:51:05,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 105 states have (on average 1.161904761904762) internal successors, (122), 114 states have internal predecessors, (122), 28 states have call successors, (28), 25 states have call predecessors, (28), 30 states have return successors, (35), 30 states have call predecessors, (35), 28 states have call successors, (35) [2023-12-02 18:51:05,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 185 transitions. [2023-12-02 18:51:05,460 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 185 transitions. Word has length 40 [2023-12-02 18:51:05,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:05,461 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 185 transitions. [2023-12-02 18:51:05,461 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 18:51:05,461 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 185 transitions. [2023-12-02 18:51:05,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-12-02 18:51:05,463 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:05,463 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:05,463 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 18:51:05,464 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:05,464 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:05,464 INFO L85 PathProgramCache]: Analyzing trace with hash -2139697997, now seen corresponding path program 1 times [2023-12-02 18:51:05,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:05,465 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860310605] [2023-12-02 18:51:05,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:05,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:05,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:05,548 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 18:51:05,549 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:05,549 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860310605] [2023-12-02 18:51:05,549 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860310605] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:05,549 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:05,550 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 18:51:05,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078196980] [2023-12-02 18:51:05,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:05,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 18:51:05,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:05,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 18:51:05,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 18:51:05,552 INFO L87 Difference]: Start difference. First operand 164 states and 185 transitions. Second operand has 6 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-12-02 18:51:05,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:05,712 INFO L93 Difference]: Finished difference Result 486 states and 555 transitions. [2023-12-02 18:51:05,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 18:51:05,713 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 43 [2023-12-02 18:51:05,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:05,716 INFO L225 Difference]: With dead ends: 486 [2023-12-02 18:51:05,716 INFO L226 Difference]: Without dead ends: 324 [2023-12-02 18:51:05,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 18:51:05,718 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 53 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:05,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 261 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:51:05,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2023-12-02 18:51:05,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 310. [2023-12-02 18:51:05,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 199 states have (on average 1.135678391959799) internal successors, (226), 213 states have internal predecessors, (226), 53 states have call successors, (53), 47 states have call predecessors, (53), 57 states have return successors, (67), 57 states have call predecessors, (67), 53 states have call successors, (67) [2023-12-02 18:51:05,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 346 transitions. [2023-12-02 18:51:05,796 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 346 transitions. Word has length 43 [2023-12-02 18:51:05,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:05,796 INFO L495 AbstractCegarLoop]: Abstraction has 310 states and 346 transitions. [2023-12-02 18:51:05,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-12-02 18:51:05,797 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 346 transitions. [2023-12-02 18:51:05,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-12-02 18:51:05,799 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:05,800 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:05,800 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 18:51:05,800 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:05,801 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:05,801 INFO L85 PathProgramCache]: Analyzing trace with hash 1291406352, now seen corresponding path program 1 times [2023-12-02 18:51:05,801 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:05,801 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229931367] [2023-12-02 18:51:05,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:05,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:05,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:06,223 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 18:51:06,223 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:06,224 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229931367] [2023-12-02 18:51:06,224 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229931367] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:06,224 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:06,224 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2023-12-02 18:51:06,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1404900053] [2023-12-02 18:51:06,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:06,225 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-12-02 18:51:06,225 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:06,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-12-02 18:51:06,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=172, Unknown=0, NotChecked=0, Total=210 [2023-12-02 18:51:06,226 INFO L87 Difference]: Start difference. First operand 310 states and 346 transitions. Second operand has 15 states, 12 states have (on average 2.5) internal successors, (30), 12 states have internal predecessors, (30), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) [2023-12-02 18:51:07,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:07,429 INFO L93 Difference]: Finished difference Result 523 states and 604 transitions. [2023-12-02 18:51:07,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2023-12-02 18:51:07,430 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 2.5) internal successors, (30), 12 states have internal predecessors, (30), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) Word has length 46 [2023-12-02 18:51:07,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:07,433 INFO L225 Difference]: With dead ends: 523 [2023-12-02 18:51:07,433 INFO L226 Difference]: Without dead ends: 398 [2023-12-02 18:51:07,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=482, Invalid=1588, Unknown=0, NotChecked=0, Total=2070 [2023-12-02 18:51:07,436 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 416 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 526 mSolverCounterSat, 278 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 422 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 804 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 278 IncrementalHoareTripleChecker+Valid, 526 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:07,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [422 Valid, 296 Invalid, 804 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [278 Valid, 526 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-12-02 18:51:07,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2023-12-02 18:51:07,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 366. [2023-12-02 18:51:07,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 366 states, 234 states have (on average 1.141025641025641) internal successors, (267), 251 states have internal predecessors, (267), 64 states have call successors, (64), 55 states have call predecessors, (64), 67 states have return successors, (82), 68 states have call predecessors, (82), 64 states have call successors, (82) [2023-12-02 18:51:07,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 366 states to 366 states and 413 transitions. [2023-12-02 18:51:07,472 INFO L78 Accepts]: Start accepts. Automaton has 366 states and 413 transitions. Word has length 46 [2023-12-02 18:51:07,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:07,472 INFO L495 AbstractCegarLoop]: Abstraction has 366 states and 413 transitions. [2023-12-02 18:51:07,472 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 2.5) internal successors, (30), 12 states have internal predecessors, (30), 5 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 7 states have call predecessors, (7), 5 states have call successors, (7) [2023-12-02 18:51:07,472 INFO L276 IsEmpty]: Start isEmpty. Operand 366 states and 413 transitions. [2023-12-02 18:51:07,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2023-12-02 18:51:07,475 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:07,476 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:07,476 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 18:51:07,476 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 18:51:07,476 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:07,477 INFO L85 PathProgramCache]: Analyzing trace with hash -1524101083, now seen corresponding path program 1 times [2023-12-02 18:51:07,477 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:07,477 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627059722] [2023-12-02 18:51:07,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:07,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:07,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:07,672 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-12-02 18:51:07,672 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:07,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627059722] [2023-12-02 18:51:07,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627059722] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:51:07,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:51:07,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-12-02 18:51:07,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544780954] [2023-12-02 18:51:07,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:51:07,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-12-02 18:51:07,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:51:07,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-12-02 18:51:07,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2023-12-02 18:51:07,675 INFO L87 Difference]: Start difference. First operand 366 states and 413 transitions. Second operand has 10 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-12-02 18:51:07,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:07,991 INFO L93 Difference]: Finished difference Result 777 states and 899 transitions. [2023-12-02 18:51:07,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 18:51:07,992 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 88 [2023-12-02 18:51:07,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:07,993 INFO L225 Difference]: With dead ends: 777 [2023-12-02 18:51:07,993 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 18:51:07,995 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2023-12-02 18:51:07,996 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 62 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 337 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 337 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:07,996 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 329 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 337 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:51:07,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 18:51:07,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 18:51:07,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:51:07,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 18:51:07,998 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 88 [2023-12-02 18:51:07,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:07,998 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 18:51:07,998 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-12-02 18:51:07,998 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 18:51:07,998 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 18:51:08,001 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 18:51:08,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-12-02 18:51:08,004 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 18:51:10,029 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2023-12-02 18:51:10,029 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 206) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (= |old(~pumpRunning~0)| 0) (= 0 ~systemActive~0)) [2023-12-02 18:51:10,029 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2023-12-02 18:51:10,029 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2023-12-02 18:51:10,030 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 123 147) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= ~methaneLevelCritical~0 1)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-12-02 18:51:10,030 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= ~methaneLevelCritical~0 1))) .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) [2023-12-02 18:51:10,030 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= ~methaneLevelCritical~0 1))) .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) [2023-12-02 18:51:10,030 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2023-12-02 18:51:10,030 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2023-12-02 18:51:10,030 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not .cse0) (= ~pumpRunning~0 0) (and .cse1 (not (= ~methaneLevelCritical~0 1))) .cse2) (or .cse0 .cse1 .cse2))) [2023-12-02 18:51:10,031 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2023-12-02 18:51:10,031 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2023-12-02 18:51:10,031 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 907 918) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0)))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (and .cse0 (not (= |old(~methaneLevelCritical~0)| 1)))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3)))) [2023-12-02 18:51:10,031 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 907 918) no Hoare annotation was computed. [2023-12-02 18:51:10,031 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 785 814) no Hoare annotation was computed. [2023-12-02 18:51:10,031 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2023-12-02 18:51:10,031 INFO L902 garLoopResultBuilder]: At program point L799-1(lines 799 803) the Hoare annotation is: true [2023-12-02 18:51:10,031 INFO L902 garLoopResultBuilder]: At program point L795-2(lines 795 809) the Hoare annotation is: true [2023-12-02 18:51:10,031 INFO L902 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: true [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point L810(lines 785 814) no Hoare annotation was computed. [2023-12-02 18:51:10,032 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 785 814) the Hoare annotation is: true [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point L806(line 806) no Hoare annotation was computed. [2023-12-02 18:51:10,032 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 919 927) the Hoare annotation is: true [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 919 927) no Hoare annotation was computed. [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point L993(lines 993 1006) no Hoare annotation was computed. [2023-12-02 18:51:10,032 INFO L899 garLoopResultBuilder]: For program point L993-1(lines 985 1009) no Hoare annotation was computed. [2023-12-02 18:51:10,033 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse0 (and .cse2 (not (= ~methaneLevelCritical~0 1)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) .cse1) (or .cse0 (and (not (= |old(~pumpRunning~0)| 0)) .cse2) .cse1)))) [2023-12-02 18:51:10,033 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) [2023-12-02 18:51:10,033 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2023-12-02 18:51:10,033 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (<= ~waterLevel~0 1) .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0))))) [2023-12-02 18:51:10,034 INFO L899 garLoopResultBuilder]: For program point L168-1(lines 149 173) no Hoare annotation was computed. [2023-12-02 18:51:10,034 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2023-12-02 18:51:10,034 INFO L899 garLoopResultBuilder]: For program point L1015(line 1015) no Hoare annotation was computed. [2023-12-02 18:51:10,034 INFO L895 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 1)))) (let ((.cse0 (and (not .cse3) .cse2)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= ~waterLevel~0 1) .cse1) (or (= ~pumpRunning~0 0) .cse0 (and (<= 2 ~waterLevel~0) .cse2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse1)))) [2023-12-02 18:51:10,034 INFO L899 garLoopResultBuilder]: For program point L991-1(line 991) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 88) the Hoare annotation is: (let ((.cse0 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (< 1 |old(~waterLevel~0)|) (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= ~waterLevel~0 1) .cse1))) [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1015) no Hoare annotation was computed. [2023-12-02 18:51:10,035 INFO L899 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not .cse2)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and .cse0 (not (= ~methaneLevelCritical~0 1))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (= |timeShift_processEnvironment_~tmp~2#1| 0)) .cse1)))) [2023-12-02 18:51:10,036 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (and (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1)) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L374(lines 313 378) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 339) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 873) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L866-2(lines 866 873) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L895 garLoopResultBuilder]: At program point L371(lines 322 372) the Hoare annotation is: false [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 18:51:10,036 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 349) no Hoare annotation was computed. [2023-12-02 18:51:10,037 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2023-12-02 18:51:10,037 INFO L895 garLoopResultBuilder]: At program point L368(lines 323 370) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 1) .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-12-02 18:51:10,037 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 1) .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-12-02 18:51:10,037 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 18:51:10,037 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 353 366) the Hoare annotation is: (and (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1)) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2023-12-02 18:51:10,037 INFO L899 garLoopResultBuilder]: For program point L324(lines 323 370) no Hoare annotation was computed. [2023-12-02 18:51:10,037 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= ~methaneLevelCritical~0 1))) .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) [2023-12-02 18:51:10,037 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2023-12-02 18:51:10,038 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 97 121) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= ~methaneLevelCritical~0 1)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-12-02 18:51:10,038 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2023-12-02 18:51:10,038 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not .cse0) (and .cse1 (not (= ~methaneLevelCritical~0 1))) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse2))) [2023-12-02 18:51:10,038 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2023-12-02 18:51:10,038 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not .cse0) (and .cse1 (not (= ~methaneLevelCritical~0 1))) (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (< 1 ~waterLevel~0))) .cse2) (or .cse0 .cse1 .cse2))) [2023-12-02 18:51:10,038 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2023-12-02 18:51:10,039 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2023-12-02 18:51:10,039 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 895 906) no Hoare annotation was computed. [2023-12-02 18:51:10,039 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 895 906) the Hoare annotation is: true [2023-12-02 18:51:10,039 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2023-12-02 18:51:10,039 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 207 217) the Hoare annotation is: true [2023-12-02 18:51:10,039 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2023-12-02 18:51:10,040 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2023-12-02 18:51:10,042 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:51:10,044 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 18:51:10,056 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 06:51:10 BoogieIcfgContainer [2023-12-02 18:51:10,056 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 18:51:10,057 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 18:51:10,057 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 18:51:10,057 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 18:51:10,057 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 06:51:03" (3/4) ... [2023-12-02 18:51:10,059 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-12-02 18:51:10,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 18:51:10,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 18:51:10,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 18:51:10,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 18:51:10,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 18:51:10,073 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2023-12-02 18:51:10,074 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 18:51:10,074 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 18:51:10,075 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 18:51:10,076 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 18:51:10,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (0 == systemActive)) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || (0 == systemActive))) [2023-12-02 18:51:10,133 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (0 == systemActive)) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || (0 == systemActive))) [2023-12-02 18:51:10,175 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 18:51:10,175 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 18:51:10,176 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 18:51:10,176 INFO L158 Benchmark]: Toolchain (without parser) took 7971.71ms. Allocated memory was 172.0MB in the beginning and 207.6MB in the end (delta: 35.7MB). Free memory was 142.0MB in the beginning and 144.9MB in the end (delta: -2.9MB). Peak memory consumption was 34.5MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,177 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 121.6MB. Free memory is still 97.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 18:51:10,177 INFO L158 Benchmark]: CACSL2BoogieTranslator took 411.74ms. Allocated memory is still 172.0MB. Free memory was 141.6MB in the beginning and 121.7MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,178 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.94ms. Allocated memory is still 172.0MB. Free memory was 121.7MB in the beginning and 119.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,178 INFO L158 Benchmark]: Boogie Preprocessor took 34.65ms. Allocated memory is still 172.0MB. Free memory was 119.6MB in the beginning and 118.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,178 INFO L158 Benchmark]: RCFGBuilder took 551.81ms. Allocated memory is still 172.0MB. Free memory was 117.5MB in the beginning and 88.1MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,178 INFO L158 Benchmark]: TraceAbstraction took 6791.30ms. Allocated memory was 172.0MB in the beginning and 207.6MB in the end (delta: 35.7MB). Free memory was 87.6MB in the beginning and 153.3MB in the end (delta: -65.7MB). Peak memory consumption was 70.3MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,179 INFO L158 Benchmark]: Witness Printer took 118.83ms. Allocated memory is still 207.6MB. Free memory was 153.3MB in the beginning and 144.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-12-02 18:51:10,181 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 121.6MB. Free memory is still 97.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 411.74ms. Allocated memory is still 172.0MB. Free memory was 141.6MB in the beginning and 121.7MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.94ms. Allocated memory is still 172.0MB. Free memory was 121.7MB in the beginning and 119.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.65ms. Allocated memory is still 172.0MB. Free memory was 119.6MB in the beginning and 118.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 551.81ms. Allocated memory is still 172.0MB. Free memory was 117.5MB in the beginning and 88.1MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * TraceAbstraction took 6791.30ms. Allocated memory was 172.0MB in the beginning and 207.6MB in the end (delta: 35.7MB). Free memory was 87.6MB in the beginning and 153.3MB in the end (delta: -65.7MB). Peak memory consumption was 70.3MB. Max. memory is 16.1GB. * Witness Printer took 118.83ms. Allocated memory is still 207.6MB. Free memory was 153.3MB in the beginning and 144.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 309]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [309] - GenericResultAtLocation [Line: 379]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [379] - GenericResultAtLocation [Line: 417]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [417] - GenericResultAtLocation [Line: 783]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [783] - GenericResultAtLocation [Line: 879]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [879] - GenericResultAtLocation [Line: 983]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [983] - GenericResultAtLocation [Line: 1010]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1010] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1015]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.7s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 903 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 874 mSDsluCounter, 1814 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1259 mSDsCounter, 411 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1601 IncrementalHoareTripleChecker+Invalid, 2012 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 411 mSolverCounterUnsat, 555 mSDtfsCounter, 1601 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 125 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 546 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=366occurred in iteration=8, InterpolantAutomatonStates: 91, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 9 MinimizatonAttempts, 76 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 623 PreInvPairs, 685 NumberOfFragments, 660 HoareAnnotationTreeSize, 623 FomulaSimplifications, 3084 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 30 FomulaSimplificationsInter, 6854 FormulaSimplificationTreeSizeReductionInter, 1.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 334 NumberOfCodeBlocks, 334 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 325 ConstructedInterpolants, 0 QuantifiedInterpolants, 792 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 45/45 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (1 == systemActive)) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (tmp == 1)) || ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1))) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning)) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (0 == systemActive)) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (!((methaneLevelCritical == 0)) && !((methaneLevelCritical == 1)))) || (waterLevel <= 1)) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-12-02 18:51:10,200 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3e6d3b09-5401-4086-a475-59915ee76465/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE