./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 19:46:21,254 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 19:46:21,318 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 19:46:21,323 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 19:46:21,323 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 19:46:21,347 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 19:46:21,348 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 19:46:21,349 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 19:46:21,349 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 19:46:21,350 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 19:46:21,350 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 19:46:21,351 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 19:46:21,351 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 19:46:21,352 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 19:46:21,352 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 19:46:21,353 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 19:46:21,353 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 19:46:21,354 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 19:46:21,354 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 19:46:21,355 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 19:46:21,355 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 19:46:21,356 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 19:46:21,357 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 19:46:21,357 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 19:46:21,358 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 19:46:21,358 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 19:46:21,359 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 19:46:21,359 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 19:46:21,360 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 19:46:21,360 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 19:46:21,360 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 19:46:21,361 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 19:46:21,361 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 19:46:21,362 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 19:46:21,362 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 19:46:21,362 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 19:46:21,362 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 19:46:21,362 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 19:46:21,363 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 19:46:21,363 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 19:46:21,363 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 19:46:21,363 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 19:46:21,364 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2023-12-02 19:46:21,591 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 19:46:21,610 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 19:46:21,612 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 19:46:21,613 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 19:46:21,614 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 19:46:21,615 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2023-12-02 19:46:24,410 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 19:46:24,687 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 19:46:24,688 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2023-12-02 19:46:24,705 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/data/f82dff338/1a270b450426495abb747018f090b628/FLAGe8b134563 [2023-12-02 19:46:24,722 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/data/f82dff338/1a270b450426495abb747018f090b628 [2023-12-02 19:46:24,725 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 19:46:24,726 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 19:46:24,728 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 19:46:24,728 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 19:46:24,733 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 19:46:24,734 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 07:46:24" (1/1) ... [2023-12-02 19:46:24,735 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7956b5ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:24, skipping insertion in model container [2023-12-02 19:46:24,735 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 07:46:24" (1/1) ... [2023-12-02 19:46:24,794 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 19:46:24,956 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2023-12-02 19:46:25,053 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 19:46:25,065 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 19:46:25,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2023-12-02 19:46:25,074 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [155] [2023-12-02 19:46:25,074 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [164] [2023-12-02 19:46:25,074 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [205] [2023-12-02 19:46:25,075 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [313] [2023-12-02 19:46:25,075 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [381] [2023-12-02 19:46:25,075 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [638] [2023-12-02 19:46:25,075 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [673] [2023-12-02 19:46:25,084 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2023-12-02 19:46:25,138 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 19:46:25,156 INFO L206 MainTranslator]: Completed translation [2023-12-02 19:46:25,156 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25 WrapperNode [2023-12-02 19:46:25,156 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 19:46:25,157 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 19:46:25,157 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 19:46:25,157 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 19:46:25,164 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,177 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,206 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 228 [2023-12-02 19:46:25,206 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 19:46:25,207 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 19:46:25,207 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 19:46:25,207 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 19:46:25,217 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,218 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,221 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,221 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,228 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,233 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,236 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,237 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,241 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 19:46:25,242 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 19:46:25,243 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 19:46:25,243 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 19:46:25,244 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (1/1) ... [2023-12-02 19:46:25,250 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 19:46:25,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:46:25,278 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 19:46:25,281 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 19:46:25,308 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 19:46:25,308 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 19:46:25,308 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 19:46:25,308 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-12-02 19:46:25,308 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-12-02 19:46:25,309 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 19:46:25,309 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 19:46:25,309 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 19:46:25,309 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 19:46:25,309 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 19:46:25,310 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 19:46:25,310 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 19:46:25,310 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 19:46:25,310 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 19:46:25,310 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 19:46:25,310 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 19:46:25,311 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 19:46:25,311 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 19:46:25,311 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 19:46:25,311 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 19:46:25,311 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 19:46:25,311 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 19:46:25,312 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 19:46:25,312 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 19:46:25,407 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 19:46:25,410 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 19:46:25,700 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 19:46:25,851 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 19:46:25,851 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 19:46:25,853 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 07:46:25 BoogieIcfgContainer [2023-12-02 19:46:25,853 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 19:46:25,856 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 19:46:25,856 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 19:46:25,860 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 19:46:25,860 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 07:46:24" (1/3) ... [2023-12-02 19:46:25,861 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5db93a3e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 07:46:25, skipping insertion in model container [2023-12-02 19:46:25,861 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 07:46:25" (2/3) ... [2023-12-02 19:46:25,862 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5db93a3e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 07:46:25, skipping insertion in model container [2023-12-02 19:46:25,862 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 07:46:25" (3/3) ... [2023-12-02 19:46:25,863 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2023-12-02 19:46:25,883 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 19:46:25,883 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 19:46:25,935 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 19:46:25,942 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6d2d421f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 19:46:25,943 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 19:46:25,948 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-12-02 19:46:25,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-12-02 19:46:25,959 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:25,959 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:25,960 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:25,965 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:25,966 INFO L85 PathProgramCache]: Analyzing trace with hash -640287836, now seen corresponding path program 1 times [2023-12-02 19:46:25,976 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:25,977 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [805186276] [2023-12-02 19:46:25,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:25,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:26,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:26,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 19:46:26,160 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:26,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [805186276] [2023-12-02 19:46:26,162 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [805186276] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:26,162 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:26,162 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 19:46:26,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937037192] [2023-12-02 19:46:26,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:26,170 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 19:46:26,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:26,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 19:46:26,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 19:46:26,207 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:26,279 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2023-12-02 19:46:26,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 19:46:26,281 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-12-02 19:46:26,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:26,291 INFO L225 Difference]: With dead ends: 158 [2023-12-02 19:46:26,292 INFO L226 Difference]: Without dead ends: 75 [2023-12-02 19:46:26,296 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 19:46:26,300 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:26,301 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 19:46:26,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-12-02 19:46:26,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-12-02 19:46:26,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-12-02 19:46:26,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2023-12-02 19:46:26,352 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 17 [2023-12-02 19:46:26,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:26,352 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2023-12-02 19:46:26,353 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,353 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2023-12-02 19:46:26,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-12-02 19:46:26,356 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:26,357 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:26,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 19:46:26,357 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:26,358 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:26,358 INFO L85 PathProgramCache]: Analyzing trace with hash -1549266905, now seen corresponding path program 1 times [2023-12-02 19:46:26,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:26,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [814518324] [2023-12-02 19:46:26,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:26,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:26,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:26,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 19:46:26,471 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:26,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [814518324] [2023-12-02 19:46:26,472 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [814518324] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:26,472 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:26,472 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 19:46:26,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981845163] [2023-12-02 19:46:26,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:26,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 19:46:26,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:26,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 19:46:26,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:26,476 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:26,527 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2023-12-02 19:46:26,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 19:46:26,528 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-12-02 19:46:26,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:26,530 INFO L225 Difference]: With dead ends: 122 [2023-12-02 19:46:26,530 INFO L226 Difference]: Without dead ends: 67 [2023-12-02 19:46:26,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:26,533 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:26,534 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 19:46:26,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-12-02 19:46:26,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-12-02 19:46:26,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-12-02 19:46:26,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2023-12-02 19:46:26,547 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 18 [2023-12-02 19:46:26,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:26,548 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2023-12-02 19:46:26,548 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,548 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2023-12-02 19:46:26,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 19:46:26,550 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:26,550 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:26,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 19:46:26,551 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:26,551 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:26,551 INFO L85 PathProgramCache]: Analyzing trace with hash 28236457, now seen corresponding path program 1 times [2023-12-02 19:46:26,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:26,552 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741758801] [2023-12-02 19:46:26,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:26,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:26,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:26,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 19:46:26,657 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:26,657 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741758801] [2023-12-02 19:46:26,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741758801] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:26,658 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:26,658 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 19:46:26,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2048829826] [2023-12-02 19:46:26,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:26,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 19:46:26,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:26,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 19:46:26,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 19:46:26,660 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:26,816 INFO L93 Difference]: Finished difference Result 180 states and 242 transitions. [2023-12-02 19:46:26,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 19:46:26,816 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-12-02 19:46:26,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:26,818 INFO L225 Difference]: With dead ends: 180 [2023-12-02 19:46:26,819 INFO L226 Difference]: Without dead ends: 115 [2023-12-02 19:46:26,820 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 19:46:26,821 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 101 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:26,822 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 176 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 19:46:26,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2023-12-02 19:46:26,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 98. [2023-12-02 19:46:26,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 75 states have internal predecessors, (85), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2023-12-02 19:46:26,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2023-12-02 19:46:26,842 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 21 [2023-12-02 19:46:26,842 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:26,842 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2023-12-02 19:46:26,842 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,843 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2023-12-02 19:46:26,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-12-02 19:46:26,844 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:26,844 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:26,845 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 19:46:26,845 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:26,845 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:26,845 INFO L85 PathProgramCache]: Analyzing trace with hash 1632560529, now seen corresponding path program 1 times [2023-12-02 19:46:26,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:26,846 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223100631] [2023-12-02 19:46:26,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:26,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:26,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:26,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 19:46:26,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:26,924 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223100631] [2023-12-02 19:46:26,924 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223100631] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:26,924 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:26,924 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 19:46:26,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782522100] [2023-12-02 19:46:26,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:26,925 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 19:46:26,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:26,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 19:46:26,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:26,926 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:26,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:26,991 INFO L93 Difference]: Finished difference Result 194 states and 260 transitions. [2023-12-02 19:46:26,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 19:46:26,992 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-12-02 19:46:26,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:26,995 INFO L225 Difference]: With dead ends: 194 [2023-12-02 19:46:26,995 INFO L226 Difference]: Without dead ends: 192 [2023-12-02 19:46:26,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:26,999 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 64 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:26,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 142 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 19:46:27,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2023-12-02 19:46:27,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 192. [2023-12-02 19:46:27,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 121 states have (on average 1.3636363636363635) internal successors, (165), 146 states have internal predecessors, (165), 42 states have call successors, (42), 28 states have call predecessors, (42), 28 states have return successors, (50), 30 states have call predecessors, (50), 42 states have call successors, (50) [2023-12-02 19:46:27,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 257 transitions. [2023-12-02 19:46:27,034 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 257 transitions. Word has length 24 [2023-12-02 19:46:27,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:27,035 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 257 transitions. [2023-12-02 19:46:27,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 19:46:27,035 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 257 transitions. [2023-12-02 19:46:27,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-12-02 19:46:27,038 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:27,038 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:27,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 19:46:27,038 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:27,039 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:27,039 INFO L85 PathProgramCache]: Analyzing trace with hash 247824131, now seen corresponding path program 1 times [2023-12-02 19:46:27,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:27,039 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1390329805] [2023-12-02 19:46:27,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:27,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:27,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:27,222 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 19:46:27,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:27,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1390329805] [2023-12-02 19:46:27,222 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1390329805] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 19:46:27,223 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2106847677] [2023-12-02 19:46:27,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:27,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:27,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:46:27,227 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 19:46:27,229 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 19:46:27,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:27,322 INFO L262 TraceCheckSpWp]: Trace formula consists of 214 conjuncts, 11 conjunts are in the unsatisfiable core [2023-12-02 19:46:27,328 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 19:46:27,452 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 19:46:27,452 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 19:46:27,452 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2106847677] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:27,452 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 19:46:27,453 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7] total 11 [2023-12-02 19:46:27,453 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265890570] [2023-12-02 19:46:27,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:27,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 19:46:27,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:27,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 19:46:27,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2023-12-02 19:46:27,455 INFO L87 Difference]: Start difference. First operand 192 states and 257 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 19:46:27,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:27,775 INFO L93 Difference]: Finished difference Result 501 states and 683 transitions. [2023-12-02 19:46:27,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 19:46:27,776 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 44 [2023-12-02 19:46:27,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:27,779 INFO L225 Difference]: With dead ends: 501 [2023-12-02 19:46:27,779 INFO L226 Difference]: Without dead ends: 311 [2023-12-02 19:46:27,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2023-12-02 19:46:27,782 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 103 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 213 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 213 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:27,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [110 Valid, 202 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 213 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 19:46:27,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2023-12-02 19:46:27,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 292. [2023-12-02 19:46:27,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 191 states have (on average 1.2460732984293195) internal successors, (238), 210 states have internal predecessors, (238), 51 states have call successors, (51), 41 states have call predecessors, (51), 49 states have return successors, (79), 53 states have call predecessors, (79), 51 states have call successors, (79) [2023-12-02 19:46:27,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 368 transitions. [2023-12-02 19:46:27,826 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 368 transitions. Word has length 44 [2023-12-02 19:46:27,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:27,834 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 368 transitions. [2023-12-02 19:46:27,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 19:46:27,837 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 368 transitions. [2023-12-02 19:46:27,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2023-12-02 19:46:27,840 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:27,841 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:27,848 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 19:46:28,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:28,045 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:28,046 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:28,046 INFO L85 PathProgramCache]: Analyzing trace with hash -1679571839, now seen corresponding path program 1 times [2023-12-02 19:46:28,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:28,046 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1220313026] [2023-12-02 19:46:28,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:28,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:28,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:28,451 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-12-02 19:46:28,451 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:28,451 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1220313026] [2023-12-02 19:46:28,451 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1220313026] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:28,451 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:28,452 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-12-02 19:46:28,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1799981308] [2023-12-02 19:46:28,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:28,452 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-12-02 19:46:28,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:28,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-12-02 19:46:28,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-12-02 19:46:28,454 INFO L87 Difference]: Start difference. First operand 292 states and 368 transitions. Second operand has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 8 states have internal predecessors, (50), 6 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 4 states have call predecessors, (9), 6 states have call successors, (9) [2023-12-02 19:46:29,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:29,141 INFO L93 Difference]: Finished difference Result 782 states and 1010 transitions. [2023-12-02 19:46:29,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-12-02 19:46:29,143 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 8 states have internal predecessors, (50), 6 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 4 states have call predecessors, (9), 6 states have call successors, (9) Word has length 76 [2023-12-02 19:46:29,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:29,147 INFO L225 Difference]: With dead ends: 782 [2023-12-02 19:46:29,147 INFO L226 Difference]: Without dead ends: 492 [2023-12-02 19:46:29,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=64, Invalid=176, Unknown=0, NotChecked=0, Total=240 [2023-12-02 19:46:29,150 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 209 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 443 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 443 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:29,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [219 Valid, 306 Invalid, 548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 443 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-12-02 19:46:29,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2023-12-02 19:46:29,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 484. [2023-12-02 19:46:29,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 484 states, 324 states have (on average 1.2592592592592593) internal successors, (408), 356 states have internal predecessors, (408), 85 states have call successors, (85), 64 states have call predecessors, (85), 74 states have return successors, (136), 84 states have call predecessors, (136), 85 states have call successors, (136) [2023-12-02 19:46:29,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 484 states to 484 states and 629 transitions. [2023-12-02 19:46:29,226 INFO L78 Accepts]: Start accepts. Automaton has 484 states and 629 transitions. Word has length 76 [2023-12-02 19:46:29,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:29,226 INFO L495 AbstractCegarLoop]: Abstraction has 484 states and 629 transitions. [2023-12-02 19:46:29,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 8 states have internal predecessors, (50), 6 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 4 states have call predecessors, (9), 6 states have call successors, (9) [2023-12-02 19:46:29,227 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 629 transitions. [2023-12-02 19:46:29,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2023-12-02 19:46:29,230 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:29,230 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:29,230 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 19:46:29,230 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:29,231 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:29,231 INFO L85 PathProgramCache]: Analyzing trace with hash 1051250584, now seen corresponding path program 1 times [2023-12-02 19:46:29,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:29,231 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [470320652] [2023-12-02 19:46:29,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:29,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:29,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:29,412 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-12-02 19:46:29,413 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:29,413 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [470320652] [2023-12-02 19:46:29,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [470320652] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 19:46:29,413 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [123285933] [2023-12-02 19:46:29,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:29,414 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:29,414 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:46:29,417 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 19:46:29,421 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 19:46:29,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:29,525 INFO L262 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 7 conjunts are in the unsatisfiable core [2023-12-02 19:46:29,530 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 19:46:29,583 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2023-12-02 19:46:29,583 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 19:46:29,584 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [123285933] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:29,584 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 19:46:29,584 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 9 [2023-12-02 19:46:29,584 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871347004] [2023-12-02 19:46:29,584 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:29,585 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 19:46:29,585 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:29,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 19:46:29,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2023-12-02 19:46:29,586 INFO L87 Difference]: Start difference. First operand 484 states and 629 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2023-12-02 19:46:29,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:29,704 INFO L93 Difference]: Finished difference Result 885 states and 1156 transitions. [2023-12-02 19:46:29,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 19:46:29,705 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2023-12-02 19:46:29,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:29,709 INFO L225 Difference]: With dead ends: 885 [2023-12-02 19:46:29,709 INFO L226 Difference]: Without dead ends: 467 [2023-12-02 19:46:29,711 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2023-12-02 19:46:29,712 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 57 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:29,712 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 191 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 19:46:29,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 467 states. [2023-12-02 19:46:29,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 467 to 438. [2023-12-02 19:46:29,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 438 states, 290 states have (on average 1.2482758620689656) internal successors, (362), 321 states have internal predecessors, (362), 78 states have call successors, (78), 60 states have call predecessors, (78), 69 states have return successors, (123), 75 states have call predecessors, (123), 78 states have call successors, (123) [2023-12-02 19:46:29,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 438 states to 438 states and 563 transitions. [2023-12-02 19:46:29,777 INFO L78 Accepts]: Start accepts. Automaton has 438 states and 563 transitions. Word has length 79 [2023-12-02 19:46:29,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:29,778 INFO L495 AbstractCegarLoop]: Abstraction has 438 states and 563 transitions. [2023-12-02 19:46:29,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2023-12-02 19:46:29,778 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 563 transitions. [2023-12-02 19:46:29,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2023-12-02 19:46:29,781 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:29,782 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:29,789 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 19:46:29,982 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:29,983 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:29,983 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:29,983 INFO L85 PathProgramCache]: Analyzing trace with hash -917107416, now seen corresponding path program 1 times [2023-12-02 19:46:29,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:29,983 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779829054] [2023-12-02 19:46:29,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:29,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:30,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:30,049 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2023-12-02 19:46:30,049 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:30,050 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779829054] [2023-12-02 19:46:30,050 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779829054] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:30,050 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:46:30,050 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 19:46:30,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760040933] [2023-12-02 19:46:30,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:30,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 19:46:30,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:30,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 19:46:30,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:30,052 INFO L87 Difference]: Start difference. First operand 438 states and 563 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-12-02 19:46:30,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:30,140 INFO L93 Difference]: Finished difference Result 875 states and 1125 transitions. [2023-12-02 19:46:30,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 19:46:30,141 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 89 [2023-12-02 19:46:30,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:30,144 INFO L225 Difference]: With dead ends: 875 [2023-12-02 19:46:30,144 INFO L226 Difference]: Without dead ends: 351 [2023-12-02 19:46:30,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 19:46:30,147 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 30 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:30,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 160 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 19:46:30,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2023-12-02 19:46:30,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 339. [2023-12-02 19:46:30,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 339 states, 221 states have (on average 1.2036199095022624) internal successors, (266), 242 states have internal predecessors, (266), 60 states have call successors, (60), 47 states have call predecessors, (60), 57 states have return successors, (90), 61 states have call predecessors, (90), 60 states have call successors, (90) [2023-12-02 19:46:30,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 339 states to 339 states and 416 transitions. [2023-12-02 19:46:30,194 INFO L78 Accepts]: Start accepts. Automaton has 339 states and 416 transitions. Word has length 89 [2023-12-02 19:46:30,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:30,194 INFO L495 AbstractCegarLoop]: Abstraction has 339 states and 416 transitions. [2023-12-02 19:46:30,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-12-02 19:46:30,195 INFO L276 IsEmpty]: Start isEmpty. Operand 339 states and 416 transitions. [2023-12-02 19:46:30,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2023-12-02 19:46:30,197 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:30,197 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:30,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 19:46:30,197 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:30,197 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:30,198 INFO L85 PathProgramCache]: Analyzing trace with hash 1882489440, now seen corresponding path program 1 times [2023-12-02 19:46:30,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:30,198 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [357511679] [2023-12-02 19:46:30,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:30,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:30,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:30,534 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 11 proven. 18 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-12-02 19:46:30,534 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:30,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [357511679] [2023-12-02 19:46:30,535 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [357511679] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 19:46:30,535 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1095176124] [2023-12-02 19:46:30,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:30,535 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:30,535 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:46:30,536 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 19:46:30,538 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 19:46:30,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:30,629 INFO L262 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 11 conjunts are in the unsatisfiable core [2023-12-02 19:46:30,633 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 19:46:30,673 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 19:46:30,673 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 19:46:30,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1095176124] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:46:30,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 19:46:30,674 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [10] total 11 [2023-12-02 19:46:30,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633250871] [2023-12-02 19:46:30,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:46:30,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 19:46:30,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:46:30,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 19:46:30,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2023-12-02 19:46:30,676 INFO L87 Difference]: Start difference. First operand 339 states and 416 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2023-12-02 19:46:30,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:46:30,811 INFO L93 Difference]: Finished difference Result 606 states and 751 transitions. [2023-12-02 19:46:30,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 19:46:30,812 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) Word has length 86 [2023-12-02 19:46:30,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:46:30,814 INFO L225 Difference]: With dead ends: 606 [2023-12-02 19:46:30,814 INFO L226 Difference]: Without dead ends: 308 [2023-12-02 19:46:30,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2023-12-02 19:46:30,816 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 51 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 19:46:30,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 212 Invalid, 95 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 19:46:30,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2023-12-02 19:46:30,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 303. [2023-12-02 19:46:30,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 200 states have (on average 1.19) internal successors, (238), 219 states have internal predecessors, (238), 53 states have call successors, (53), 41 states have call predecessors, (53), 49 states have return successors, (72), 54 states have call predecessors, (72), 53 states have call successors, (72) [2023-12-02 19:46:30,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 363 transitions. [2023-12-02 19:46:30,853 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 363 transitions. Word has length 86 [2023-12-02 19:46:30,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:46:30,853 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 363 transitions. [2023-12-02 19:46:30,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2023-12-02 19:46:30,854 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 363 transitions. [2023-12-02 19:46:30,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-12-02 19:46:30,856 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:46:30,856 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:46:30,862 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 19:46:31,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:31,057 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:46:31,057 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:46:31,057 INFO L85 PathProgramCache]: Analyzing trace with hash -79895298, now seen corresponding path program 1 times [2023-12-02 19:46:31,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:46:31,057 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949826429] [2023-12-02 19:46:31,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:31,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:46:31,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:31,220 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2023-12-02 19:46:31,220 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:46:31,220 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949826429] [2023-12-02 19:46:31,220 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [949826429] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 19:46:31,220 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1678498509] [2023-12-02 19:46:31,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:46:31,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:46:31,221 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:46:31,222 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 19:46:31,224 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 19:46:31,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:46:31,328 INFO L262 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 19:46:31,333 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 19:46:31,875 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 21 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 19:46:31,875 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 19:46:32,640 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 19:46:32,640 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1678498509] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 19:46:32,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [974153560] [2023-12-02 19:46:32,664 INFO L159 IcfgInterpreter]: Started Sifa with 55 locations of interest [2023-12-02 19:46:32,664 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 19:46:32,669 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 19:46:32,675 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 19:46:32,675 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 19:46:35,553 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 122 for LOIs [2023-12-02 19:46:35,600 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 146 for LOIs [2023-12-02 19:46:40,439 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 144 for LOIs [2023-12-02 19:46:41,739 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 144 for LOIs [2023-12-02 19:46:42,878 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 136 for LOIs [2023-12-02 19:46:43,141 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 1 for LOIs [2023-12-02 19:46:43,142 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 19:47:02,355 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [974153560] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:47:02,355 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-12-02 19:47:02,355 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [7, 12, 16] total 56 [2023-12-02 19:47:02,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223526613] [2023-12-02 19:47:02,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:47:02,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2023-12-02 19:47:02,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:47:02,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2023-12-02 19:47:02,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=467, Invalid=2613, Unknown=0, NotChecked=0, Total=3080 [2023-12-02 19:47:02,359 INFO L87 Difference]: Start difference. First operand 303 states and 363 transitions. Second operand has 27 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2023-12-02 19:47:15,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:47:15,756 INFO L93 Difference]: Finished difference Result 657 states and 798 transitions. [2023-12-02 19:47:15,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-12-02 19:47:15,757 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) Word has length 90 [2023-12-02 19:47:15,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:47:15,760 INFO L225 Difference]: With dead ends: 657 [2023-12-02 19:47:15,760 INFO L226 Difference]: Without dead ends: 395 [2023-12-02 19:47:15,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 298 GetRequests, 212 SyntacticMatches, 10 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2096 ImplicationChecksByTransitivity, 29.2s TimeCoverageRelationStatistics Valid=1001, Invalid=5005, Unknown=0, NotChecked=0, Total=6006 [2023-12-02 19:47:15,764 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 90 mSDsluCounter, 627 mSDsCounter, 0 mSdLazyCounter, 1846 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 679 SdHoareTripleChecker+Invalid, 1919 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 1846 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2023-12-02 19:47:15,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 679 Invalid, 1919 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 1846 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2023-12-02 19:47:15,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2023-12-02 19:47:15,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2023-12-02 19:47:15,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 251 states have (on average 1.1752988047808766) internal successors, (295), 271 states have internal predecessors, (295), 65 states have call successors, (65), 52 states have call predecessors, (65), 60 states have return successors, (84), 65 states have call predecessors, (84), 65 states have call successors, (84) [2023-12-02 19:47:15,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 444 transitions. [2023-12-02 19:47:15,828 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 444 transitions. Word has length 90 [2023-12-02 19:47:15,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:47:15,829 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 444 transitions. [2023-12-02 19:47:15,829 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2023-12-02 19:47:15,829 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 444 transitions. [2023-12-02 19:47:15,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2023-12-02 19:47:15,831 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:47:15,831 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:47:15,837 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 19:47:16,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:47:16,033 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:47:16,033 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:47:16,033 INFO L85 PathProgramCache]: Analyzing trace with hash -420092277, now seen corresponding path program 1 times [2023-12-02 19:47:16,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:47:16,034 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606152809] [2023-12-02 19:47:16,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:47:16,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:47:16,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:47:16,295 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 22 proven. 2 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-12-02 19:47:16,296 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:47:16,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606152809] [2023-12-02 19:47:16,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606152809] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 19:47:16,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [640798072] [2023-12-02 19:47:16,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:47:16,297 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:47:16,297 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 19:47:16,298 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 19:47:16,301 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 19:47:16,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:47:16,400 INFO L262 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 29 conjunts are in the unsatisfiable core [2023-12-02 19:47:16,404 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 19:47:16,495 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 19:47:16,495 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 19:47:16,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [640798072] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:47:16,496 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 19:47:16,496 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [12] total 15 [2023-12-02 19:47:16,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485077749] [2023-12-02 19:47:16,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:47:16,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2023-12-02 19:47:16,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:47:16,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2023-12-02 19:47:16,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2023-12-02 19:47:16,498 INFO L87 Difference]: Start difference. First operand 377 states and 444 transitions. Second operand has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2023-12-02 19:47:16,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:47:16,833 INFO L93 Difference]: Finished difference Result 995 states and 1194 transitions. [2023-12-02 19:47:16,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-12-02 19:47:16,834 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 93 [2023-12-02 19:47:16,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:47:16,838 INFO L225 Difference]: With dead ends: 995 [2023-12-02 19:47:16,838 INFO L226 Difference]: Without dead ends: 589 [2023-12-02 19:47:16,840 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2023-12-02 19:47:16,841 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 44 mSDsluCounter, 589 mSDsCounter, 0 mSdLazyCounter, 350 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 702 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 350 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 19:47:16,841 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 702 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 350 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 19:47:16,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 589 states. [2023-12-02 19:47:16,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 589 to 578. [2023-12-02 19:47:16,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 578 states, 387 states have (on average 1.1550387596899225) internal successors, (447), 411 states have internal predecessors, (447), 99 states have call successors, (99), 81 states have call predecessors, (99), 91 states have return successors, (134), 97 states have call predecessors, (134), 99 states have call successors, (134) [2023-12-02 19:47:16,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 578 states to 578 states and 680 transitions. [2023-12-02 19:47:16,897 INFO L78 Accepts]: Start accepts. Automaton has 578 states and 680 transitions. Word has length 93 [2023-12-02 19:47:16,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:47:16,897 INFO L495 AbstractCegarLoop]: Abstraction has 578 states and 680 transitions. [2023-12-02 19:47:16,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2023-12-02 19:47:16,898 INFO L276 IsEmpty]: Start isEmpty. Operand 578 states and 680 transitions. [2023-12-02 19:47:16,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-12-02 19:47:16,900 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 19:47:16,901 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:47:16,906 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-12-02 19:47:17,101 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 19:47:17,102 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 19:47:17,102 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 19:47:17,102 INFO L85 PathProgramCache]: Analyzing trace with hash 1551855330, now seen corresponding path program 1 times [2023-12-02 19:47:17,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 19:47:17,102 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827880466] [2023-12-02 19:47:17,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 19:47:17,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 19:47:17,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 19:47:17,295 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-12-02 19:47:17,295 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 19:47:17,295 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827880466] [2023-12-02 19:47:17,295 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827880466] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 19:47:17,295 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 19:47:17,295 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-12-02 19:47:17,296 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [957749979] [2023-12-02 19:47:17,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 19:47:17,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-12-02 19:47:17,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 19:47:17,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-12-02 19:47:17,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2023-12-02 19:47:17,297 INFO L87 Difference]: Start difference. First operand 578 states and 680 transitions. Second operand has 10 states, 8 states have (on average 6.125) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-12-02 19:47:17,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 19:47:17,597 INFO L93 Difference]: Finished difference Result 1102 states and 1320 transitions. [2023-12-02 19:47:17,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 19:47:17,598 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 6.125) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 96 [2023-12-02 19:47:17,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 19:47:17,599 INFO L225 Difference]: With dead ends: 1102 [2023-12-02 19:47:17,599 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 19:47:17,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2023-12-02 19:47:17,602 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 65 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 19:47:17,603 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 383 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 19:47:17,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 19:47:17,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 19:47:17,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 19:47:17,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 19:47:17,604 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2023-12-02 19:47:17,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 19:47:17,604 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 19:47:17,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 6.125) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2023-12-02 19:47:17,604 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 19:47:17,604 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 19:47:17,607 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 19:47:17,607 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-12-02 19:47:17,609 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 19:47:27,006 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2023-12-02 19:47:27,006 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 521 528) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2023-12-02 19:47:27,006 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2023-12-02 19:47:27,006 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2023-12-02 19:47:27,007 INFO L895 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2023-12-02 19:47:27,007 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 445 469) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2023-12-02 19:47:27,007 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2023-12-02 19:47:27,007 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2023-12-02 19:47:27,007 INFO L899 garLoopResultBuilder]: For program point L449(lines 449 466) no Hoare annotation was computed. [2023-12-02 19:47:27,007 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2023-12-02 19:47:27,007 INFO L899 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2023-12-02 19:47:27,007 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2023-12-02 19:47:27,007 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 237 248) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 0) .cse0 (not .cse1) (< ~waterLevel~0 2) .cse2) (or (not .cse0) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))))) [2023-12-02 19:47:27,007 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2023-12-02 19:47:27,008 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 249 257) the Hoare annotation is: true [2023-12-02 19:47:27,008 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2023-12-02 19:47:27,008 INFO L895 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse0)) (.cse2 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse4 .cse3) (or .cse4 (not .cse2))))) [2023-12-02 19:47:27,008 INFO L895 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not .cse1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or .cse3 .cse4) (or .cse4 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse2) (or .cse3 (not .cse2))))) [2023-12-02 19:47:27,008 INFO L899 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2023-12-02 19:47:27,008 INFO L899 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2023-12-02 19:47:27,008 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 201) no Hoare annotation was computed. [2023-12-02 19:47:27,008 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 176 204) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L895 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or (forall ((|v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| Int)) (let ((.cse3 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse3 0) 48)) (not (= 9 (select |#length| 11))) .cse0 (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= |v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= 1 ~systemActive~0)) (< (+ |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 2147483648) 0) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= ~methaneLevelCritical~0 0)) (not (= (select .cse3 1) 0)) (< 2147483647 |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10|) (not (= |v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| 1)) (= |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 0) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (< |#StackHeapBarrier| 1) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))) .cse4) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse4 .cse2) (or .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or (not .cse1) (not .cse2)))) [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 471 495) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L160(line 160) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2023-12-02 19:47:27,011 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2023-12-02 19:47:27,013 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse9))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse6 (or .cse0 (< ~waterLevel~0 (+ |old(~waterLevel~0)| 1)))) (.cse12 (< 1 |old(~waterLevel~0)|)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse5 .cse13)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse14 (< |old(~waterLevel~0)| 2)) (.cse15 (and .cse8 .cse6 (or .cse12 .cse0))) (.cse7 (and .cse8 .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse11 (= 0 ~systemActive~0))) (and (or .cse0 (forall ((|v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| Int)) (let ((.cse1 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse1 0) 48)) (not (= 9 (select |#length| 11))) .cse2 (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= |v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= 1 ~systemActive~0)) (< (+ |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 2147483648) 0) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not .cse3) (not (= (select .cse1 1) 0)) (< 2147483647 |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10|) (not (= |v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| 1)) (= |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 0) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (< |#StackHeapBarrier| 1) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))) .cse4) (or .cse0 .cse2 (and .cse5 .cse6 (<= 2 ~waterLevel~0)) .cse7) (or .cse8 .cse2 .cse9 (and .cse10 .cse5 .cse3) .cse11) (or .cse12 .cse0 .cse2 .cse13) (or .cse12 .cse0 .cse2 .cse4 .cse11) (or .cse10 .cse14 .cse9 .cse15 .cse11) (or .cse3 .cse14 .cse9 .cse15 .cse11) (or .cse0 .cse7 (not .cse11))))))) [2023-12-02 19:47:27,013 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2023-12-02 19:47:27,013 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 387 410) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (not .cse0)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 (and .cse1 .cse2) .cse3) (or (and .cse1 .cse4 .cse2) .cse5 .cse3) (or .cse6 (and (= ~pumpRunning~0 0) .cse2) (not .cse3)) (or .cse6 .cse5 .cse4)))) [2023-12-02 19:47:27,013 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2023-12-02 19:47:27,013 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2023-12-02 19:47:27,014 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2023-12-02 19:47:27,014 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 .cse2) (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or (not .cse3) (not .cse4)) (or (not (= |old(~methAndRunningLastTime~0)| 0)) (and .cse0 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)) .cse1 .cse2) .cse4))) [2023-12-02 19:47:27,014 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-12-02 19:47:27,014 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-12-02 19:47:27,014 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-12-02 19:47:27,014 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L77(lines 52 81) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2023-12-02 19:47:27,015 INFO L895 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and (not .cse0) (<= 2 ~waterLevel~0) (not .cse3) .cse2 .cse4) (and .cse1 .cse3 .cse2 .cse4))) [2023-12-02 19:47:27,016 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and (not .cse0) (<= 2 ~waterLevel~0) (not .cse3) .cse2 .cse4) (and .cse1 .cse3 .cse2 .cse4))) [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and (not .cse0) (<= 2 ~waterLevel~0) (not .cse3) .cse2 .cse4) (and .cse1 .cse3 .cse2 .cse4))) [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L376(lines 315 380) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2023-12-02 19:47:27,016 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 19:47:27,017 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-12-02 19:47:27,017 INFO L895 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2023-12-02 19:47:27,017 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2023-12-02 19:47:27,017 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2023-12-02 19:47:27,017 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2023-12-02 19:47:27,017 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not .cse3))) (or (and (= ~methAndRunningLastTime~0 0) .cse0 .cse1) (and .cse2 .cse0 .cse3) (and (not .cse2) (<= 2 ~waterLevel~0) .cse0 .cse1)))) [2023-12-02 19:47:27,017 INFO L895 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2023-12-02 19:47:27,017 INFO L899 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2023-12-02 19:47:27,017 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 419 443) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2023-12-02 19:47:27,018 INFO L895 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not .cse0)) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (= ~pumpRunning~0 0) .cse2 .cse4) (or .cse3 (< 1 ~waterLevel~0) .cse2 .cse4) (or (forall ((|v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| Int)) (let ((.cse5 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse5 0) 48)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= |v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= 1 ~systemActive~0)) (< (+ |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 2147483648) 0) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse1 (not (= (select .cse5 1) 0)) (< 2147483647 |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10|) (not (= |v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| 1)) (= |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 0) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (< |#StackHeapBarrier| 1) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse4 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))) (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))))) [2023-12-02 19:47:27,019 INFO L899 garLoopResultBuilder]: For program point L509-1(line 509) no Hoare annotation was computed. [2023-12-02 19:47:27,019 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2023-12-02 19:47:27,019 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse40 (= |old(~pumpRunning~0)| 0)) (.cse43 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= (select .cse43 0) 48))) (.cse2 (not (= 9 (select |#length| 11)))) (.cse3 (not (= 9 (select |#length| 5)))) (.cse4 (not (= 30 (select |#length| 7)))) (.cse5 (not (= 31 (select |#length| 2)))) (.cse6 (not (= (select |#valid| 12) 1))) (.cse7 (not (= 2 (select |#length| 1)))) (.cse8 (not (= 9 (select |#length| 14)))) (.cse9 (not (= 1 ~systemActive~0))) (.cse10 (not (= (select |#length| 15) 25))) (.cse11 (not (= (select |#valid| 6) 1))) (.cse12 (not (= (select |#valid| 3) 1))) (.cse13 (not (= ~head~0.offset 0))) (.cse14 (not (= (select |#valid| 11) 1))) (.cse15 (not (= (select |#length| 9) 21))) (.cse16 (not (= 30 (select |#length| 10)))) (.cse17 (not (= (select |#valid| 15) 1))) (.cse18 (not (= (select |#length| 6) 21))) (.cse19 (not (= 1 (select |#valid| 5)))) (.cse20 (not (= (select |#length| 8) 9))) (.cse21 (not (= (select |#length| 3) 12))) (.cse22 (not (= (select |#valid| 0) 0))) (.cse24 (not (= (select .cse43 1) 0))) (.cse25 (not (= (select |#valid| 1) 1))) (.cse26 (not (= (select |#valid| 8) 1))) (.cse27 (not (= 30 (select |#length| 13)))) (.cse28 (not (= (select |#valid| 4) 1))) (.cse29 (not (= (select |#valid| 7) 1))) (.cse30 (not (= (select |#valid| 10) 1))) (.cse31 (not (= (select |#valid| 14) 1))) (.cse32 (not (= (select |#valid| 13) 1))) (.cse33 (< |#StackHeapBarrier| 1)) (.cse34 (not (= 30 (select |#length| 4)))) (.cse35 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse23 (not (= ~methaneLevelCritical~0 0))) (.cse42 (not .cse40)) (.cse41 (= 0 ~systemActive~0)) (.cse36 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or (< ~waterLevel~0 2) (forall ((|v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| Int) (|v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| Int)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |v_ULTIMATE.start_main_~tmp~0#1_BEFORE_CALL_10| 1)) .cse7 .cse8 .cse9 (< (+ |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 2147483648) 0) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (< 2147483647 |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10|) (not (= |v_ULTIMATE.start_test_~splverifierCounter~0#1_BEFORE_CALL_10| 0)) .cse25 .cse26 .cse27 .cse28 (not (= |v_ULTIMATE.start_valid_product_#res#1_BEFORE_CALL_10| 1)) (= |v_ULTIMATE.start_test_~tmp~2#1_BEFORE_CALL_10| 0) .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39))) (or .cse40 .cse23 .cse41) (or .cse42 (< 1 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0) .cse41 .cse36) (or .cse42 (= ~pumpRunning~0 0) .cse41 .cse36)))) [2023-12-02 19:47:27,019 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2023-12-02 19:47:27,020 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 440) no Hoare annotation was computed. [2023-12-02 19:47:27,020 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2023-12-02 19:47:27,020 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 225 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or (not .cse0) .cse2 .cse4) (or (not .cse1) .cse2 .cse3 .cse4))) [2023-12-02 19:47:27,020 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2023-12-02 19:47:27,020 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 529 539) the Hoare annotation is: true [2023-12-02 19:47:27,020 INFO L902 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2023-12-02 19:47:27,020 INFO L899 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2023-12-02 19:47:27,022 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 19:47:27,024 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 19:47:27,036 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 07:47:27 BoogieIcfgContainer [2023-12-02 19:47:27,036 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 19:47:27,037 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 19:47:27,037 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 19:47:27,037 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 19:47:27,038 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 07:46:25" (3/4) ... [2023-12-02 19:47:27,039 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 19:47:27,042 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 19:47:27,043 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 19:47:27,043 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 19:47:27,043 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 19:47:27,043 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 19:47:27,052 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 48 nodes and edges [2023-12-02 19:47:27,053 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 19:47:27,054 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 19:47:27,055 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 19:47:27,055 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 19:47:27,080 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(methAndRunningLastTime) == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0))) [2023-12-02 19:47:27,121 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(methAndRunningLastTime) == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0))) [2023-12-02 19:47:27,174 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 19:47:27,174 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 19:47:27,174 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 19:47:27,175 INFO L158 Benchmark]: Toolchain (without parser) took 62448.55ms. Allocated memory was 125.8MB in the beginning and 497.0MB in the end (delta: 371.2MB). Free memory was 92.5MB in the beginning and 218.2MB in the end (delta: -125.7MB). Peak memory consumption was 248.5MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,175 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 102.8MB. Free memory is still 57.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 19:47:27,176 INFO L158 Benchmark]: CACSL2BoogieTranslator took 429.02ms. Allocated memory is still 125.8MB. Free memory was 92.5MB in the beginning and 72.6MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,176 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.08ms. Allocated memory is still 125.8MB. Free memory was 72.6MB in the beginning and 70.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,176 INFO L158 Benchmark]: Boogie Preprocessor took 34.74ms. Allocated memory is still 125.8MB. Free memory was 70.0MB in the beginning and 68.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,177 INFO L158 Benchmark]: RCFGBuilder took 610.89ms. Allocated memory was 125.8MB in the beginning and 167.8MB in the end (delta: 41.9MB). Free memory was 68.4MB in the beginning and 134.9MB in the end (delta: -66.5MB). Peak memory consumption was 29.9MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,177 INFO L158 Benchmark]: TraceAbstraction took 61180.23ms. Allocated memory was 167.8MB in the beginning and 497.0MB in the end (delta: 329.3MB). Free memory was 134.9MB in the beginning and 225.5MB in the end (delta: -90.6MB). Peak memory consumption was 300.4MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,178 INFO L158 Benchmark]: Witness Printer took 137.27ms. Allocated memory is still 497.0MB. Free memory was 225.5MB in the beginning and 218.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-12-02 19:47:27,180 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 102.8MB. Free memory is still 57.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 429.02ms. Allocated memory is still 125.8MB. Free memory was 92.5MB in the beginning and 72.6MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.08ms. Allocated memory is still 125.8MB. Free memory was 72.6MB in the beginning and 70.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.74ms. Allocated memory is still 125.8MB. Free memory was 70.0MB in the beginning and 68.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 610.89ms. Allocated memory was 125.8MB in the beginning and 167.8MB in the end (delta: 41.9MB). Free memory was 68.4MB in the beginning and 134.9MB in the end (delta: -66.5MB). Peak memory consumption was 29.9MB. Max. memory is 16.1GB. * TraceAbstraction took 61180.23ms. Allocated memory was 167.8MB in the beginning and 497.0MB in the end (delta: 329.3MB). Free memory was 134.9MB in the beginning and 225.5MB in the end (delta: -90.6MB). Peak memory consumption was 300.4MB. Max. memory is 16.1GB. * Witness Printer took 137.27ms. Allocated memory is still 497.0MB. Free memory was 225.5MB in the beginning and 218.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 155]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [155] - GenericResultAtLocation [Line: 164]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [164] - GenericResultAtLocation [Line: 205]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [205] - GenericResultAtLocation [Line: 313]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [313] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [381] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [638] - GenericResultAtLocation [Line: 673]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [673] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 61.1s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 15.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 858 SdHoareTripleChecker+Valid, 5.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 828 mSDsluCounter, 3369 SdHoareTripleChecker+Invalid, 4.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2441 mSDsCounter, 258 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3524 IncrementalHoareTripleChecker+Invalid, 3782 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 258 mSolverCounterUnsat, 928 mSDtfsCounter, 3524 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 704 GetRequests, 536 SyntacticMatches, 10 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2177 ImplicationChecksByTransitivity, 29.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=578occurred in iteration=11, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 119 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 1582 PreInvPairs, 1673 NumberOfFragments, 2288 HoareAnnotationTreeSize, 1582 FomulaSimplifications, 7967 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 31 FomulaSimplificationsInter, 35742 FormulaSimplificationTreeSizeReductionInter, 8.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 1125 NumberOfCodeBlocks, 1125 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1197 ConstructedInterpolants, 0 QuantifiedInterpolants, 2753 SizeOfPredicates, 22 NumberOfNonLiveVariables, 1502 ConjunctsInSsa, 84 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 485/534 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 10.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 7, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 63, DAG_INTERPRETER_EARLY_EXITS: 7, TOOLS_POST_APPLICATIONS: 69, TOOLS_POST_TIME: 4.4s, TOOLS_POST_CALL_APPLICATIONS: 43, TOOLS_POST_CALL_TIME: 3.2s, TOOLS_POST_RETURN_APPLICATIONS: 36, TOOLS_POST_RETURN_TIME: 1.8s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 146, TOOLS_QUANTIFIERELIM_TIME: 9.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.5s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 175, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 31, DOMAIN_JOIN_TIME: 0.9s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 63, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 0.8s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 0.8s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 36, CALL_SUMMARIZER_CACHE_MISSES: 7, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 915, DAG_COMPRESSION_RETAINED_NODES: 184, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) || ((((!((pumpRunning == 0)) && (2 <= waterLevel)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0)) && !((0 == systemActive)))) || ((((methAndRunningLastTime == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && !((0 == systemActive)))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(methAndRunningLastTime) == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0))) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-12-02 19:47:27,205 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd4c8d29-a88a-4aee-aafb-d5a181c89e73/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE