./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 12:35:55,344 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 12:35:55,412 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 12:35:55,416 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 12:35:55,417 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 12:35:55,441 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 12:35:55,442 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 12:35:55,442 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 12:35:55,443 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 12:35:55,444 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 12:35:55,444 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 12:35:55,445 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 12:35:55,445 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 12:35:55,446 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 12:35:55,447 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 12:35:55,447 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 12:35:55,448 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 12:35:55,448 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 12:35:55,449 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 12:35:55,449 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 12:35:55,450 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 12:35:55,450 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 12:35:55,451 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 12:35:55,452 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 12:35:55,452 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 12:35:55,452 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 12:35:55,453 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 12:35:55,453 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 12:35:55,453 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 12:35:55,453 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 12:35:55,454 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 12:35:55,454 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 12:35:55,455 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 12:35:55,455 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 12:35:55,455 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 12:35:55,455 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 12:35:55,455 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 12:35:55,456 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 12:35:55,456 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 12:35:55,456 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 12:35:55,456 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 12:35:55,457 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 12:35:55,457 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 12:35:55,457 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 12:35:55,457 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 12:35:55,458 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 12:35:55,458 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 12:35:55,458 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 [2023-12-02 12:35:55,661 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 12:35:55,682 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 12:35:55,685 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 12:35:55,686 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 12:35:55,687 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 12:35:55,688 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2023-12-02 12:35:58,588 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 12:35:58,853 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 12:35:58,854 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2023-12-02 12:35:58,867 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/data/ae761417e/7ba8590f743a48168a4b2019f5e6c91f/FLAG48e6c2eae [2023-12-02 12:35:58,879 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/data/ae761417e/7ba8590f743a48168a4b2019f5e6c91f [2023-12-02 12:35:58,882 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 12:35:58,883 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 12:35:58,884 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 12:35:58,885 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 12:35:58,889 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 12:35:58,890 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:35:58" (1/1) ... [2023-12-02 12:35:58,891 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@43b5421a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:58, skipping insertion in model container [2023-12-02 12:35:58,891 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:35:58" (1/1) ... [2023-12-02 12:35:58,937 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 12:35:59,157 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2023-12-02 12:35:59,179 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 12:35:59,190 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 12:35:59,197 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-12-02 12:35:59,198 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [415] [2023-12-02 12:35:59,198 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-12-02 12:35:59,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] [2023-12-02 12:35:59,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [664] [2023-12-02 12:35:59,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [699] [2023-12-02 12:35:59,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [708] [2023-12-02 12:35:59,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [776] [2023-12-02 12:35:59,250 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2023-12-02 12:35:59,260 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 12:35:59,278 INFO L206 MainTranslator]: Completed translation [2023-12-02 12:35:59,279 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59 WrapperNode [2023-12-02 12:35:59,279 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 12:35:59,280 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 12:35:59,280 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 12:35:59,280 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 12:35:59,286 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,302 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,330 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 213 [2023-12-02 12:35:59,330 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 12:35:59,331 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 12:35:59,331 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 12:35:59,332 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 12:35:59,339 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,340 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,343 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,343 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,349 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,354 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,356 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,358 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,361 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 12:35:59,362 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 12:35:59,362 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 12:35:59,363 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 12:35:59,363 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (1/1) ... [2023-12-02 12:35:59,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 12:35:59,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:35:59,401 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 12:35:59,406 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 12:35:59,433 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 12:35:59,433 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 12:35:59,434 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 12:35:59,434 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 12:35:59,434 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 12:35:59,434 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 12:35:59,434 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 12:35:59,434 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-12-02 12:35:59,434 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-12-02 12:35:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 12:35:59,435 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 12:35:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 12:35:59,435 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 12:35:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 12:35:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 12:35:59,436 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 12:35:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 12:35:59,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 12:35:59,509 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 12:35:59,511 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 12:35:59,779 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 12:35:59,908 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 12:35:59,908 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 12:35:59,910 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:35:59 BoogieIcfgContainer [2023-12-02 12:35:59,910 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 12:35:59,913 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 12:35:59,913 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 12:35:59,916 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 12:35:59,916 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 12:35:58" (1/3) ... [2023-12-02 12:35:59,917 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@282591c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:35:59, skipping insertion in model container [2023-12-02 12:35:59,917 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:35:59" (2/3) ... [2023-12-02 12:35:59,918 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@282591c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:35:59, skipping insertion in model container [2023-12-02 12:35:59,919 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:35:59" (3/3) ... [2023-12-02 12:35:59,920 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product50.cil.c [2023-12-02 12:35:59,936 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 12:35:59,936 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 12:35:59,984 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 12:35:59,991 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@82bdf11, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 12:35:59,991 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 12:35:59,995 INFO L276 IsEmpty]: Start isEmpty. Operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-12-02 12:36:00,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-12-02 12:36:00,004 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:00,005 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:00,005 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:00,011 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:00,011 INFO L85 PathProgramCache]: Analyzing trace with hash 2141873407, now seen corresponding path program 1 times [2023-12-02 12:36:00,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:00,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1707901776] [2023-12-02 12:36:00,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:00,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:00,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:00,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:00,176 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:00,176 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1707901776] [2023-12-02 12:36:00,177 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1707901776] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:00,177 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:00,177 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 12:36:00,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1863129854] [2023-12-02 12:36:00,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:00,183 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 12:36:00,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:00,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 12:36:00,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 12:36:00,215 INFO L87 Difference]: Start difference. First operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:00,282 INFO L93 Difference]: Finished difference Result 110 states and 149 transitions. [2023-12-02 12:36:00,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 12:36:00,285 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-12-02 12:36:00,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:00,293 INFO L225 Difference]: With dead ends: 110 [2023-12-02 12:36:00,293 INFO L226 Difference]: Without dead ends: 51 [2023-12-02 12:36:00,296 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 12:36:00,300 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:00,301 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 53 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:36:00,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2023-12-02 12:36:00,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2023-12-02 12:36:00,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-12-02 12:36:00,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 65 transitions. [2023-12-02 12:36:00,339 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 65 transitions. Word has length 17 [2023-12-02 12:36:00,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:00,339 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 65 transitions. [2023-12-02 12:36:00,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,340 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 65 transitions. [2023-12-02 12:36:00,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-12-02 12:36:00,342 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:00,342 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:00,343 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 12:36:00,343 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:00,344 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:00,344 INFO L85 PathProgramCache]: Analyzing trace with hash 1580889706, now seen corresponding path program 1 times [2023-12-02 12:36:00,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:00,344 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1324030552] [2023-12-02 12:36:00,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:00,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:00,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:00,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:00,444 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:00,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1324030552] [2023-12-02 12:36:00,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1324030552] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:00,445 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:00,445 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 12:36:00,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800725384] [2023-12-02 12:36:00,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:00,447 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 12:36:00,447 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:00,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 12:36:00,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:36:00,448 INFO L87 Difference]: Start difference. First operand 51 states and 65 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:00,492 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2023-12-02 12:36:00,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 12:36:00,493 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-12-02 12:36:00,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:00,494 INFO L225 Difference]: With dead ends: 79 [2023-12-02 12:36:00,494 INFO L226 Difference]: Without dead ends: 43 [2023-12-02 12:36:00,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:36:00,497 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 7 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:00,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 69 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:36:00,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2023-12-02 12:36:00,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2023-12-02 12:36:00,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 35 states have internal predecessors, (38), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-12-02 12:36:00,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2023-12-02 12:36:00,507 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 18 [2023-12-02 12:36:00,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:00,507 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2023-12-02 12:36:00,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,508 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2023-12-02 12:36:00,509 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-12-02 12:36:00,509 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:00,509 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:00,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 12:36:00,510 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:00,510 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:00,510 INFO L85 PathProgramCache]: Analyzing trace with hash 195601986, now seen corresponding path program 1 times [2023-12-02 12:36:00,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:00,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1981844495] [2023-12-02 12:36:00,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:00,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:00,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:00,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:00,743 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:00,743 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1981844495] [2023-12-02 12:36:00,743 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1981844495] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:00,743 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:00,744 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 12:36:00,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819104107] [2023-12-02 12:36:00,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:00,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 12:36:00,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:00,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 12:36:00,746 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 12:36:00,746 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:00,824 INFO L93 Difference]: Finished difference Result 84 states and 107 transitions. [2023-12-02 12:36:00,825 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 12:36:00,825 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-12-02 12:36:00,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:00,826 INFO L225 Difference]: With dead ends: 84 [2023-12-02 12:36:00,826 INFO L226 Difference]: Without dead ends: 43 [2023-12-02 12:36:00,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 12:36:00,829 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 49 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:00,829 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 49 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:36:00,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2023-12-02 12:36:00,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2023-12-02 12:36:00,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 35 states have internal predecessors, (37), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-12-02 12:36:00,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 53 transitions. [2023-12-02 12:36:00,838 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 53 transitions. Word has length 20 [2023-12-02 12:36:00,839 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:00,839 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 53 transitions. [2023-12-02 12:36:00,839 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,839 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 53 transitions. [2023-12-02 12:36:00,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-12-02 12:36:00,840 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:00,840 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:00,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 12:36:00,841 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:00,841 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:00,841 INFO L85 PathProgramCache]: Analyzing trace with hash -445461651, now seen corresponding path program 1 times [2023-12-02 12:36:00,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:00,842 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437857430] [2023-12-02 12:36:00,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:00,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:00,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:00,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:00,914 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:00,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437857430] [2023-12-02 12:36:00,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437857430] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:00,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:00,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 12:36:00,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232225090] [2023-12-02 12:36:00,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:00,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 12:36:00,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:00,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 12:36:00,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:36:00,917 INFO L87 Difference]: Start difference. First operand 43 states and 53 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:00,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:00,979 INFO L93 Difference]: Finished difference Result 119 states and 150 transitions. [2023-12-02 12:36:00,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 12:36:00,979 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-12-02 12:36:00,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:00,981 INFO L225 Difference]: With dead ends: 119 [2023-12-02 12:36:00,981 INFO L226 Difference]: Without dead ends: 78 [2023-12-02 12:36:00,982 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:36:00,984 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 35 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:00,984 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 83 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:36:00,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-12-02 12:36:01,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2023-12-02 12:36:01,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2745098039215685) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2023-12-02 12:36:01,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 93 transitions. [2023-12-02 12:36:01,004 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 93 transitions. Word has length 23 [2023-12-02 12:36:01,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:01,004 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 93 transitions. [2023-12-02 12:36:01,004 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:36:01,005 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 93 transitions. [2023-12-02 12:36:01,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-12-02 12:36:01,006 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:01,006 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:01,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 12:36:01,006 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:01,007 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:01,007 INFO L85 PathProgramCache]: Analyzing trace with hash -1166185331, now seen corresponding path program 1 times [2023-12-02 12:36:01,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:01,007 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432083438] [2023-12-02 12:36:01,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:01,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:01,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:01,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:01,236 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:01,236 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432083438] [2023-12-02 12:36:01,236 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432083438] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:01,237 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:01,237 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 12:36:01,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417475195] [2023-12-02 12:36:01,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:01,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-12-02 12:36:01,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:01,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-12-02 12:36:01,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 12:36:01,239 INFO L87 Difference]: Start difference. First operand 76 states and 93 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 12:36:01,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:01,429 INFO L93 Difference]: Finished difference Result 224 states and 276 transitions. [2023-12-02 12:36:01,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 12:36:01,430 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2023-12-02 12:36:01,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:01,432 INFO L225 Difference]: With dead ends: 224 [2023-12-02 12:36:01,432 INFO L226 Difference]: Without dead ends: 150 [2023-12-02 12:36:01,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2023-12-02 12:36:01,435 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 73 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:01,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 174 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:36:01,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2023-12-02 12:36:01,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 122. [2023-12-02 12:36:01,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 83 states have (on average 1.2650602409638554) internal successors, (105), 91 states have internal predecessors, (105), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (24), 19 states have call predecessors, (24), 18 states have call successors, (24) [2023-12-02 12:36:01,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 147 transitions. [2023-12-02 12:36:01,470 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 147 transitions. Word has length 28 [2023-12-02 12:36:01,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:01,470 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 147 transitions. [2023-12-02 12:36:01,471 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 12:36:01,471 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 147 transitions. [2023-12-02 12:36:01,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-12-02 12:36:01,472 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:01,472 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:01,473 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 12:36:01,473 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:01,473 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:01,474 INFO L85 PathProgramCache]: Analyzing trace with hash 740262994, now seen corresponding path program 1 times [2023-12-02 12:36:01,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:01,474 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432781983] [2023-12-02 12:36:01,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:01,474 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:01,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:01,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:01,532 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:01,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432781983] [2023-12-02 12:36:01,532 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432781983] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:01,532 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:01,532 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 12:36:01,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [367718385] [2023-12-02 12:36:01,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:01,533 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 12:36:01,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:01,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 12:36:01,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 12:36:01,534 INFO L87 Difference]: Start difference. First operand 122 states and 147 transitions. Second operand has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 12:36:01,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:01,620 INFO L93 Difference]: Finished difference Result 211 states and 257 transitions. [2023-12-02 12:36:01,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 12:36:01,621 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2023-12-02 12:36:01,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:01,622 INFO L225 Difference]: With dead ends: 211 [2023-12-02 12:36:01,622 INFO L226 Difference]: Without dead ends: 124 [2023-12-02 12:36:01,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 12:36:01,625 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 35 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:01,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 132 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:36:01,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-12-02 12:36:01,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 122. [2023-12-02 12:36:01,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 83 states have (on average 1.216867469879518) internal successors, (101), 91 states have internal predecessors, (101), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (21), 19 states have call predecessors, (21), 18 states have call successors, (21) [2023-12-02 12:36:01,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 140 transitions. [2023-12-02 12:36:01,647 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 140 transitions. Word has length 31 [2023-12-02 12:36:01,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:01,647 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 140 transitions. [2023-12-02 12:36:01,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 12:36:01,648 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 140 transitions. [2023-12-02 12:36:01,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-12-02 12:36:01,650 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:01,650 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:01,650 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 12:36:01,650 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:01,651 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:01,651 INFO L85 PathProgramCache]: Analyzing trace with hash -2074763814, now seen corresponding path program 1 times [2023-12-02 12:36:01,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:01,651 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [188605739] [2023-12-02 12:36:01,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:01,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:01,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:01,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:01,768 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:01,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [188605739] [2023-12-02 12:36:01,769 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [188605739] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:01,769 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:01,769 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-12-02 12:36:01,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632661935] [2023-12-02 12:36:01,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:01,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 12:36:01,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:01,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 12:36:01,770 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-12-02 12:36:01,771 INFO L87 Difference]: Start difference. First operand 122 states and 140 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 12:36:01,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:01,870 INFO L93 Difference]: Finished difference Result 244 states and 281 transitions. [2023-12-02 12:36:01,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 12:36:01,872 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2023-12-02 12:36:01,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:01,874 INFO L225 Difference]: With dead ends: 244 [2023-12-02 12:36:01,874 INFO L226 Difference]: Without dead ends: 124 [2023-12-02 12:36:01,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2023-12-02 12:36:01,875 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 42 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:01,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 127 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:36:01,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-12-02 12:36:01,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 121. [2023-12-02 12:36:01,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 82 states have (on average 1.1951219512195121) internal successors, (98), 90 states have internal predecessors, (98), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (21), 19 states have call predecessors, (21), 18 states have call successors, (21) [2023-12-02 12:36:01,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 137 transitions. [2023-12-02 12:36:01,895 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 137 transitions. Word has length 31 [2023-12-02 12:36:01,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:01,895 INFO L495 AbstractCegarLoop]: Abstraction has 121 states and 137 transitions. [2023-12-02 12:36:01,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 12:36:01,896 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 137 transitions. [2023-12-02 12:36:01,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-12-02 12:36:01,897 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:01,898 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:01,898 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 12:36:01,898 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:01,898 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:01,898 INFO L85 PathProgramCache]: Analyzing trace with hash 574731253, now seen corresponding path program 1 times [2023-12-02 12:36:01,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:01,899 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2076228241] [2023-12-02 12:36:01,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:01,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:01,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:02,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:36:02,259 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:02,259 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2076228241] [2023-12-02 12:36:02,259 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2076228241] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:02,260 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:36:02,260 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-12-02 12:36:02,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282117084] [2023-12-02 12:36:02,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:02,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-12-02 12:36:02,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:02,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-12-02 12:36:02,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2023-12-02 12:36:02,261 INFO L87 Difference]: Start difference. First operand 121 states and 137 transitions. Second operand has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:36:02,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:02,734 INFO L93 Difference]: Finished difference Result 356 states and 417 transitions. [2023-12-02 12:36:02,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-12-02 12:36:02,734 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2023-12-02 12:36:02,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:02,737 INFO L225 Difference]: With dead ends: 356 [2023-12-02 12:36:02,737 INFO L226 Difference]: Without dead ends: 269 [2023-12-02 12:36:02,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=73, Invalid=167, Unknown=0, NotChecked=0, Total=240 [2023-12-02 12:36:02,739 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 154 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 387 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 429 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 387 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:02,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 245 Invalid, 429 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 387 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 12:36:02,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2023-12-02 12:36:02,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 225. [2023-12-02 12:36:02,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 225 states, 155 states have (on average 1.206451612903226) internal successors, (187), 168 states have internal predecessors, (187), 33 states have call successors, (33), 33 states have call predecessors, (33), 36 states have return successors, (39), 33 states have call predecessors, (39), 33 states have call successors, (39) [2023-12-02 12:36:02,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 259 transitions. [2023-12-02 12:36:02,776 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 259 transitions. Word has length 34 [2023-12-02 12:36:02,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:02,776 INFO L495 AbstractCegarLoop]: Abstraction has 225 states and 259 transitions. [2023-12-02 12:36:02,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:36:02,777 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 259 transitions. [2023-12-02 12:36:02,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-12-02 12:36:02,779 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:02,779 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:02,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 12:36:02,779 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:02,780 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:02,780 INFO L85 PathProgramCache]: Analyzing trace with hash 236192386, now seen corresponding path program 1 times [2023-12-02 12:36:02,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:02,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728738026] [2023-12-02 12:36:02,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:02,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:02,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:02,932 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 12:36:02,932 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:02,932 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728738026] [2023-12-02 12:36:02,932 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728738026] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 12:36:02,932 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [659944827] [2023-12-02 12:36:02,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:02,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:36:02,933 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:36:02,936 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 12:36:02,943 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 12:36:03,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:03,041 INFO L262 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 23 conjunts are in the unsatisfiable core [2023-12-02 12:36:03,048 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 12:36:03,388 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 2 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 12:36:03,388 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 12:36:03,802 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-12-02 12:36:03,802 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [659944827] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 12:36:03,802 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [409269531] [2023-12-02 12:36:03,823 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2023-12-02 12:36:03,823 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 12:36:03,827 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 12:36:03,832 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 12:36:03,833 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 12:36:07,181 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 120 for LOIs [2023-12-02 12:36:07,207 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 40 for LOIs [2023-12-02 12:36:07,436 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 39 for LOIs [2023-12-02 12:36:07,485 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 40 for LOIs [2023-12-02 12:36:07,494 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 12:36:10,619 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [409269531] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:10,619 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-12-02 12:36:10,619 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [8, 9, 8] total 41 [2023-12-02 12:36:10,620 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1333894986] [2023-12-02 12:36:10,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:10,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-12-02 12:36:10,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:10,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-12-02 12:36:10,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=214, Invalid=1426, Unknown=0, NotChecked=0, Total=1640 [2023-12-02 12:36:10,622 INFO L87 Difference]: Start difference. First operand 225 states and 259 transitions. Second operand has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:36:14,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:14,002 INFO L93 Difference]: Finished difference Result 468 states and 545 transitions. [2023-12-02 12:36:14,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2023-12-02 12:36:14,003 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 51 [2023-12-02 12:36:14,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:14,006 INFO L225 Difference]: With dead ends: 468 [2023-12-02 12:36:14,006 INFO L226 Difference]: Without dead ends: 305 [2023-12-02 12:36:14,009 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 169 GetRequests, 117 SyntacticMatches, 4 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 556 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=337, Invalid=2113, Unknown=0, NotChecked=0, Total=2450 [2023-12-02 12:36:14,010 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 84 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 835 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 882 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 835 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:14,010 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 283 Invalid, 882 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 835 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-12-02 12:36:14,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2023-12-02 12:36:14,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 281. [2023-12-02 12:36:14,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 195 states have (on average 1.1897435897435897) internal successors, (232), 209 states have internal predecessors, (232), 41 states have call successors, (41), 41 states have call predecessors, (41), 44 states have return successors, (47), 40 states have call predecessors, (47), 41 states have call successors, (47) [2023-12-02 12:36:14,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 320 transitions. [2023-12-02 12:36:14,061 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 320 transitions. Word has length 51 [2023-12-02 12:36:14,061 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:14,061 INFO L495 AbstractCegarLoop]: Abstraction has 281 states and 320 transitions. [2023-12-02 12:36:14,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:36:14,062 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 320 transitions. [2023-12-02 12:36:14,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-12-02 12:36:14,063 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:14,063 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:14,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 12:36:14,264 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:36:14,265 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:14,265 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:14,265 INFO L85 PathProgramCache]: Analyzing trace with hash -1578804458, now seen corresponding path program 1 times [2023-12-02 12:36:14,266 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:14,266 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2090263175] [2023-12-02 12:36:14,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:14,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:14,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:14,658 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 12:36:14,658 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:14,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2090263175] [2023-12-02 12:36:14,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2090263175] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 12:36:14,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1454745404] [2023-12-02 12:36:14,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:14,659 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:36:14,659 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:36:14,660 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 12:36:14,665 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 12:36:14,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:14,753 INFO L262 TraceCheckSpWp]: Trace formula consists of 242 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 12:36:14,757 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 12:36:15,125 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 6 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-12-02 12:36:15,125 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 12:36:15,492 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 12:36:15,492 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1454745404] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 12:36:15,492 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [97649045] [2023-12-02 12:36:15,495 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2023-12-02 12:36:15,495 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 12:36:15,496 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 12:36:15,496 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 12:36:15,496 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 12:36:17,910 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 143 for LOIs [2023-12-02 12:36:17,974 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2023-12-02 12:36:18,105 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 30 for LOIs [2023-12-02 12:36:18,145 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 8 for LOIs [2023-12-02 12:36:18,147 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 12:36:21,378 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4775#(and (= ~pumpRunning~0 0) (<= 0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0) (= ~methaneLevelCritical~0 0) (<= |old(~pumpRunning~0)| 1) (= |timeShift_isPumpRunning_#res#1| 0) (= 2 |timeShift_getWaterLevel_#res#1|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|))' at error location [2023-12-02 12:36:21,378 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 12:36:21,378 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 12:36:21,378 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 11] total 32 [2023-12-02 12:36:21,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601201330] [2023-12-02 12:36:21,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 12:36:21,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2023-12-02 12:36:21,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:21,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2023-12-02 12:36:21,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=452, Invalid=3208, Unknown=0, NotChecked=0, Total=3660 [2023-12-02 12:36:21,382 INFO L87 Difference]: Start difference. First operand 281 states and 320 transitions. Second operand has 32 states, 30 states have (on average 3.2666666666666666) internal successors, (98), 30 states have internal predecessors, (98), 12 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2023-12-02 12:36:23,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:23,171 INFO L93 Difference]: Finished difference Result 772 states and 928 transitions. [2023-12-02 12:36:23,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2023-12-02 12:36:23,171 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 3.2666666666666666) internal successors, (98), 30 states have internal predecessors, (98), 12 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) Word has length 52 [2023-12-02 12:36:23,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:23,175 INFO L225 Difference]: With dead ends: 772 [2023-12-02 12:36:23,175 INFO L226 Difference]: Without dead ends: 611 [2023-12-02 12:36:23,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 218 GetRequests, 117 SyntacticMatches, 5 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3290 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=1401, Invalid=8105, Unknown=0, NotChecked=0, Total=9506 [2023-12-02 12:36:23,178 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 844 mSDsluCounter, 516 mSDsCounter, 0 mSdLazyCounter, 1137 mSolverCounterSat, 469 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 846 SdHoareTripleChecker+Valid, 601 SdHoareTripleChecker+Invalid, 1606 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 469 IncrementalHoareTripleChecker+Valid, 1137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:23,179 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [846 Valid, 601 Invalid, 1606 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [469 Valid, 1137 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 12:36:23,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 611 states. [2023-12-02 12:36:23,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 611 to 527. [2023-12-02 12:36:23,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 527 states, 364 states have (on average 1.1730769230769231) internal successors, (427), 390 states have internal predecessors, (427), 76 states have call successors, (76), 74 states have call predecessors, (76), 86 states have return successors, (98), 78 states have call predecessors, (98), 76 states have call successors, (98) [2023-12-02 12:36:23,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 527 states to 527 states and 601 transitions. [2023-12-02 12:36:23,232 INFO L78 Accepts]: Start accepts. Automaton has 527 states and 601 transitions. Word has length 52 [2023-12-02 12:36:23,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:23,232 INFO L495 AbstractCegarLoop]: Abstraction has 527 states and 601 transitions. [2023-12-02 12:36:23,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 3.2666666666666666) internal successors, (98), 30 states have internal predecessors, (98), 12 states have call successors, (17), 10 states have call predecessors, (17), 9 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2023-12-02 12:36:23,233 INFO L276 IsEmpty]: Start isEmpty. Operand 527 states and 601 transitions. [2023-12-02 12:36:23,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-12-02 12:36:23,234 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:36:23,235 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:23,240 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 12:36:23,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:36:23,436 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:36:23,436 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:36:23,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1189617960, now seen corresponding path program 1 times [2023-12-02 12:36:23,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:36:23,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909122413] [2023-12-02 12:36:23,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:23,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:36:23,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:23,585 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 41 proven. 4 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-12-02 12:36:23,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:36:23,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909122413] [2023-12-02 12:36:23,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909122413] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 12:36:23,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [580076356] [2023-12-02 12:36:23,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:36:23,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:36:23,586 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:36:23,587 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 12:36:23,589 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 12:36:23,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:36:23,681 INFO L262 TraceCheckSpWp]: Trace formula consists of 325 conjuncts, 7 conjunts are in the unsatisfiable core [2023-12-02 12:36:23,685 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 12:36:23,759 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2023-12-02 12:36:23,759 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 12:36:23,759 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [580076356] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:36:23,759 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 12:36:23,760 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2023-12-02 12:36:23,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772614691] [2023-12-02 12:36:23,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:36:23,760 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 12:36:23,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:36:23,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 12:36:23,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2023-12-02 12:36:23,761 INFO L87 Difference]: Start difference. First operand 527 states and 601 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-12-02 12:36:23,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:36:23,913 INFO L93 Difference]: Finished difference Result 944 states and 1088 transitions. [2023-12-02 12:36:23,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 12:36:23,913 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 84 [2023-12-02 12:36:23,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:36:23,914 INFO L225 Difference]: With dead ends: 944 [2023-12-02 12:36:23,914 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 12:36:23,916 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2023-12-02 12:36:23,917 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 39 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:36:23,917 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 154 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:36:23,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 12:36:23,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 12:36:23,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 12:36:23,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 12:36:23,918 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2023-12-02 12:36:23,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:36:23,919 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 12:36:23,919 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-12-02 12:36:23,919 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 12:36:23,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 12:36:23,921 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 12:36:23,927 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 12:36:24,122 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-12-02 12:36:24,124 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 12:36:29,026 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 806 812) no Hoare annotation was computed. [2023-12-02 12:36:29,026 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 806 812) the Hoare annotation is: true [2023-12-02 12:36:29,027 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-12-02 12:36:29,027 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-12-02 12:36:29,027 INFO L899 garLoopResultBuilder]: For program point L704(line 704) no Hoare annotation was computed. [2023-12-02 12:36:29,027 INFO L895 garLoopResultBuilder]: At program point L854(line 854) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|)) (.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~pumpRunning~0 1)) (.cse3 (= |old(~waterLevel~0)| 2))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (not .cse3) (and (not (= 2 ~waterLevel~0)) .cse4 .cse5) .cse0) (or .cse2 .cse0 .cse1 (and (<= ~waterLevel~0 0) .cse4 .cse5) .cse3))) [2023-12-02 12:36:29,027 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 449) no Hoare annotation was computed. [2023-12-02 12:36:29,027 INFO L895 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (and (<= 2 |old(~waterLevel~0)|) (not (= |old(~waterLevel~0)| 2)))))) [2023-12-02 12:36:29,027 INFO L899 garLoopResultBuilder]: For program point L859-1(lines 840 864) no Hoare annotation was computed. [2023-12-02 12:36:29,027 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 793 799) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 782 805) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~pumpRunning~0)| 1)) .cse1 (and (<= 2 |old(~waterLevel~0)|) (not (= |old(~waterLevel~0)| 2))) (and .cse0 (= ~pumpRunning~0 1))))) [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 445) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L435(lines 435 448) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L435-1(lines 420 452) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L786-1(lines 785 804) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 856) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L899 garLoopResultBuilder]: For program point L844(lines 844 861) no Hoare annotation was computed. [2023-12-02 12:36:29,028 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (= ~pumpRunning~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (< 2 |old(~waterLevel~0)|)) (.cse6 (= |old(~waterLevel~0)| 2)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) .cse10)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= 0 ~systemActive~0))) (and (let ((.cse1 (not (= 2 ~waterLevel~0))) (.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse1 .cse2 .cse4) .cse5 (and (<= 2 |old(~waterLevel~0)|) (not .cse6)))) (or .cse7 .cse8 .cse5 .cse9 (and .cse10 .cse4)) (or .cse3 (<= ~waterLevel~0 0) .cse5 .cse9 .cse6) (or (< 1 |old(~waterLevel~0)|) (not (= ~waterLevel~0 1)) .cse7 .cse8 .cse5)))) [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 782 805) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point L427-1(line 427) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 565 594) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L902 garLoopResultBuilder]: At program point L575-2(lines 575 589) the Hoare annotation is: true [2023-12-02 12:36:29,029 INFO L902 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: true [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point L571-1(line 571) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point L590(lines 565 594) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point L586(line 586) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 594) the Hoare annotation is: true [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2023-12-02 12:36:29,029 INFO L902 garLoopResultBuilder]: At program point L579-1(lines 579 583) the Hoare annotation is: true [2023-12-02 12:36:29,029 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 498 506) the Hoare annotation is: true [2023-12-02 12:36:29,029 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 498 506) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L895 garLoopResultBuilder]: At program point L758-2(lines 750 763) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L721(lines 720 767) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L651(lines 651 658) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L651-2(lines 651 658) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2)) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L771(lines 710 775) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 736) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point L730-1(lines 730 736) no Hoare annotation was computed. [2023-12-02 12:36:29,030 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 12:36:29,031 INFO L895 garLoopResultBuilder]: At program point L768(lines 719 769) the Hoare annotation is: false [2023-12-02 12:36:29,031 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 12:36:29,031 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2023-12-02 12:36:29,031 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 740 746) no Hoare annotation was computed. [2023-12-02 12:36:29,031 INFO L895 garLoopResultBuilder]: At program point L765(lines 720 767) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse3 .cse0 .cse1 .cse2 (<= ~waterLevel~0 0)) (and .cse3 .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2023-12-02 12:36:29,031 INFO L895 garLoopResultBuilder]: At program point L732(line 732) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2)) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2023-12-02 12:36:29,032 INFO L895 garLoopResultBuilder]: At program point L828(line 828) the Hoare annotation is: (let ((.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (.cse4 (< 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (or .cse1 (< 0 |processEnvironment__wrappee__highWaterSensor_~tmp~6#1|))) (< 1 ~waterLevel~0) .cse2) (or .cse3 .cse0 .cse1 .cse2) (or .cse4 (= 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse4 .cse0 (< ~waterLevel~0 2) .cse2) (let ((.cse5 (select |#memory_int| 1))) (or .cse3 (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse5 0) 48)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= 1 ~systemActive~0)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= ~methaneLevelCritical~0 0)) (not (= (select .cse5 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (< |#StackHeapBarrier| 1) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2023-12-02 12:36:29,032 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 830) no Hoare annotation was computed. [2023-12-02 12:36:29,032 INFO L899 garLoopResultBuilder]: For program point L818(lines 818 835) no Hoare annotation was computed. [2023-12-02 12:36:29,032 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 814 838) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-12-02 12:36:29,032 INFO L895 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-12-02 12:36:29,032 INFO L899 garLoopResultBuilder]: For program point L833-1(lines 814 838) no Hoare annotation was computed. [2023-12-02 12:36:29,032 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 814 838) no Hoare annotation was computed. [2023-12-02 12:36:29,032 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-12-02 12:36:29,032 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (not (= ~pumpRunning~0 1)) .cse0 .cse1 .cse2) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2))) [2023-12-02 12:36:29,034 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:36:29,036 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 12:36:29,046 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 12:36:29 BoogieIcfgContainer [2023-12-02 12:36:29,046 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 12:36:29,047 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 12:36:29,047 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 12:36:29,047 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 12:36:29,048 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:35:59" (3/4) ... [2023-12-02 12:36:29,049 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 12:36:29,051 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 12:36:29,051 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 12:36:29,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 12:36:29,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 12:36:29,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-12-02 12:36:29,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 12:36:29,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 12:36:29,059 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-12-02 12:36:29,060 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 12:36:29,061 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 12:36:29,061 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 12:36:29,062 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 12:36:29,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || ((2 <= \old(waterLevel)) && !((\old(waterLevel) == 2)))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) [2023-12-02 12:36:29,115 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || ((2 <= \old(waterLevel)) && !((\old(waterLevel) == 2)))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) [2023-12-02 12:36:29,153 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 12:36:29,153 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 12:36:29,153 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 12:36:29,154 INFO L158 Benchmark]: Toolchain (without parser) took 30271.01ms. Allocated memory was 123.7MB in the beginning and 551.6MB in the end (delta: 427.8MB). Free memory was 92.8MB in the beginning and 414.4MB in the end (delta: -321.5MB). Peak memory consumption was 109.0MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,154 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 123.7MB. Free memory is still 78.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 12:36:29,155 INFO L158 Benchmark]: CACSL2BoogieTranslator took 394.75ms. Allocated memory is still 123.7MB. Free memory was 92.4MB in the beginning and 73.0MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,155 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.61ms. Allocated memory is still 123.7MB. Free memory was 73.0MB in the beginning and 70.7MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,155 INFO L158 Benchmark]: Boogie Preprocessor took 30.12ms. Allocated memory is still 123.7MB. Free memory was 70.7MB in the beginning and 68.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,156 INFO L158 Benchmark]: RCFGBuilder took 548.36ms. Allocated memory was 123.7MB in the beginning and 151.0MB in the end (delta: 27.3MB). Free memory was 68.9MB in the beginning and 114.2MB in the end (delta: -45.2MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,156 INFO L158 Benchmark]: TraceAbstraction took 29133.44ms. Allocated memory was 151.0MB in the beginning and 551.6MB in the end (delta: 400.6MB). Free memory was 113.3MB in the beginning and 421.7MB in the end (delta: -308.4MB). Peak memory consumption was 325.9MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,156 INFO L158 Benchmark]: Witness Printer took 106.48ms. Allocated memory is still 551.6MB. Free memory was 421.7MB in the beginning and 414.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 12:36:29,158 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 123.7MB. Free memory is still 78.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 394.75ms. Allocated memory is still 123.7MB. Free memory was 92.4MB in the beginning and 73.0MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.61ms. Allocated memory is still 123.7MB. Free memory was 73.0MB in the beginning and 70.7MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.12ms. Allocated memory is still 123.7MB. Free memory was 70.7MB in the beginning and 68.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 548.36ms. Allocated memory was 123.7MB in the beginning and 151.0MB in the end (delta: 27.3MB). Free memory was 68.9MB in the beginning and 114.2MB in the end (delta: -45.2MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. * TraceAbstraction took 29133.44ms. Allocated memory was 151.0MB in the beginning and 551.6MB in the end (delta: 400.6MB). Free memory was 113.3MB in the beginning and 421.7MB in the end (delta: -308.4MB). Peak memory consumption was 325.9MB. Max. memory is 16.1GB. * Witness Printer took 106.48ms. Allocated memory is still 551.6MB. Free memory was 421.7MB in the beginning and 414.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [415] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 562]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] - GenericResultAtLocation [Line: 664]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [664] - GenericResultAtLocation [Line: 699]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [699] - GenericResultAtLocation [Line: 708]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [708] - GenericResultAtLocation [Line: 776]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [776] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 704]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 56 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 29.1s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1381 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1362 mSDsluCounter, 1970 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1413 mSDsCounter, 589 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2854 IncrementalHoareTripleChecker+Invalid, 3443 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 589 mSolverCounterUnsat, 557 mSDtfsCounter, 2854 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 540 GetRequests, 346 SyntacticMatches, 9 SemanticMatches, 185 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3884 ImplicationChecksByTransitivity, 10.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=527occurred in iteration=10, InterpolantAutomatonStates: 116, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 187 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 528 PreInvPairs, 601 NumberOfFragments, 840 HoareAnnotationTreeSize, 528 FomulaSimplifications, 8639 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 20 FomulaSimplificationsInter, 16768 FormulaSimplificationTreeSizeReductionInter, 4.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 576 NumberOfCodeBlocks, 576 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 663 ConstructedInterpolants, 0 QuantifiedInterpolants, 2155 SizeOfPredicates, 21 NumberOfNonLiveVariables, 801 ConjunctsInSsa, 56 ConjunctsInUnsatCore, 16 InterpolantComputations, 9 PerfectInterpolantSequences, 174/233 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 3.7s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 40, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 49, TOOLS_POST_TIME: 1.5s, TOOLS_POST_CALL_APPLICATIONS: 20, TOOLS_POST_CALL_TIME: 0.9s, TOOLS_POST_RETURN_APPLICATIONS: 16, TOOLS_POST_RETURN_TIME: 0.7s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 85, TOOLS_QUANTIFIERELIM_TIME: 3.0s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.5s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 115, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 16, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 40, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 2.8s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 2.8s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 16, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 440, DAG_COMPRESSION_RETAINED_NODES: 109, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: (((((((1 == systemActive) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (pumpRunning == 1)) || (((((pumpRunning == 0) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 0))) || (((((pumpRunning == 0) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || ((2 <= \old(waterLevel)) && !((\old(waterLevel) == 2)))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) RESULT: Ultimate proved your program to be correct! [2023-12-02 12:36:29,177 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dee7b7ca-18c2-4212-8cb9-903926f21bba/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE