./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 03daf3415808298ae6016bdc33e04662b3dd63f1cba0029f4033bbf040a042d2 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 16:39:55,570 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 16:39:55,640 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 16:39:55,644 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 16:39:55,645 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 16:39:55,669 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 16:39:55,670 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 16:39:55,670 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 16:39:55,671 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 16:39:55,672 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 16:39:55,672 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 16:39:55,673 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 16:39:55,673 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 16:39:55,674 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 16:39:55,674 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 16:39:55,675 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 16:39:55,675 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 16:39:55,676 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 16:39:55,676 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 16:39:55,677 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 16:39:55,678 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 16:39:55,678 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 16:39:55,679 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 16:39:55,680 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 16:39:55,680 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 16:39:55,681 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 16:39:55,681 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 16:39:55,681 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 16:39:55,682 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 16:39:55,682 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 16:39:55,683 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 16:39:55,683 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 16:39:55,684 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 16:39:55,684 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 16:39:55,684 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 16:39:55,685 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 16:39:55,685 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 16:39:55,685 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:39:55,685 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 16:39:55,685 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 16:39:55,686 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 16:39:55,686 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 16:39:55,686 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 16:39:55,686 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 16:39:55,687 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 16:39:55,687 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 16:39:55,687 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 16:39:55,687 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03daf3415808298ae6016bdc33e04662b3dd63f1cba0029f4033bbf040a042d2 [2023-12-02 16:39:55,930 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 16:39:55,968 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 16:39:55,971 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 16:39:55,972 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 16:39:55,973 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 16:39:55,974 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c [2023-12-02 16:39:58,760 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 16:39:58,988 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 16:39:58,989 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c [2023-12-02 16:39:59,005 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/data/1ebbfc731/2b13fd05ca3d4cf2ab13f9e554172c5e/FLAG466697e8e [2023-12-02 16:39:59,021 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/data/1ebbfc731/2b13fd05ca3d4cf2ab13f9e554172c5e [2023-12-02 16:39:59,024 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 16:39:59,026 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 16:39:59,027 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 16:39:59,028 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 16:39:59,033 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 16:39:59,034 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,035 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7c4c035 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59, skipping insertion in model container [2023-12-02 16:39:59,035 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,090 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 16:39:59,339 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c[17338,17351] [2023-12-02 16:39:59,351 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:39:59,363 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 16:39:59,375 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-12-02 16:39:59,376 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] [2023-12-02 16:39:59,377 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] [2023-12-02 16:39:59,377 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [746] [2023-12-02 16:39:59,377 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [774] [2023-12-02 16:39:59,377 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [873] [2023-12-02 16:39:59,377 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [882] [2023-12-02 16:39:59,378 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] [2023-12-02 16:39:59,435 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c[17338,17351] [2023-12-02 16:39:59,442 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:39:59,463 INFO L206 MainTranslator]: Completed translation [2023-12-02 16:39:59,464 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59 WrapperNode [2023-12-02 16:39:59,464 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 16:39:59,465 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 16:39:59,465 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 16:39:59,465 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 16:39:59,473 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,490 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,520 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 236 [2023-12-02 16:39:59,520 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 16:39:59,521 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 16:39:59,521 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 16:39:59,521 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 16:39:59,532 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,532 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,535 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,535 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,542 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,547 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,549 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,551 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,554 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 16:39:59,555 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 16:39:59,556 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 16:39:59,556 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 16:39:59,557 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (1/1) ... [2023-12-02 16:39:59,567 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:39:59,581 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:39:59,601 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 16:39:59,608 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 16:39:59,642 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 16:39:59,642 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 16:39:59,642 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 16:39:59,643 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 16:39:59,643 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 16:39:59,643 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 16:39:59,643 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 16:39:59,643 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:39:59,643 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:39:59,644 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 16:39:59,644 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 16:39:59,644 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 16:39:59,644 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 16:39:59,644 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 16:39:59,644 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 16:39:59,645 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 16:39:59,645 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 16:39:59,645 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 16:39:59,645 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 16:39:59,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 16:39:59,721 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 16:39:59,724 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 16:39:59,984 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 16:40:00,096 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 16:40:00,096 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 16:40:00,098 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:40:00 BoogieIcfgContainer [2023-12-02 16:40:00,098 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 16:40:00,100 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 16:40:00,100 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 16:40:00,104 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 16:40:00,104 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 04:39:59" (1/3) ... [2023-12-02 16:40:00,105 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2b67c923 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:40:00, skipping insertion in model container [2023-12-02 16:40:00,105 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:39:59" (2/3) ... [2023-12-02 16:40:00,105 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2b67c923 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:40:00, skipping insertion in model container [2023-12-02 16:40:00,106 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:40:00" (3/3) ... [2023-12-02 16:40:00,107 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product56.cil.c [2023-12-02 16:40:00,127 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 16:40:00,128 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 16:40:00,179 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 16:40:00,185 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@21583d10, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 16:40:00,185 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 16:40:00,189 INFO L276 IsEmpty]: Start isEmpty. Operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-12-02 16:40:00,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-12-02 16:40:00,197 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:00,197 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:00,198 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:00,202 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:00,203 INFO L85 PathProgramCache]: Analyzing trace with hash -930246710, now seen corresponding path program 1 times [2023-12-02 16:40:00,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:00,211 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539515300] [2023-12-02 16:40:00,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:00,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:00,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:00,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:00,354 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:00,354 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539515300] [2023-12-02 16:40:00,355 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539515300] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:00,356 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:00,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 16:40:00,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [279030318] [2023-12-02 16:40:00,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:00,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 16:40:00,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:00,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 16:40:00,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:40:00,390 INFO L87 Difference]: Start difference. First operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:00,451 INFO L93 Difference]: Finished difference Result 132 states and 185 transitions. [2023-12-02 16:40:00,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 16:40:00,454 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-12-02 16:40:00,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:00,461 INFO L225 Difference]: With dead ends: 132 [2023-12-02 16:40:00,462 INFO L226 Difference]: Without dead ends: 62 [2023-12-02 16:40:00,464 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:40:00,468 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:00,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 70 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:40:00,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-12-02 16:40:00,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2023-12-02 16:40:00,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 49 states have internal predecessors, (54), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-12-02 16:40:00,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 83 transitions. [2023-12-02 16:40:00,512 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 83 transitions. Word has length 12 [2023-12-02 16:40:00,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:00,512 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 83 transitions. [2023-12-02 16:40:00,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,513 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 83 transitions. [2023-12-02 16:40:00,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-12-02 16:40:00,515 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:00,515 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:00,516 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 16:40:00,516 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:00,517 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:00,517 INFO L85 PathProgramCache]: Analyzing trace with hash -464558158, now seen corresponding path program 1 times [2023-12-02 16:40:00,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:00,517 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [266387655] [2023-12-02 16:40:00,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:00,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:00,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:00,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:00,613 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:00,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [266387655] [2023-12-02 16:40:00,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [266387655] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:00,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:00,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:40:00,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2025298184] [2023-12-02 16:40:00,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:00,615 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:40:00,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:00,616 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:40:00,616 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:40:00,616 INFO L87 Difference]: Start difference. First operand 62 states and 83 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:00,664 INFO L93 Difference]: Finished difference Result 96 states and 128 transitions. [2023-12-02 16:40:00,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:40:00,665 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-12-02 16:40:00,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:00,667 INFO L225 Difference]: With dead ends: 96 [2023-12-02 16:40:00,667 INFO L226 Difference]: Without dead ends: 54 [2023-12-02 16:40:00,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:40:00,669 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:00,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 96 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:40:00,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-12-02 16:40:00,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2023-12-02 16:40:00,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 34 states have (on average 1.411764705882353) internal successors, (48), 44 states have internal predecessors, (48), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 7 states have call predecessors, (12), 12 states have call successors, (12) [2023-12-02 16:40:00,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 72 transitions. [2023-12-02 16:40:00,680 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 72 transitions. Word has length 13 [2023-12-02 16:40:00,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:00,681 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 72 transitions. [2023-12-02 16:40:00,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,681 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 72 transitions. [2023-12-02 16:40:00,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-12-02 16:40:00,683 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:00,683 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:00,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 16:40:00,683 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:00,684 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:00,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1739251720, now seen corresponding path program 1 times [2023-12-02 16:40:00,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:00,685 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346501098] [2023-12-02 16:40:00,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:00,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:00,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:00,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:00,786 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:00,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1346501098] [2023-12-02 16:40:00,786 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1346501098] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:00,786 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:00,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:40:00,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1483249150] [2023-12-02 16:40:00,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:00,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:40:00,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:00,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:40:00,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:40:00,788 INFO L87 Difference]: Start difference. First operand 54 states and 72 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:00,888 INFO L93 Difference]: Finished difference Result 135 states and 180 transitions. [2023-12-02 16:40:00,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 16:40:00,888 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-12-02 16:40:00,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:00,890 INFO L225 Difference]: With dead ends: 135 [2023-12-02 16:40:00,890 INFO L226 Difference]: Without dead ends: 83 [2023-12-02 16:40:00,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:40:00,892 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 95 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:00,893 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 123 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:00,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2023-12-02 16:40:00,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 80. [2023-12-02 16:40:00,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 52 states have (on average 1.4038461538461537) internal successors, (73), 65 states have internal predecessors, (73), 16 states have call successors, (16), 11 states have call predecessors, (16), 11 states have return successors, (17), 10 states have call predecessors, (17), 16 states have call successors, (17) [2023-12-02 16:40:00,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2023-12-02 16:40:00,910 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 16 [2023-12-02 16:40:00,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:00,911 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2023-12-02 16:40:00,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:00,912 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2023-12-02 16:40:00,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-12-02 16:40:00,913 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:00,914 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:00,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 16:40:00,914 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:00,914 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:00,914 INFO L85 PathProgramCache]: Analyzing trace with hash -2013013766, now seen corresponding path program 1 times [2023-12-02 16:40:00,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:00,915 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1585956625] [2023-12-02 16:40:00,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:00,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:00,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:01,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:01,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:01,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1585956625] [2023-12-02 16:40:01,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1585956625] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:01,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:01,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:40:01,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525556396] [2023-12-02 16:40:01,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:01,101 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:40:01,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:01,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:40:01,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:40:01,102 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:01,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:01,271 INFO L93 Difference]: Finished difference Result 245 states and 331 transitions. [2023-12-02 16:40:01,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 16:40:01,271 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-12-02 16:40:01,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:01,275 INFO L225 Difference]: With dead ends: 245 [2023-12-02 16:40:01,275 INFO L226 Difference]: Without dead ends: 167 [2023-12-02 16:40:01,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2023-12-02 16:40:01,278 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 62 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:01,279 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 231 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:01,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2023-12-02 16:40:01,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 158. [2023-12-02 16:40:01,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 109 states have (on average 1.3302752293577982) internal successors, (145), 126 states have internal predecessors, (145), 25 states have call successors, (25), 20 states have call predecessors, (25), 23 states have return successors, (31), 22 states have call predecessors, (31), 25 states have call successors, (31) [2023-12-02 16:40:01,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 201 transitions. [2023-12-02 16:40:01,313 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 201 transitions. Word has length 19 [2023-12-02 16:40:01,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:01,314 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 201 transitions. [2023-12-02 16:40:01,314 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:01,315 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 201 transitions. [2023-12-02 16:40:01,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-12-02 16:40:01,317 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:01,317 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:01,317 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 16:40:01,318 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:01,318 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:01,318 INFO L85 PathProgramCache]: Analyzing trace with hash 979805249, now seen corresponding path program 1 times [2023-12-02 16:40:01,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:01,319 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009318299] [2023-12-02 16:40:01,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:01,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:01,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:01,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:01,543 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:01,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009318299] [2023-12-02 16:40:01,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009318299] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:01,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:01,544 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 16:40:01,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937678934] [2023-12-02 16:40:01,544 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:01,545 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 16:40:01,545 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:01,546 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 16:40:01,546 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-12-02 16:40:01,546 INFO L87 Difference]: Start difference. First operand 158 states and 201 transitions. Second operand has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 16:40:02,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:02,067 INFO L93 Difference]: Finished difference Result 431 states and 571 transitions. [2023-12-02 16:40:02,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-12-02 16:40:02,068 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 22 [2023-12-02 16:40:02,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:02,072 INFO L225 Difference]: With dead ends: 431 [2023-12-02 16:40:02,073 INFO L226 Difference]: Without dead ends: 353 [2023-12-02 16:40:02,074 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2023-12-02 16:40:02,075 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 213 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 382 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 263 SdHoareTripleChecker+Invalid, 461 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 382 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:02,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 263 Invalid, 461 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 382 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 16:40:02,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 353 states. [2023-12-02 16:40:02,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 318. [2023-12-02 16:40:02,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 318 states, 222 states have (on average 1.2927927927927927) internal successors, (287), 251 states have internal predecessors, (287), 48 states have call successors, (48), 40 states have call predecessors, (48), 47 states have return successors, (64), 46 states have call predecessors, (64), 48 states have call successors, (64) [2023-12-02 16:40:02,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 318 states to 318 states and 399 transitions. [2023-12-02 16:40:02,125 INFO L78 Accepts]: Start accepts. Automaton has 318 states and 399 transitions. Word has length 22 [2023-12-02 16:40:02,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:02,126 INFO L495 AbstractCegarLoop]: Abstraction has 318 states and 399 transitions. [2023-12-02 16:40:02,126 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 16:40:02,126 INFO L276 IsEmpty]: Start isEmpty. Operand 318 states and 399 transitions. [2023-12-02 16:40:02,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-12-02 16:40:02,131 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:02,131 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:02,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 16:40:02,132 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:02,132 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:02,132 INFO L85 PathProgramCache]: Analyzing trace with hash 1636068316, now seen corresponding path program 1 times [2023-12-02 16:40:02,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:02,133 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877279571] [2023-12-02 16:40:02,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:02,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:02,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:02,457 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:02,457 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:02,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877279571] [2023-12-02 16:40:02,458 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1877279571] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:02,458 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:02,458 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-12-02 16:40:02,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1041988257] [2023-12-02 16:40:02,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:02,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-12-02 16:40:02,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:02,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-12-02 16:40:02,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2023-12-02 16:40:02,460 INFO L87 Difference]: Start difference. First operand 318 states and 399 transitions. Second operand has 9 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:40:02,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:02,899 INFO L93 Difference]: Finished difference Result 482 states and 629 transitions. [2023-12-02 16:40:02,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-12-02 16:40:02,900 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 49 [2023-12-02 16:40:02,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:02,904 INFO L225 Difference]: With dead ends: 482 [2023-12-02 16:40:02,904 INFO L226 Difference]: Without dead ends: 321 [2023-12-02 16:40:02,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=107, Unknown=0, NotChecked=0, Total=156 [2023-12-02 16:40:02,906 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 119 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:02,907 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [128 Valid, 209 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 16:40:02,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2023-12-02 16:40:02,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 262. [2023-12-02 16:40:02,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 182 states have (on average 1.3131868131868132) internal successors, (239), 207 states have internal predecessors, (239), 40 states have call successors, (40), 32 states have call predecessors, (40), 39 states have return successors, (56), 38 states have call predecessors, (56), 40 states have call successors, (56) [2023-12-02 16:40:02,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 335 transitions. [2023-12-02 16:40:02,953 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 335 transitions. Word has length 49 [2023-12-02 16:40:02,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:02,954 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 335 transitions. [2023-12-02 16:40:02,954 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:40:02,954 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 335 transitions. [2023-12-02 16:40:02,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-12-02 16:40:02,957 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:02,957 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:02,957 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 16:40:02,957 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:02,958 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:02,958 INFO L85 PathProgramCache]: Analyzing trace with hash -935429079, now seen corresponding path program 1 times [2023-12-02 16:40:02,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:02,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1594034384] [2023-12-02 16:40:02,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:02,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:02,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:02,997 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:02,997 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:02,998 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1594034384] [2023-12-02 16:40:02,998 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1594034384] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:02,998 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:02,998 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:40:02,998 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983337715] [2023-12-02 16:40:02,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:02,999 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:40:02,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:03,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:40:03,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:40:03,000 INFO L87 Difference]: Start difference. First operand 262 states and 335 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 16:40:03,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:03,122 INFO L93 Difference]: Finished difference Result 533 states and 679 transitions. [2023-12-02 16:40:03,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 16:40:03,123 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 55 [2023-12-02 16:40:03,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:03,126 INFO L225 Difference]: With dead ends: 533 [2023-12-02 16:40:03,126 INFO L226 Difference]: Without dead ends: 273 [2023-12-02 16:40:03,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:40:03,128 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 94 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:03,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 124 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:03,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2023-12-02 16:40:03,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 242. [2023-12-02 16:40:03,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 168 states have (on average 1.2857142857142858) internal successors, (216), 190 states have internal predecessors, (216), 36 states have call successors, (36), 31 states have call predecessors, (36), 37 states have return successors, (44), 36 states have call predecessors, (44), 36 states have call successors, (44) [2023-12-02 16:40:03,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 296 transitions. [2023-12-02 16:40:03,157 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 296 transitions. Word has length 55 [2023-12-02 16:40:03,157 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:03,158 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 296 transitions. [2023-12-02 16:40:03,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 16:40:03,158 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 296 transitions. [2023-12-02 16:40:03,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-12-02 16:40:03,160 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:03,160 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:03,160 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 16:40:03,160 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:03,161 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:03,161 INFO L85 PathProgramCache]: Analyzing trace with hash 1738287689, now seen corresponding path program 1 times [2023-12-02 16:40:03,161 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:03,161 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448833235] [2023-12-02 16:40:03,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:03,161 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:03,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:03,244 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-12-02 16:40:03,245 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:03,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448833235] [2023-12-02 16:40:03,245 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448833235] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:03,245 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:40:03,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:40:03,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1960881289] [2023-12-02 16:40:03,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:03,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:40:03,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:03,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:40:03,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:40:03,247 INFO L87 Difference]: Start difference. First operand 242 states and 296 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-12-02 16:40:03,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:03,353 INFO L93 Difference]: Finished difference Result 576 states and 724 transitions. [2023-12-02 16:40:03,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 16:40:03,354 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 52 [2023-12-02 16:40:03,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:03,358 INFO L225 Difference]: With dead ends: 576 [2023-12-02 16:40:03,358 INFO L226 Difference]: Without dead ends: 477 [2023-12-02 16:40:03,358 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:40:03,359 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 52 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:03,360 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 169 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:03,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 477 states. [2023-12-02 16:40:03,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 477 to 455. [2023-12-02 16:40:03,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 455 states, 325 states have (on average 1.2923076923076924) internal successors, (420), 359 states have internal predecessors, (420), 63 states have call successors, (63), 54 states have call predecessors, (63), 66 states have return successors, (79), 64 states have call predecessors, (79), 63 states have call successors, (79) [2023-12-02 16:40:03,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 455 states to 455 states and 562 transitions. [2023-12-02 16:40:03,405 INFO L78 Accepts]: Start accepts. Automaton has 455 states and 562 transitions. Word has length 52 [2023-12-02 16:40:03,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:03,405 INFO L495 AbstractCegarLoop]: Abstraction has 455 states and 562 transitions. [2023-12-02 16:40:03,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-12-02 16:40:03,406 INFO L276 IsEmpty]: Start isEmpty. Operand 455 states and 562 transitions. [2023-12-02 16:40:03,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-12-02 16:40:03,408 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:03,408 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:03,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 16:40:03,409 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:03,409 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:03,409 INFO L85 PathProgramCache]: Analyzing trace with hash -1570055128, now seen corresponding path program 1 times [2023-12-02 16:40:03,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:03,410 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134481579] [2023-12-02 16:40:03,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:03,410 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:03,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:03,863 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:40:03,863 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:03,863 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134481579] [2023-12-02 16:40:03,864 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134481579] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:03,864 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1615061691] [2023-12-02 16:40:03,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:03,864 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:03,865 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:03,868 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:03,870 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 16:40:03,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:03,988 INFO L262 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 7 conjunts are in the unsatisfiable core [2023-12-02 16:40:03,994 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:04,054 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-12-02 16:40:04,054 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:40:04,054 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1615061691] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:04,054 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:40:04,055 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [14] total 16 [2023-12-02 16:40:04,055 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1267111403] [2023-12-02 16:40:04,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:04,056 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:40:04,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:04,056 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:40:04,057 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2023-12-02 16:40:04,057 INFO L87 Difference]: Start difference. First operand 455 states and 562 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2023-12-02 16:40:04,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:04,210 INFO L93 Difference]: Finished difference Result 718 states and 928 transitions. [2023-12-02 16:40:04,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 16:40:04,210 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 55 [2023-12-02 16:40:04,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:04,215 INFO L225 Difference]: With dead ends: 718 [2023-12-02 16:40:04,215 INFO L226 Difference]: Without dead ends: 532 [2023-12-02 16:40:04,216 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=224, Unknown=0, NotChecked=0, Total=272 [2023-12-02 16:40:04,217 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 51 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:04,217 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 157 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:04,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2023-12-02 16:40:04,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 522. [2023-12-02 16:40:04,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 522 states, 376 states have (on average 1.273936170212766) internal successors, (479), 407 states have internal predecessors, (479), 68 states have call successors, (68), 65 states have call predecessors, (68), 77 states have return successors, (92), 75 states have call predecessors, (92), 68 states have call successors, (92) [2023-12-02 16:40:04,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 522 states to 522 states and 639 transitions. [2023-12-02 16:40:04,279 INFO L78 Accepts]: Start accepts. Automaton has 522 states and 639 transitions. Word has length 55 [2023-12-02 16:40:04,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:04,279 INFO L495 AbstractCegarLoop]: Abstraction has 522 states and 639 transitions. [2023-12-02 16:40:04,279 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2023-12-02 16:40:04,280 INFO L276 IsEmpty]: Start isEmpty. Operand 522 states and 639 transitions. [2023-12-02 16:40:04,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-12-02 16:40:04,282 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:04,282 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:04,293 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-12-02 16:40:04,487 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:04,487 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:04,487 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:04,487 INFO L85 PathProgramCache]: Analyzing trace with hash -609831967, now seen corresponding path program 1 times [2023-12-02 16:40:04,488 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:04,488 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810557129] [2023-12-02 16:40:04,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:04,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:04,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:04,607 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-12-02 16:40:04,607 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:04,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810557129] [2023-12-02 16:40:04,608 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810557129] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:04,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1325118818] [2023-12-02 16:40:04,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:04,608 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:04,608 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:04,609 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:04,611 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 16:40:04,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:04,695 INFO L262 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 6 conjunts are in the unsatisfiable core [2023-12-02 16:40:04,698 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:04,774 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-12-02 16:40:04,775 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:40:04,951 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-12-02 16:40:04,951 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1325118818] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:40:04,951 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1250771304] [2023-12-02 16:40:04,969 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-12-02 16:40:04,969 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:40:04,972 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:40:04,977 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:40:04,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:40:08,505 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 21 for LOIs [2023-12-02 16:40:08,510 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 41 for LOIs [2023-12-02 16:40:08,798 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 66 for LOIs [2023-12-02 16:40:08,899 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 39 for LOIs [2023-12-02 16:40:08,954 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:40:10,983 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1250771304] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:10,983 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:40:10,983 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [26] imperfect sequences [7, 5, 5] total 36 [2023-12-02 16:40:10,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1213090046] [2023-12-02 16:40:10,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:10,985 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2023-12-02 16:40:10,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:10,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2023-12-02 16:40:10,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1080, Unknown=0, NotChecked=0, Total=1260 [2023-12-02 16:40:10,986 INFO L87 Difference]: Start difference. First operand 522 states and 639 transitions. Second operand has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 24 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:40:17,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:17,784 INFO L93 Difference]: Finished difference Result 1441 states and 1900 transitions. [2023-12-02 16:40:17,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2023-12-02 16:40:17,785 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 24 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 60 [2023-12-02 16:40:17,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:17,795 INFO L225 Difference]: With dead ends: 1441 [2023-12-02 16:40:17,795 INFO L226 Difference]: Without dead ends: 1188 [2023-12-02 16:40:17,798 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 149 SyntacticMatches, 4 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1443 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=638, Invalid=3918, Unknown=0, NotChecked=0, Total=4556 [2023-12-02 16:40:17,799 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 346 mSDsluCounter, 421 mSDsCounter, 0 mSdLazyCounter, 1806 mSolverCounterSat, 229 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 2035 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 229 IncrementalHoareTripleChecker+Valid, 1806 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:17,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 461 Invalid, 2035 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [229 Valid, 1806 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2023-12-02 16:40:17,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1188 states. [2023-12-02 16:40:17,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1188 to 867. [2023-12-02 16:40:17,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 867 states, 619 states have (on average 1.2617124394184167) internal successors, (781), 665 states have internal predecessors, (781), 113 states have call successors, (113), 110 states have call predecessors, (113), 134 states have return successors, (157), 130 states have call predecessors, (157), 113 states have call successors, (157) [2023-12-02 16:40:17,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 867 states to 867 states and 1051 transitions. [2023-12-02 16:40:17,932 INFO L78 Accepts]: Start accepts. Automaton has 867 states and 1051 transitions. Word has length 60 [2023-12-02 16:40:17,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:17,932 INFO L495 AbstractCegarLoop]: Abstraction has 867 states and 1051 transitions. [2023-12-02 16:40:17,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 24 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:40:17,933 INFO L276 IsEmpty]: Start isEmpty. Operand 867 states and 1051 transitions. [2023-12-02 16:40:17,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-12-02 16:40:17,936 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:17,936 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:17,943 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-12-02 16:40:18,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:18,139 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:18,140 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:18,140 INFO L85 PathProgramCache]: Analyzing trace with hash 10919340, now seen corresponding path program 1 times [2023-12-02 16:40:18,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:18,140 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629814575] [2023-12-02 16:40:18,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:18,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:18,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:18,594 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 16:40:18,594 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:18,594 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629814575] [2023-12-02 16:40:18,594 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629814575] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:18,595 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1463850565] [2023-12-02 16:40:18,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:18,595 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:18,595 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:18,596 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:18,599 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 16:40:18,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:18,682 INFO L262 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 31 conjunts are in the unsatisfiable core [2023-12-02 16:40:18,686 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:18,977 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-12-02 16:40:18,977 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:40:19,366 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-12-02 16:40:19,366 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1463850565] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:40:19,366 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [371937248] [2023-12-02 16:40:19,370 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2023-12-02 16:40:19,370 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:40:19,370 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:40:19,371 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:40:19,371 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:40:21,488 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 44 for LOIs [2023-12-02 16:40:21,496 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 21 for LOIs [2023-12-02 16:40:21,579 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 29 for LOIs [2023-12-02 16:40:21,659 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 31 for LOIs [2023-12-02 16:40:21,724 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 22 for LOIs [2023-12-02 16:40:21,728 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:40:23,809 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11409#(and (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)))' at error location [2023-12-02 16:40:23,810 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:40:23,810 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:40:23,810 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 13] total 34 [2023-12-02 16:40:23,810 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535255062] [2023-12-02 16:40:23,810 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:40:23,811 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2023-12-02 16:40:23,811 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:23,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2023-12-02 16:40:23,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=427, Invalid=3995, Unknown=0, NotChecked=0, Total=4422 [2023-12-02 16:40:23,815 INFO L87 Difference]: Start difference. First operand 867 states and 1051 transitions. Second operand has 34 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 31 states have internal predecessors, (113), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 13 states have call predecessors, (18), 11 states have call successors, (18) [2023-12-02 16:40:28,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:28,884 INFO L93 Difference]: Finished difference Result 2548 states and 3286 transitions. [2023-12-02 16:40:28,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 109 states. [2023-12-02 16:40:28,885 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 31 states have internal predecessors, (113), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 13 states have call predecessors, (18), 11 states have call successors, (18) Word has length 63 [2023-12-02 16:40:28,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:28,895 INFO L225 Difference]: With dead ends: 2548 [2023-12-02 16:40:28,895 INFO L226 Difference]: Without dead ends: 1964 [2023-12-02 16:40:28,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 317 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9752 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=2644, Invalid=24088, Unknown=0, NotChecked=0, Total=26732 [2023-12-02 16:40:28,907 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 2087 mSDsluCounter, 899 mSDsCounter, 0 mSdLazyCounter, 2184 mSolverCounterSat, 1314 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2096 SdHoareTripleChecker+Valid, 986 SdHoareTripleChecker+Invalid, 3498 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1314 IncrementalHoareTripleChecker+Valid, 2184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:28,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2096 Valid, 986 Invalid, 3498 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1314 Valid, 2184 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2023-12-02 16:40:28,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1964 states. [2023-12-02 16:40:29,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1964 to 1249. [2023-12-02 16:40:29,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1249 states, 898 states have (on average 1.2338530066815145) internal successors, (1108), 964 states have internal predecessors, (1108), 159 states have call successors, (159), 145 states have call predecessors, (159), 191 states have return successors, (219), 185 states have call predecessors, (219), 159 states have call successors, (219) [2023-12-02 16:40:29,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1249 states to 1249 states and 1486 transitions. [2023-12-02 16:40:29,029 INFO L78 Accepts]: Start accepts. Automaton has 1249 states and 1486 transitions. Word has length 63 [2023-12-02 16:40:29,029 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:29,029 INFO L495 AbstractCegarLoop]: Abstraction has 1249 states and 1486 transitions. [2023-12-02 16:40:29,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 31 states have internal predecessors, (113), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 13 states have call predecessors, (18), 11 states have call successors, (18) [2023-12-02 16:40:29,030 INFO L276 IsEmpty]: Start isEmpty. Operand 1249 states and 1486 transitions. [2023-12-02 16:40:29,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2023-12-02 16:40:29,031 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:29,031 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:29,036 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 16:40:29,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-12-02 16:40:29,232 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:29,233 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:29,233 INFO L85 PathProgramCache]: Analyzing trace with hash -1112687883, now seen corresponding path program 2 times [2023-12-02 16:40:29,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:29,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326781844] [2023-12-02 16:40:29,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:29,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:29,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:29,962 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 30 proven. 27 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-12-02 16:40:29,962 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:29,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326781844] [2023-12-02 16:40:29,962 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326781844] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:29,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [484974675] [2023-12-02 16:40:29,963 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 16:40:29,963 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:29,963 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:29,964 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:29,967 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 16:40:30,060 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-12-02 16:40:30,060 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 16:40:30,062 INFO L262 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 10 conjunts are in the unsatisfiable core [2023-12-02 16:40:30,066 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:30,173 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-12-02 16:40:30,174 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:40:30,174 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [484974675] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:40:30,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:40:30,174 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 19 [2023-12-02 16:40:30,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [746649721] [2023-12-02 16:40:30,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:40:30,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:40:30,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:30,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:40:30,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-12-02 16:40:30,176 INFO L87 Difference]: Start difference. First operand 1249 states and 1486 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2023-12-02 16:40:30,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:30,449 INFO L93 Difference]: Finished difference Result 2667 states and 3208 transitions. [2023-12-02 16:40:30,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 16:40:30,450 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 94 [2023-12-02 16:40:30,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:30,459 INFO L225 Difference]: With dead ends: 2667 [2023-12-02 16:40:30,460 INFO L226 Difference]: Without dead ends: 1470 [2023-12-02 16:40:30,463 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-12-02 16:40:30,464 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 61 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:30,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 317 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:40:30,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1470 states. [2023-12-02 16:40:30,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1470 to 1348. [2023-12-02 16:40:30,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1348 states, 976 states have (on average 1.2264344262295082) internal successors, (1197), 1045 states have internal predecessors, (1197), 170 states have call successors, (170), 157 states have call predecessors, (170), 201 states have return successors, (232), 191 states have call predecessors, (232), 170 states have call successors, (232) [2023-12-02 16:40:30,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1348 states to 1348 states and 1599 transitions. [2023-12-02 16:40:30,641 INFO L78 Accepts]: Start accepts. Automaton has 1348 states and 1599 transitions. Word has length 94 [2023-12-02 16:40:30,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:30,641 INFO L495 AbstractCegarLoop]: Abstraction has 1348 states and 1599 transitions. [2023-12-02 16:40:30,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2023-12-02 16:40:30,642 INFO L276 IsEmpty]: Start isEmpty. Operand 1348 states and 1599 transitions. [2023-12-02 16:40:30,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2023-12-02 16:40:30,644 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:30,644 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:30,650 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 16:40:30,846 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-12-02 16:40:30,847 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:30,847 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:30,847 INFO L85 PathProgramCache]: Analyzing trace with hash 1543334088, now seen corresponding path program 1 times [2023-12-02 16:40:30,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:30,848 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914990855] [2023-12-02 16:40:30,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:30,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:30,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:31,065 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 19 proven. 29 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2023-12-02 16:40:31,065 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:31,065 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914990855] [2023-12-02 16:40:31,065 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914990855] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:31,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [401415414] [2023-12-02 16:40:31,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:31,066 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:31,066 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:31,067 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:31,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 16:40:31,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:31,174 INFO L262 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 15 conjunts are in the unsatisfiable core [2023-12-02 16:40:31,178 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:31,250 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 90 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2023-12-02 16:40:31,250 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:40:31,350 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 55 proven. 6 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2023-12-02 16:40:31,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [401415414] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:40:31,350 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [615649891] [2023-12-02 16:40:31,353 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 16:40:31,354 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:40:31,354 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:40:31,354 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:40:31,354 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:40:33,609 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 149 for LOIs [2023-12-02 16:40:33,684 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:40:33,851 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 31 for LOIs [2023-12-02 16:40:33,913 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 33 for LOIs [2023-12-02 16:40:33,960 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 20 for LOIs [2023-12-02 16:40:33,964 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 22 for LOIs [2023-12-02 16:40:33,967 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 25 for LOIs [2023-12-02 16:40:33,971 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:40:38,307 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22665#(and (or (and (<= 0 |timeShift_isMethaneLevelCritical_#res#1|) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 1) (<= |timeShift_isMethaneLevelCritical_#res#1| 1)) (and (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| Int)) (and (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483647) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483648)) (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 0)))) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| 0))) (<= ~methaneLevelCritical~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (<= 0 ~methaneLevelCritical~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)))' at error location [2023-12-02 16:40:38,307 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:40:38,307 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:40:38,307 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 10 [2023-12-02 16:40:38,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009831531] [2023-12-02 16:40:38,308 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:40:38,308 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-12-02 16:40:38,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:38,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-12-02 16:40:38,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=188, Invalid=2164, Unknown=0, NotChecked=0, Total=2352 [2023-12-02 16:40:38,310 INFO L87 Difference]: Start difference. First operand 1348 states and 1599 transitions. Second operand has 10 states, 9 states have (on average 9.666666666666666) internal successors, (87), 9 states have internal predecessors, (87), 4 states have call successors, (21), 4 states have call predecessors, (21), 4 states have return successors, (22), 4 states have call predecessors, (22), 4 states have call successors, (22) [2023-12-02 16:40:38,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:38,997 INFO L93 Difference]: Finished difference Result 2659 states and 3179 transitions. [2023-12-02 16:40:38,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-12-02 16:40:38,997 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 9.666666666666666) internal successors, (87), 9 states have internal predecessors, (87), 4 states have call successors, (21), 4 states have call predecessors, (21), 4 states have return successors, (22), 4 states have call predecessors, (22), 4 states have call successors, (22) Word has length 113 [2023-12-02 16:40:38,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:39,008 INFO L225 Difference]: With dead ends: 2659 [2023-12-02 16:40:39,008 INFO L226 Difference]: Without dead ends: 2002 [2023-12-02 16:40:39,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 355 GetRequests, 302 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 768 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=228, Invalid=2742, Unknown=0, NotChecked=0, Total=2970 [2023-12-02 16:40:39,011 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 169 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 623 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 704 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 623 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:39,011 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 184 Invalid, 704 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 623 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 16:40:39,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2002 states. [2023-12-02 16:40:39,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2002 to 1342. [2023-12-02 16:40:39,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1342 states, 953 states have (on average 1.2193074501573977) internal successors, (1162), 1037 states have internal predecessors, (1162), 178 states have call successors, (178), 170 states have call predecessors, (178), 210 states have return successors, (234), 201 states have call predecessors, (234), 178 states have call successors, (234) [2023-12-02 16:40:39,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1342 states to 1342 states and 1574 transitions. [2023-12-02 16:40:39,145 INFO L78 Accepts]: Start accepts. Automaton has 1342 states and 1574 transitions. Word has length 113 [2023-12-02 16:40:39,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:39,145 INFO L495 AbstractCegarLoop]: Abstraction has 1342 states and 1574 transitions. [2023-12-02 16:40:39,146 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 9.666666666666666) internal successors, (87), 9 states have internal predecessors, (87), 4 states have call successors, (21), 4 states have call predecessors, (21), 4 states have return successors, (22), 4 states have call predecessors, (22), 4 states have call successors, (22) [2023-12-02 16:40:39,146 INFO L276 IsEmpty]: Start isEmpty. Operand 1342 states and 1574 transitions. [2023-12-02 16:40:39,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2023-12-02 16:40:39,147 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:40:39,148 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:39,153 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-12-02 16:40:39,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-12-02 16:40:39,349 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:40:39,349 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:40:39,349 INFO L85 PathProgramCache]: Analyzing trace with hash 1500277201, now seen corresponding path program 2 times [2023-12-02 16:40:39,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:40:39,349 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [455353385] [2023-12-02 16:40:39,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:40:39,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:40:39,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:40:40,361 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 45 proven. 58 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-12-02 16:40:40,362 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:40:40,362 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [455353385] [2023-12-02 16:40:40,362 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [455353385] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:40:40,362 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [300697198] [2023-12-02 16:40:40,362 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 16:40:40,362 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:40:40,362 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:40:40,363 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:40:40,367 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-12-02 16:40:40,467 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-12-02 16:40:40,468 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 16:40:40,470 INFO L262 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 16:40:40,475 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:40:40,738 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 70 proven. 7 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2023-12-02 16:40:40,739 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:40:41,219 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 56 proven. 7 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2023-12-02 16:40:41,219 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [300697198] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:40:41,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [862487075] [2023-12-02 16:40:41,223 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 16:40:41,223 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:40:41,223 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:40:41,224 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:40:41,224 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:40:43,474 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 149 for LOIs [2023-12-02 16:40:43,568 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:40:43,810 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 31 for LOIs [2023-12-02 16:40:43,894 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 33 for LOIs [2023-12-02 16:40:43,968 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 20 for LOIs [2023-12-02 16:40:43,972 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 22 for LOIs [2023-12-02 16:40:43,974 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 25 for LOIs [2023-12-02 16:40:43,976 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:40:48,416 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28597#(and (<= ~methaneLevelCritical~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (<= 0 ~methaneLevelCritical~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (or (and (<= 0 |timeShift_isMethaneLevelCritical_#res#1|) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 1) (<= |timeShift_isMethaneLevelCritical_#res#1| 1)) (and (= |old(~pumpRunning~0)| 0) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_36| Int)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_36| 2147483648)) (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_36| 0)) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_36| 2147483647))) (= |old(~waterLevel~0)| 0))))' at error location [2023-12-02 16:40:48,416 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:40:48,416 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:40:48,416 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 8, 9] total 32 [2023-12-02 16:40:48,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [767191696] [2023-12-02 16:40:48,416 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:40:48,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2023-12-02 16:40:48,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:40:48,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2023-12-02 16:40:48,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=435, Invalid=4535, Unknown=0, NotChecked=0, Total=4970 [2023-12-02 16:40:48,420 INFO L87 Difference]: Start difference. First operand 1342 states and 1574 transitions. Second operand has 32 states, 30 states have (on average 5.166666666666667) internal successors, (155), 30 states have internal predecessors, (155), 13 states have call successors, (27), 7 states have call predecessors, (27), 11 states have return successors, (31), 14 states have call predecessors, (31), 13 states have call successors, (31) [2023-12-02 16:40:49,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:40:49,501 INFO L93 Difference]: Finished difference Result 1636 states and 1926 transitions. [2023-12-02 16:40:49,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-12-02 16:40:49,501 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 5.166666666666667) internal successors, (155), 30 states have internal predecessors, (155), 13 states have call successors, (27), 7 states have call predecessors, (27), 11 states have return successors, (31), 14 states have call predecessors, (31), 13 states have call successors, (31) Word has length 116 [2023-12-02 16:40:49,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:40:49,502 INFO L225 Difference]: With dead ends: 1636 [2023-12-02 16:40:49,502 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 16:40:49,509 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 396 GetRequests, 309 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2875 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=781, Invalid=7051, Unknown=0, NotChecked=0, Total=7832 [2023-12-02 16:40:49,510 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 406 mSDsluCounter, 524 mSDsCounter, 0 mSdLazyCounter, 1059 mSolverCounterSat, 225 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 409 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 1284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 225 IncrementalHoareTripleChecker+Valid, 1059 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 16:40:49,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [409 Valid, 578 Invalid, 1284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [225 Valid, 1059 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-12-02 16:40:49,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 16:40:49,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 16:40:49,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:40:49,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 16:40:49,511 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2023-12-02 16:40:49,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:40:49,511 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 16:40:49,512 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 5.166666666666667) internal successors, (155), 30 states have internal predecessors, (155), 13 states have call successors, (27), 7 states have call predecessors, (27), 11 states have return successors, (31), 14 states have call predecessors, (31), 13 states have call successors, (31) [2023-12-02 16:40:49,512 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 16:40:49,512 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 16:40:49,514 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 16:40:49,520 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2023-12-02 16:40:49,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2023-12-02 16:40:49,717 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 16:40:55,983 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2023-12-02 16:40:55,983 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 183 190) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (= 0 ~systemActive~0) .cse1))) [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 90 96) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 90 96) the Hoare annotation is: true [2023-12-02 16:40:55,984 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 909 920) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 2 ~waterLevel~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 (not (= ~pumpRunning~0 1)) (= 0 ~systemActive~0)) (or (not (= ~waterLevel~0 1)) .cse2 .cse1) (or .cse2 .cse0 .cse1))) [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 909 920) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L801(lines 776 805) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 776 805) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L797(line 797) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 794) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L902 garLoopResultBuilder]: At program point L790-1(lines 790 794) the Hoare annotation is: true [2023-12-02 16:40:55,984 INFO L902 garLoopResultBuilder]: At program point L786-2(lines 786 800) the Hoare annotation is: true [2023-12-02 16:40:55,984 INFO L902 garLoopResultBuilder]: At program point L782(line 782) the Hoare annotation is: true [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L782-1(line 782) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 776 805) the Hoare annotation is: true [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L878(line 878) no Hoare annotation was computed. [2023-12-02 16:40:55,984 INFO L899 garLoopResultBuilder]: For program point L77-1(lines 77 83) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L895 garLoopResultBuilder]: At program point L164(line 164) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2) (or (and (= |timeShift_processEnvironment_~tmp~2#1| 0) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 .cse1 .cse2) (or .cse3 .cse1) (or .cse3 (not (= |old(~waterLevel~0)| 1))))) [2023-12-02 16:40:55,985 INFO L895 garLoopResultBuilder]: At program point L160(line 160) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1) (or (and (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse2 .cse1 .cse3) (or (not (= ~methaneLevelCritical~0 0)) .cse2 .cse1 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-12-02 16:40:55,985 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse5)) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse4) (or .cse0 .cse3 (and .cse1 (= ~waterLevel~0 1))) (or .cse0 .cse2 .cse4) (or (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse5)))) [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L169-1(lines 150 174) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L70-1(lines 69 88) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 66 89) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 1)) .cse3 (= 0 ~systemActive~0) (and .cse2 (= ~pumpRunning~0 1))))) [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L158(lines 158 166) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L154(lines 154 171) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L761(lines 761 767) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L757(lines 757 770) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point L757-1(lines 749 773) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 89) no Hoare annotation was computed. [2023-12-02 16:40:55,985 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 878) no Hoare annotation was computed. [2023-12-02 16:40:55,986 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse5 (= 2 ~waterLevel~0)) (.cse1 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse7 (not .cse9)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse4 .cse7 .cse8) (and .cse0 .cse5 .cse6 .cse2 .cse9 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse9 .cse4) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse4 .cse7 .cse8)))) [2023-12-02 16:40:55,986 INFO L895 garLoopResultBuilder]: At program point L738(lines 687 739) the Hoare annotation is: false [2023-12-02 16:40:55,986 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2023-12-02 16:40:55,986 INFO L895 garLoopResultBuilder]: At program point L726-2(lines 718 733) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse5 (= 2 ~waterLevel~0)) (.cse1 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse2 .cse4 .cse7 .cse8) (and .cse0 .cse5 .cse6 .cse2 .cse4) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse4 .cse7 .cse8))) [2023-12-02 16:40:55,986 INFO L899 garLoopResultBuilder]: For program point L689(lines 688 737) no Hoare annotation was computed. [2023-12-02 16:40:55,986 INFO L899 garLoopResultBuilder]: For program point L718(lines 718 733) no Hoare annotation was computed. [2023-12-02 16:40:55,986 INFO L895 garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse5 (= 2 ~waterLevel~0)) (.cse1 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse2 .cse4 .cse7 .cse8) (and .cse0 .cse5 .cse6 .cse2 .cse4) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse4 .cse7 .cse8))) [2023-12-02 16:40:55,986 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2023-12-02 16:40:55,986 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L895 garLoopResultBuilder]: At program point L735(lines 688 737) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse5 (= 2 ~waterLevel~0)) (.cse1 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse7 (not .cse9)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse4 .cse7 .cse8) (and .cse0 .cse5 .cse6 .cse2 .cse9 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse9 .cse4) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse4 .cse7 .cse8)))) [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 867) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L860-2(lines 860 867) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L741(lines 678 745) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 714) no Hoare annotation was computed. [2023-12-02 16:40:55,987 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 708 714) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (let ((.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (= ~pumpRunning~0 1))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2 .cse3) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3))) [2023-12-02 16:40:55,988 INFO L895 garLoopResultBuilder]: At program point L112(line 112) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) .cse1))) [2023-12-02 16:40:55,988 INFO L899 garLoopResultBuilder]: For program point L106(lines 106 114) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 98 122) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-12-02 16:40:55,988 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 119) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 98 122) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L895 garLoopResultBuilder]: At program point L117(line 117) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-12-02 16:40:55,988 INFO L899 garLoopResultBuilder]: For program point L117-1(lines 98 122) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 897 908) no Hoare annotation was computed. [2023-12-02 16:40:55,988 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 897 908) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)) (or .cse1 (not (= ~pumpRunning~0 1)) .cse2 .cse3))) [2023-12-02 16:40:55,989 INFO L899 garLoopResultBuilder]: For program point L128(lines 128 145) no Hoare annotation was computed. [2023-12-02 16:40:55,989 INFO L895 garLoopResultBuilder]: At program point L143(line 143) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse3 .cse0 .cse1 .cse2) (or .cse3 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2))) [2023-12-02 16:40:55,989 INFO L899 garLoopResultBuilder]: For program point L143-1(lines 124 148) no Hoare annotation was computed. [2023-12-02 16:40:55,989 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 124 148) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse3 .cse0 .cse1 .cse2) (or .cse3 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 (= ~pumpRunning~0 1)))) [2023-12-02 16:40:55,989 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 124 148) no Hoare annotation was computed. [2023-12-02 16:40:55,989 INFO L895 garLoopResultBuilder]: At program point L138(line 138) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 (not (= 2 ~waterLevel~0)) .cse1) (or .cse0 .cse2 .cse1))) [2023-12-02 16:40:55,989 INFO L895 garLoopResultBuilder]: At program point L134(line 134) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~1#1|) (= ~pumpRunning~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 (not (= 2 ~waterLevel~0)) .cse1) (or .cse0 .cse2 .cse1))) [2023-12-02 16:40:55,989 INFO L899 garLoopResultBuilder]: For program point L132(lines 132 140) no Hoare annotation was computed. [2023-12-02 16:40:55,992 INFO L445 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:40:55,994 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 16:40:56,007 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 04:40:56 BoogieIcfgContainer [2023-12-02 16:40:56,008 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 16:40:56,008 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 16:40:56,008 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 16:40:56,008 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 16:40:56,009 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:40:00" (3/4) ... [2023-12-02 16:40:56,010 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 16:40:56,013 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 16:40:56,020 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 45 nodes and edges [2023-12-02 16:40:56,020 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 16:40:56,021 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 16:40:56,021 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:40:56,022 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:40:56,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1)) || ((((((2 == waterLevel) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1))) || ((((((2 == waterLevel) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-12-02 16:40:56,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 1)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-12-02 16:40:56,076 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1)) || ((((((2 == waterLevel) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1))) || ((((((2 == waterLevel) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-12-02 16:40:56,078 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 1)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-12-02 16:40:56,128 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 16:40:56,129 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 16:40:56,129 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 16:40:56,130 INFO L158 Benchmark]: Toolchain (without parser) took 57104.42ms. Allocated memory was 157.3MB in the beginning and 809.5MB in the end (delta: 652.2MB). Free memory was 117.2MB in the beginning and 471.2MB in the end (delta: -354.0MB). Peak memory consumption was 300.9MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,131 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 157.3MB. Free memory was 131.2MB in the beginning and 131.0MB in the end (delta: 169.6kB). There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 16:40:56,131 INFO L158 Benchmark]: CACSL2BoogieTranslator took 436.88ms. Allocated memory is still 157.3MB. Free memory was 116.8MB in the beginning and 97.0MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,131 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.41ms. Allocated memory is still 157.3MB. Free memory was 97.0MB in the beginning and 94.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,132 INFO L158 Benchmark]: Boogie Preprocessor took 33.62ms. Allocated memory is still 157.3MB. Free memory was 94.9MB in the beginning and 93.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,132 INFO L158 Benchmark]: RCFGBuilder took 542.58ms. Allocated memory is still 157.3MB. Free memory was 93.2MB in the beginning and 124.1MB in the end (delta: -30.9MB). Peak memory consumption was 33.4MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,133 INFO L158 Benchmark]: TraceAbstraction took 55907.46ms. Allocated memory was 157.3MB in the beginning and 809.5MB in the end (delta: 652.2MB). Free memory was 123.4MB in the beginning and 479.6MB in the end (delta: -356.2MB). Peak memory consumption was 492.2MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,133 INFO L158 Benchmark]: Witness Printer took 121.41ms. Allocated memory is still 809.5MB. Free memory was 479.6MB in the beginning and 471.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-12-02 16:40:56,135 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 157.3MB. Free memory was 131.2MB in the beginning and 131.0MB in the end (delta: 169.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 436.88ms. Allocated memory is still 157.3MB. Free memory was 116.8MB in the beginning and 97.0MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.41ms. Allocated memory is still 157.3MB. Free memory was 97.0MB in the beginning and 94.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.62ms. Allocated memory is still 157.3MB. Free memory was 94.9MB in the beginning and 93.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 542.58ms. Allocated memory is still 157.3MB. Free memory was 93.2MB in the beginning and 124.1MB in the end (delta: -30.9MB). Peak memory consumption was 33.4MB. Max. memory is 16.1GB. * TraceAbstraction took 55907.46ms. Allocated memory was 157.3MB in the beginning and 809.5MB in the end (delta: 652.2MB). Free memory was 123.4MB in the beginning and 479.6MB in the end (delta: -356.2MB). Peak memory consumption was 492.2MB. Max. memory is 16.1GB. * Witness Printer took 121.41ms. Allocated memory is still 809.5MB. Free memory was 479.6MB in the beginning and 471.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 308]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] - GenericResultAtLocation [Line: 674]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] - GenericResultAtLocation [Line: 746]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [746] - GenericResultAtLocation [Line: 774]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [774] - GenericResultAtLocation [Line: 873]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [873] - GenericResultAtLocation [Line: 882]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [882] - GenericResultAtLocation [Line: 985]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 878]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 67 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 55.8s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 15.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3819 SdHoareTripleChecker+Valid, 6.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3769 mSDsluCounter, 3968 SdHoareTripleChecker+Invalid, 5.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3103 mSDsCounter, 2026 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6952 IncrementalHoareTripleChecker+Invalid, 8978 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2026 mSolverCounterUnsat, 865 mSDtfsCounter, 6952 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1525 GetRequests, 1084 SyntacticMatches, 4 SemanticMatches, 437 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15019 ImplicationChecksByTransitivity, 22.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1348occurred in iteration=12, InterpolantAutomatonStates: 247, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 14 MinimizatonAttempts, 1987 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 25 LocationsWithAnnotation, 1649 PreInvPairs, 1714 NumberOfFragments, 1158 HoareAnnotationTreeSize, 1649 FomulaSimplifications, 62705 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 25 FomulaSimplificationsInter, 32125 FormulaSimplificationTreeSizeReductionInter, 5.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.9s InterpolantComputationTime, 1240 NumberOfCodeBlocks, 1157 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1568 ConstructedInterpolants, 0 QuantifiedInterpolants, 4670 SizeOfPredicates, 36 NumberOfNonLiveVariables, 1641 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 24 InterpolantComputations, 10 PerfectInterpolantSequences, 880/1073 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 4.0s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 47, DAG_INTERPRETER_EARLY_EXITS: 1, TOOLS_POST_APPLICATIONS: 61, TOOLS_POST_TIME: 1.8s, TOOLS_POST_CALL_APPLICATIONS: 29, TOOLS_POST_CALL_TIME: 0.8s, TOOLS_POST_RETURN_APPLICATIONS: 24, TOOLS_POST_RETURN_TIME: 0.7s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 114, TOOLS_QUANTIFIERELIM_TIME: 3.2s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.4s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 142, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 25, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.1s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 47, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 3.2s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 3.2s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 24, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 414, DAG_COMPRESSION_RETAINED_NODES: 116, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 687]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1)) || ((((((2 == waterLevel) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (0 == systemActive)) && (tmp == 1))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1))) || ((((((2 == waterLevel) && (!((\old(methaneLevelCritical) == 0)) || (methaneLevelCritical == 1))) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 1)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((2 == waterLevel) && (pumpRunning == 1)))) - InvariantResult [Line: 786]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-12-02 16:40:56,159 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea47101e-4a22-4773-8e43-0ce08c7c6de3/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE