./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7c7779f94f1738e754b88f9a8a8e36de7065a4e94578f4135106bd0ff9ddb13d --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 16:43:31,418 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 16:43:31,491 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 16:43:31,495 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 16:43:31,496 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 16:43:31,521 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 16:43:31,521 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 16:43:31,522 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 16:43:31,523 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 16:43:31,523 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 16:43:31,524 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 16:43:31,524 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 16:43:31,525 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 16:43:31,525 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 16:43:31,526 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 16:43:31,526 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 16:43:31,527 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 16:43:31,527 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 16:43:31,527 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 16:43:31,528 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 16:43:31,528 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 16:43:31,529 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 16:43:31,530 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 16:43:31,530 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 16:43:31,531 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 16:43:31,531 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 16:43:31,532 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 16:43:31,532 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 16:43:31,533 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 16:43:31,533 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 16:43:31,534 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 16:43:31,534 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 16:43:31,535 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 16:43:31,535 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 16:43:31,535 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 16:43:31,536 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 16:43:31,536 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 16:43:31,536 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:43:31,536 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 16:43:31,536 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 16:43:31,537 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 16:43:31,537 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 16:43:31,537 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 16:43:31,537 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 16:43:31,537 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 16:43:31,538 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 16:43:31,538 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 16:43:31,538 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7c7779f94f1738e754b88f9a8a8e36de7065a4e94578f4135106bd0ff9ddb13d [2023-12-02 16:43:31,747 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 16:43:31,768 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 16:43:31,771 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 16:43:31,772 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 16:43:31,773 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 16:43:31,774 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c [2023-12-02 16:43:34,510 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 16:43:34,721 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 16:43:34,721 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c [2023-12-02 16:43:34,736 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/data/e4756f76e/89a470301a044663827ef937242d7a15/FLAGe194ce752 [2023-12-02 16:43:34,747 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/data/e4756f76e/89a470301a044663827ef937242d7a15 [2023-12-02 16:43:34,750 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 16:43:34,752 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 16:43:34,753 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 16:43:34,753 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 16:43:34,758 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 16:43:34,759 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:43:34" (1/1) ... [2023-12-02 16:43:34,760 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7b14af4c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:34, skipping insertion in model container [2023-12-02 16:43:34,761 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:43:34" (1/1) ... [2023-12-02 16:43:34,809 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 16:43:35,030 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c[15018,15031] [2023-12-02 16:43:35,050 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:43:35,061 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 16:43:35,071 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-12-02 16:43:35,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2023-12-02 16:43:35,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [519] [2023-12-02 16:43:35,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [554] [2023-12-02 16:43:35,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] [2023-12-02 16:43:35,073 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [691] [2023-12-02 16:43:35,074 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [700] [2023-12-02 16:43:35,074 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [958] [2023-12-02 16:43:35,122 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c[15018,15031] [2023-12-02 16:43:35,133 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:43:35,154 INFO L206 MainTranslator]: Completed translation [2023-12-02 16:43:35,154 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35 WrapperNode [2023-12-02 16:43:35,154 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 16:43:35,155 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 16:43:35,156 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 16:43:35,156 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 16:43:35,163 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,177 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,202 INFO L138 Inliner]: procedures = 58, calls = 106, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 241 [2023-12-02 16:43:35,202 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 16:43:35,203 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 16:43:35,203 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 16:43:35,203 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 16:43:35,211 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,211 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,213 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,213 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,218 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,221 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,223 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,224 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,226 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 16:43:35,227 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 16:43:35,227 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 16:43:35,227 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 16:43:35,228 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (1/1) ... [2023-12-02 16:43:35,234 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:43:35,249 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:43:35,263 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 16:43:35,266 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 16:43:35,291 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 16:43:35,291 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 16:43:35,291 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 16:43:35,292 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 16:43:35,292 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 16:43:35,292 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 16:43:35,292 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 16:43:35,292 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:43:35,292 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:43:35,292 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 16:43:35,293 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 16:43:35,293 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:43:35,293 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:43:35,293 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 16:43:35,293 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 16:43:35,293 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 16:43:35,294 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 16:43:35,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 16:43:35,294 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 16:43:35,294 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 16:43:35,294 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 16:43:35,294 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 16:43:35,374 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 16:43:35,376 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 16:43:35,608 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 16:43:35,721 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 16:43:35,721 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 16:43:35,723 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:43:35 BoogieIcfgContainer [2023-12-02 16:43:35,723 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 16:43:35,726 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 16:43:35,726 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 16:43:35,729 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 16:43:35,729 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 04:43:34" (1/3) ... [2023-12-02 16:43:35,730 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4bb0ca3a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:43:35, skipping insertion in model container [2023-12-02 16:43:35,731 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:43:35" (2/3) ... [2023-12-02 16:43:35,731 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4bb0ca3a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:43:35, skipping insertion in model container [2023-12-02 16:43:35,731 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:43:35" (3/3) ... [2023-12-02 16:43:35,732 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product63.cil.c [2023-12-02 16:43:35,756 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 16:43:35,756 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 16:43:35,804 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 16:43:35,811 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5962b2a9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 16:43:35,812 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 16:43:35,816 INFO L276 IsEmpty]: Start isEmpty. Operand has 73 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 56 states have internal predecessors, (65), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-12-02 16:43:35,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-12-02 16:43:35,825 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:35,825 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:35,826 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:35,831 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:35,831 INFO L85 PathProgramCache]: Analyzing trace with hash -2033655671, now seen corresponding path program 1 times [2023-12-02 16:43:35,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:35,841 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1720874245] [2023-12-02 16:43:35,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:35,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:35,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:35,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:36,000 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:36,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1720874245] [2023-12-02 16:43:36,001 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1720874245] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:36,001 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:36,001 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 16:43:36,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1863757498] [2023-12-02 16:43:36,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:36,008 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 16:43:36,008 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:36,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 16:43:36,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:43:36,040 INFO L87 Difference]: Start difference. First operand has 73 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 56 states have internal predecessors, (65), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:36,109 INFO L93 Difference]: Finished difference Result 144 states and 199 transitions. [2023-12-02 16:43:36,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 16:43:36,111 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-12-02 16:43:36,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:36,121 INFO L225 Difference]: With dead ends: 144 [2023-12-02 16:43:36,121 INFO L226 Difference]: Without dead ends: 68 [2023-12-02 16:43:36,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:43:36,129 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:36,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 78 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:43:36,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-12-02 16:43:36,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-12-02 16:43:36,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 42 states have (on average 1.3571428571428572) internal successors, (57), 52 states have internal predecessors, (57), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-12-02 16:43:36,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 90 transitions. [2023-12-02 16:43:36,174 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 90 transitions. Word has length 12 [2023-12-02 16:43:36,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:36,174 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 90 transitions. [2023-12-02 16:43:36,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,175 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 90 transitions. [2023-12-02 16:43:36,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-12-02 16:43:36,176 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:36,177 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:36,177 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 16:43:36,177 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:36,178 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:36,178 INFO L85 PathProgramCache]: Analyzing trace with hash 627374081, now seen corresponding path program 1 times [2023-12-02 16:43:36,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:36,178 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1670466692] [2023-12-02 16:43:36,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:36,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:36,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:36,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:36,265 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:36,266 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1670466692] [2023-12-02 16:43:36,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1670466692] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:36,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:36,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:43:36,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2039142007] [2023-12-02 16:43:36,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:36,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:43:36,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:36,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:43:36,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:43:36,269 INFO L87 Difference]: Start difference. First operand 68 states and 90 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:36,312 INFO L93 Difference]: Finished difference Result 108 states and 142 transitions. [2023-12-02 16:43:36,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:43:36,312 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-12-02 16:43:36,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:36,314 INFO L225 Difference]: With dead ends: 108 [2023-12-02 16:43:36,314 INFO L226 Difference]: Without dead ends: 60 [2023-12-02 16:43:36,315 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:43:36,317 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 14 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:36,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 111 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:43:36,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2023-12-02 16:43:36,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 60. [2023-12-02 16:43:36,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 37 states have (on average 1.3783783783783783) internal successors, (51), 47 states have internal predecessors, (51), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-12-02 16:43:36,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 79 transitions. [2023-12-02 16:43:36,329 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 79 transitions. Word has length 13 [2023-12-02 16:43:36,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:36,330 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 79 transitions. [2023-12-02 16:43:36,330 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,330 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 79 transitions. [2023-12-02 16:43:36,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-12-02 16:43:36,331 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:36,331 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:36,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 16:43:36,332 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:36,332 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:36,332 INFO L85 PathProgramCache]: Analyzing trace with hash 2128038948, now seen corresponding path program 1 times [2023-12-02 16:43:36,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:36,333 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877387818] [2023-12-02 16:43:36,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:36,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:36,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:36,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:36,440 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:36,440 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877387818] [2023-12-02 16:43:36,440 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1877387818] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:36,440 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:36,440 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:43:36,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355246867] [2023-12-02 16:43:36,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:36,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:43:36,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:36,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:43:36,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:43:36,442 INFO L87 Difference]: Start difference. First operand 60 states and 79 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:36,588 INFO L93 Difference]: Finished difference Result 161 states and 218 transitions. [2023-12-02 16:43:36,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 16:43:36,589 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-12-02 16:43:36,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:36,591 INFO L225 Difference]: With dead ends: 161 [2023-12-02 16:43:36,591 INFO L226 Difference]: Without dead ends: 103 [2023-12-02 16:43:36,592 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:43:36,593 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 92 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:36,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 144 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:43:36,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2023-12-02 16:43:36,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 86. [2023-12-02 16:43:36,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 55 states have (on average 1.3818181818181818) internal successors, (76), 68 states have internal predecessors, (76), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2023-12-02 16:43:36,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 113 transitions. [2023-12-02 16:43:36,613 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 113 transitions. Word has length 16 [2023-12-02 16:43:36,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:36,613 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 113 transitions. [2023-12-02 16:43:36,614 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,614 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 113 transitions. [2023-12-02 16:43:36,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-12-02 16:43:36,615 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:36,616 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:36,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 16:43:36,616 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:36,617 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:36,617 INFO L85 PathProgramCache]: Analyzing trace with hash 333125851, now seen corresponding path program 1 times [2023-12-02 16:43:36,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:36,617 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205483753] [2023-12-02 16:43:36,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:36,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:36,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:36,793 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:36,793 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:36,794 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205483753] [2023-12-02 16:43:36,794 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1205483753] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:36,794 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:36,794 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:43:36,794 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631863122] [2023-12-02 16:43:36,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:36,795 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:43:36,795 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:36,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:43:36,796 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:43:36,796 INFO L87 Difference]: Start difference. First operand 86 states and 113 transitions. Second operand has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:36,931 INFO L93 Difference]: Finished difference Result 261 states and 349 transitions. [2023-12-02 16:43:36,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 16:43:36,932 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-12-02 16:43:36,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:36,935 INFO L225 Difference]: With dead ends: 261 [2023-12-02 16:43:36,935 INFO L226 Difference]: Without dead ends: 177 [2023-12-02 16:43:36,936 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2023-12-02 16:43:36,937 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 89 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:36,938 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 205 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:43:36,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2023-12-02 16:43:36,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 168. [2023-12-02 16:43:36,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 114 states have (on average 1.3157894736842106) internal successors, (150), 131 states have internal predecessors, (150), 28 states have call successors, (28), 22 states have call predecessors, (28), 25 states have return successors, (34), 25 states have call predecessors, (34), 28 states have call successors, (34) [2023-12-02 16:43:36,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 212 transitions. [2023-12-02 16:43:36,967 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 212 transitions. Word has length 19 [2023-12-02 16:43:36,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:36,967 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 212 transitions. [2023-12-02 16:43:36,967 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:43:36,968 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 212 transitions. [2023-12-02 16:43:36,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-12-02 16:43:36,970 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:36,970 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:36,970 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 16:43:36,970 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:36,970 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:36,971 INFO L85 PathProgramCache]: Analyzing trace with hash -1890710108, now seen corresponding path program 1 times [2023-12-02 16:43:36,971 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:36,971 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744583053] [2023-12-02 16:43:36,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:36,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:36,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:37,155 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:37,156 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:37,156 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744583053] [2023-12-02 16:43:37,156 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1744583053] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:37,156 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:37,156 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 16:43:37,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666062510] [2023-12-02 16:43:37,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:37,157 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 16:43:37,157 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:37,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 16:43:37,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-12-02 16:43:37,159 INFO L87 Difference]: Start difference. First operand 168 states and 212 transitions. Second operand has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 16:43:37,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:37,662 INFO L93 Difference]: Finished difference Result 457 states and 600 transitions. [2023-12-02 16:43:37,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-12-02 16:43:37,663 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 22 [2023-12-02 16:43:37,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:37,668 INFO L225 Difference]: With dead ends: 457 [2023-12-02 16:43:37,668 INFO L226 Difference]: Without dead ends: 373 [2023-12-02 16:43:37,669 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2023-12-02 16:43:37,671 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 253 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 104 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 270 SdHoareTripleChecker+Valid, 288 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 104 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:37,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [270 Valid, 288 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [104 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 16:43:37,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2023-12-02 16:43:37,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 334. [2023-12-02 16:43:37,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 230 states have (on average 1.2826086956521738) internal successors, (295), 259 states have internal predecessors, (295), 53 states have call successors, (53), 43 states have call predecessors, (53), 50 states have return successors, (69), 51 states have call predecessors, (69), 53 states have call successors, (69) [2023-12-02 16:43:37,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 417 transitions. [2023-12-02 16:43:37,727 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 417 transitions. Word has length 22 [2023-12-02 16:43:37,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:37,727 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 417 transitions. [2023-12-02 16:43:37,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 16:43:37,727 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 417 transitions. [2023-12-02 16:43:37,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-12-02 16:43:37,732 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:37,732 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:37,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 16:43:37,733 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:37,733 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:37,733 INFO L85 PathProgramCache]: Analyzing trace with hash 1996704669, now seen corresponding path program 1 times [2023-12-02 16:43:37,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:37,734 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [309020248] [2023-12-02 16:43:37,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:37,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:37,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:38,025 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:38,026 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:38,026 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [309020248] [2023-12-02 16:43:38,026 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [309020248] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:38,026 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:38,026 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-12-02 16:43:38,027 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956417053] [2023-12-02 16:43:38,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:38,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-12-02 16:43:38,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:38,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-12-02 16:43:38,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2023-12-02 16:43:38,029 INFO L87 Difference]: Start difference. First operand 334 states and 417 transitions. Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:43:38,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:38,392 INFO L93 Difference]: Finished difference Result 506 states and 655 transitions. [2023-12-02 16:43:38,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-12-02 16:43:38,392 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 53 [2023-12-02 16:43:38,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:38,395 INFO L225 Difference]: With dead ends: 506 [2023-12-02 16:43:38,396 INFO L226 Difference]: Without dead ends: 335 [2023-12-02 16:43:38,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=107, Unknown=0, NotChecked=0, Total=156 [2023-12-02 16:43:38,398 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 143 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 293 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 369 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 293 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:38,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 165 Invalid, 369 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 293 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 16:43:38,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2023-12-02 16:43:38,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 276. [2023-12-02 16:43:38,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 189 states have (on average 1.3015873015873016) internal successors, (246), 214 states have internal predecessors, (246), 44 states have call successors, (44), 35 states have call predecessors, (44), 42 states have return successors, (60), 42 states have call predecessors, (60), 44 states have call successors, (60) [2023-12-02 16:43:38,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 350 transitions. [2023-12-02 16:43:38,443 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 350 transitions. Word has length 53 [2023-12-02 16:43:38,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:38,443 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 350 transitions. [2023-12-02 16:43:38,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 8 states have internal predecessors, (42), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:43:38,443 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 350 transitions. [2023-12-02 16:43:38,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-12-02 16:43:38,446 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:38,446 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:38,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 16:43:38,447 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:38,447 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:38,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1411634325, now seen corresponding path program 1 times [2023-12-02 16:43:38,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:38,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1369760492] [2023-12-02 16:43:38,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:38,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:38,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:38,549 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-12-02 16:43:38,549 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:38,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1369760492] [2023-12-02 16:43:38,550 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1369760492] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:38,550 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:38,550 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 16:43:38,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1611366688] [2023-12-02 16:43:38,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:38,551 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 16:43:38,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:38,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 16:43:38,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:43:38,552 INFO L87 Difference]: Start difference. First operand 276 states and 350 transitions. Second operand has 6 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:43:38,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:38,738 INFO L93 Difference]: Finished difference Result 662 states and 856 transitions. [2023-12-02 16:43:38,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 16:43:38,738 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 3 states have call successors, (7) Word has length 60 [2023-12-02 16:43:38,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:38,743 INFO L225 Difference]: With dead ends: 662 [2023-12-02 16:43:38,743 INFO L226 Difference]: Without dead ends: 548 [2023-12-02 16:43:38,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 16:43:38,745 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 56 mSDsluCounter, 217 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:38,745 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 279 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:43:38,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2023-12-02 16:43:38,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 522. [2023-12-02 16:43:38,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 522 states, 367 states have (on average 1.3051771117166213) internal successors, (479), 406 states have internal predecessors, (479), 78 states have call successors, (78), 62 states have call predecessors, (78), 76 states have return successors, (110), 76 states have call predecessors, (110), 78 states have call successors, (110) [2023-12-02 16:43:38,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 522 states to 522 states and 667 transitions. [2023-12-02 16:43:38,839 INFO L78 Accepts]: Start accepts. Automaton has 522 states and 667 transitions. Word has length 60 [2023-12-02 16:43:38,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:38,840 INFO L495 AbstractCegarLoop]: Abstraction has 522 states and 667 transitions. [2023-12-02 16:43:38,840 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:43:38,840 INFO L276 IsEmpty]: Start isEmpty. Operand 522 states and 667 transitions. [2023-12-02 16:43:38,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2023-12-02 16:43:38,843 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:38,843 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:38,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 16:43:38,843 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:38,843 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:38,844 INFO L85 PathProgramCache]: Analyzing trace with hash -356658417, now seen corresponding path program 1 times [2023-12-02 16:43:38,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:38,844 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1207238919] [2023-12-02 16:43:38,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:38,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:38,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:38,894 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 16:43:38,895 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:38,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1207238919] [2023-12-02 16:43:38,895 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1207238919] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:38,895 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:43:38,895 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:43:38,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452382645] [2023-12-02 16:43:38,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:38,896 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:43:38,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:38,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:43:38,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:43:38,897 INFO L87 Difference]: Start difference. First operand 522 states and 667 transitions. Second operand has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-12-02 16:43:39,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:39,049 INFO L93 Difference]: Finished difference Result 1062 states and 1353 transitions. [2023-12-02 16:43:39,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 16:43:39,050 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 64 [2023-12-02 16:43:39,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:39,053 INFO L225 Difference]: With dead ends: 1062 [2023-12-02 16:43:39,053 INFO L226 Difference]: Without dead ends: 446 [2023-12-02 16:43:39,055 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:43:39,056 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 103 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:39,056 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 138 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:43:39,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2023-12-02 16:43:39,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 367. [2023-12-02 16:43:39,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 367 states, 251 states have (on average 1.254980079681275) internal successors, (315), 277 states have internal predecessors, (315), 56 states have call successors, (56), 47 states have call predecessors, (56), 59 states have return successors, (72), 57 states have call predecessors, (72), 56 states have call successors, (72) [2023-12-02 16:43:39,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 367 states to 367 states and 443 transitions. [2023-12-02 16:43:39,107 INFO L78 Accepts]: Start accepts. Automaton has 367 states and 443 transitions. Word has length 64 [2023-12-02 16:43:39,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:39,107 INFO L495 AbstractCegarLoop]: Abstraction has 367 states and 443 transitions. [2023-12-02 16:43:39,107 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-12-02 16:43:39,108 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 443 transitions. [2023-12-02 16:43:39,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-12-02 16:43:39,109 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:39,109 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:39,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 16:43:39,110 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:39,110 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:39,110 INFO L85 PathProgramCache]: Analyzing trace with hash 821402790, now seen corresponding path program 1 times [2023-12-02 16:43:39,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:39,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41251927] [2023-12-02 16:43:39,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:39,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:39,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:39,315 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:43:39,315 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:39,315 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41251927] [2023-12-02 16:43:39,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41251927] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:43:39,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1959312260] [2023-12-02 16:43:39,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:39,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:39,316 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:43:39,321 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:43:39,322 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 16:43:39,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:39,404 INFO L262 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 7 conjunts are in the unsatisfiable core [2023-12-02 16:43:39,410 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:43:39,475 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-12-02 16:43:39,475 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:43:39,475 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1959312260] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:39,475 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:43:39,475 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 11 [2023-12-02 16:43:39,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1753538162] [2023-12-02 16:43:39,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:39,476 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:43:39,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:39,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:43:39,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2023-12-02 16:43:39,477 INFO L87 Difference]: Start difference. First operand 367 states and 443 transitions. Second operand has 5 states, 4 states have (on average 9.5) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:43:39,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:39,707 INFO L93 Difference]: Finished difference Result 639 states and 807 transitions. [2023-12-02 16:43:39,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 16:43:39,708 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 61 [2023-12-02 16:43:39,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:39,711 INFO L225 Difference]: With dead ends: 639 [2023-12-02 16:43:39,711 INFO L226 Difference]: Without dead ends: 461 [2023-12-02 16:43:39,712 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2023-12-02 16:43:39,713 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 127 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:39,713 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 151 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 16:43:39,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 461 states. [2023-12-02 16:43:39,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 461 to 426. [2023-12-02 16:43:39,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 294 states have (on average 1.2244897959183674) internal successors, (360), 316 states have internal predecessors, (360), 58 states have call successors, (58), 57 states have call predecessors, (58), 73 states have return successors, (78), 69 states have call predecessors, (78), 58 states have call successors, (78) [2023-12-02 16:43:39,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 496 transitions. [2023-12-02 16:43:39,745 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 496 transitions. Word has length 61 [2023-12-02 16:43:39,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:39,745 INFO L495 AbstractCegarLoop]: Abstraction has 426 states and 496 transitions. [2023-12-02 16:43:39,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:43:39,745 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 496 transitions. [2023-12-02 16:43:39,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-12-02 16:43:39,747 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:39,747 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:39,753 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 16:43:39,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-12-02 16:43:39,949 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:39,950 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:39,950 INFO L85 PathProgramCache]: Analyzing trace with hash 683161800, now seen corresponding path program 1 times [2023-12-02 16:43:39,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:39,950 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870368602] [2023-12-02 16:43:39,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:39,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:39,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:40,466 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 16:43:40,467 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:40,467 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870368602] [2023-12-02 16:43:40,467 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870368602] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:43:40,467 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1880173739] [2023-12-02 16:43:40,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:40,467 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:40,467 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:43:40,468 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:43:40,477 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 16:43:40,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:40,557 INFO L262 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 7 conjunts are in the unsatisfiable core [2023-12-02 16:43:40,560 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:43:40,602 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-12-02 16:43:40,603 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:43:40,603 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1880173739] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:40,603 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:43:40,603 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [16] total 18 [2023-12-02 16:43:40,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472581447] [2023-12-02 16:43:40,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:40,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:43:40,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:40,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:43:40,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2023-12-02 16:43:40,605 INFO L87 Difference]: Start difference. First operand 426 states and 496 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2023-12-02 16:43:40,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:40,706 INFO L93 Difference]: Finished difference Result 437 states and 506 transitions. [2023-12-02 16:43:40,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 16:43:40,706 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 63 [2023-12-02 16:43:40,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:40,709 INFO L225 Difference]: With dead ends: 437 [2023-12-02 16:43:40,709 INFO L226 Difference]: Without dead ends: 406 [2023-12-02 16:43:40,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=290, Unknown=0, NotChecked=0, Total=342 [2023-12-02 16:43:40,710 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 54 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:40,711 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 165 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:43:40,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 406 states. [2023-12-02 16:43:40,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 406 to 373. [2023-12-02 16:43:40,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 255 states have (on average 1.1764705882352942) internal successors, (300), 273 states have internal predecessors, (300), 51 states have call successors, (51), 50 states have call predecessors, (51), 66 states have return successors, (71), 60 states have call predecessors, (71), 51 states have call successors, (71) [2023-12-02 16:43:40,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 422 transitions. [2023-12-02 16:43:40,742 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 422 transitions. Word has length 63 [2023-12-02 16:43:40,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:40,742 INFO L495 AbstractCegarLoop]: Abstraction has 373 states and 422 transitions. [2023-12-02 16:43:40,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2023-12-02 16:43:40,742 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 422 transitions. [2023-12-02 16:43:40,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2023-12-02 16:43:40,744 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:40,744 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:40,749 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 16:43:40,945 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:40,946 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:40,946 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:40,946 INFO L85 PathProgramCache]: Analyzing trace with hash 1376973202, now seen corresponding path program 1 times [2023-12-02 16:43:40,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:40,946 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211954782] [2023-12-02 16:43:40,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:40,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:40,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:41,097 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 7 proven. 14 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-12-02 16:43:41,097 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:41,097 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211954782] [2023-12-02 16:43:41,098 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211954782] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:43:41,098 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1474286913] [2023-12-02 16:43:41,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:41,098 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:41,098 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:43:41,099 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:43:41,105 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 16:43:41,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:41,186 INFO L262 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 18 conjunts are in the unsatisfiable core [2023-12-02 16:43:41,190 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:43:41,319 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 28 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:43:41,319 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:43:41,435 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 14 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-12-02 16:43:41,435 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1474286913] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:43:41,435 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1772916646] [2023-12-02 16:43:41,453 INFO L159 IcfgInterpreter]: Started Sifa with 39 locations of interest [2023-12-02 16:43:41,453 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:43:41,455 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:43:41,459 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:43:41,460 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:43:47,523 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 138 for LOIs [2023-12-02 16:43:47,633 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 18 for LOIs [2023-12-02 16:43:47,720 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 19 for LOIs [2023-12-02 16:43:47,762 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 19 for LOIs [2023-12-02 16:43:47,837 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 20 for LOIs [2023-12-02 16:43:47,841 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:43:50,028 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1772916646] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:43:50,028 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:43:50,029 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [8, 6, 6] total 39 [2023-12-02 16:43:50,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190542086] [2023-12-02 16:43:50,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:43:50,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-12-02 16:43:50,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:43:50,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-12-02 16:43:50,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1322, Unknown=0, NotChecked=0, Total=1482 [2023-12-02 16:43:50,031 INFO L87 Difference]: Start difference. First operand 373 states and 422 transitions. Second operand has 28 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 23 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:43:56,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:43:56,756 INFO L93 Difference]: Finished difference Result 988 states and 1277 transitions. [2023-12-02 16:43:56,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2023-12-02 16:43:56,757 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 23 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 67 [2023-12-02 16:43:56,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:43:56,761 INFO L225 Difference]: With dead ends: 988 [2023-12-02 16:43:56,762 INFO L226 Difference]: Without dead ends: 682 [2023-12-02 16:43:56,766 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 170 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1709 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=863, Invalid=5779, Unknown=0, NotChecked=0, Total=6642 [2023-12-02 16:43:56,766 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 316 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 1444 mSolverCounterSat, 221 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 331 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 1665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 1444 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2023-12-02 16:43:56,767 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [331 Valid, 396 Invalid, 1665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 1444 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2023-12-02 16:43:56,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 682 states. [2023-12-02 16:43:56,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 682 to 381. [2023-12-02 16:43:56,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 259 states have (on average 1.1544401544401544) internal successors, (299), 277 states have internal predecessors, (299), 55 states have call successors, (55), 54 states have call predecessors, (55), 66 states have return successors, (72), 59 states have call predecessors, (72), 55 states have call successors, (72) [2023-12-02 16:43:56,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 426 transitions. [2023-12-02 16:43:56,817 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 426 transitions. Word has length 67 [2023-12-02 16:43:56,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:43:56,818 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 426 transitions. [2023-12-02 16:43:56,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 23 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:43:56,818 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 426 transitions. [2023-12-02 16:43:56,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2023-12-02 16:43:56,819 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:43:56,819 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:43:56,824 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 16:43:57,020 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:57,020 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:43:57,020 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:43:57,020 INFO L85 PathProgramCache]: Analyzing trace with hash -1303914607, now seen corresponding path program 1 times [2023-12-02 16:43:57,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:43:57,021 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786003390] [2023-12-02 16:43:57,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:57,021 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:43:57,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:57,383 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-12-02 16:43:57,384 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:43:57,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786003390] [2023-12-02 16:43:57,384 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786003390] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:43:57,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1611066803] [2023-12-02 16:43:57,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:43:57,384 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:43:57,384 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:43:57,385 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:43:57,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 16:43:57,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:43:57,471 INFO L262 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 31 conjunts are in the unsatisfiable core [2023-12-02 16:43:57,475 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:43:57,714 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 10 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-12-02 16:43:57,714 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:43:58,029 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 9 proven. 5 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-12-02 16:43:58,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1611066803] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:43:58,029 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [262808700] [2023-12-02 16:43:58,033 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 16:43:58,033 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:43:58,033 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:43:58,034 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:43:58,034 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:44:03,937 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 18 for LOIs [2023-12-02 16:44:03,940 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 18 for LOIs [2023-12-02 16:44:04,101 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 1 for LOIs [2023-12-02 16:44:04,140 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 14 for LOIs [2023-12-02 16:44:04,215 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 23 for LOIs [2023-12-02 16:44:04,220 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 7 for LOIs [2023-12-02 16:44:04,221 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:44:06,714 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12710#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1| 0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~waterLevel~0 0))' at error location [2023-12-02 16:44:06,715 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:44:06,715 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:44:06,715 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 13] total 32 [2023-12-02 16:44:06,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [40859840] [2023-12-02 16:44:06,715 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:44:06,716 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2023-12-02 16:44:06,716 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:44:06,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2023-12-02 16:44:06,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=453, Invalid=3969, Unknown=0, NotChecked=0, Total=4422 [2023-12-02 16:44:06,719 INFO L87 Difference]: Start difference. First operand 381 states and 426 transitions. Second operand has 32 states, 29 states have (on average 4.0) internal successors, (116), 29 states have internal predecessors, (116), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 12 states have call predecessors, (21), 11 states have call successors, (21) [2023-12-02 16:44:11,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:44:11,180 INFO L93 Difference]: Finished difference Result 1558 states and 1892 transitions. [2023-12-02 16:44:11,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 92 states. [2023-12-02 16:44:11,181 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 29 states have (on average 4.0) internal successors, (116), 29 states have internal predecessors, (116), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 12 states have call predecessors, (21), 11 states have call successors, (21) Word has length 71 [2023-12-02 16:44:11,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:44:11,192 INFO L225 Difference]: With dead ends: 1558 [2023-12-02 16:44:11,193 INFO L226 Difference]: Without dead ends: 1351 [2023-12-02 16:44:11,206 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 174 SyntacticMatches, 2 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7902 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=2377, Invalid=18215, Unknown=0, NotChecked=0, Total=20592 [2023-12-02 16:44:11,207 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 1357 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 1920 mSolverCounterSat, 860 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1366 SdHoareTripleChecker+Valid, 884 SdHoareTripleChecker+Invalid, 2780 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 860 IncrementalHoareTripleChecker+Valid, 1920 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-12-02 16:44:11,207 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1366 Valid, 884 Invalid, 2780 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [860 Valid, 1920 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2023-12-02 16:44:11,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1351 states. [2023-12-02 16:44:11,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1351 to 1242. [2023-12-02 16:44:11,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1242 states, 852 states have (on average 1.176056338028169) internal successors, (1002), 909 states have internal predecessors, (1002), 176 states have call successors, (176), 161 states have call predecessors, (176), 213 states have return successors, (277), 200 states have call predecessors, (277), 176 states have call successors, (277) [2023-12-02 16:44:11,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1242 states to 1242 states and 1455 transitions. [2023-12-02 16:44:11,445 INFO L78 Accepts]: Start accepts. Automaton has 1242 states and 1455 transitions. Word has length 71 [2023-12-02 16:44:11,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:44:11,446 INFO L495 AbstractCegarLoop]: Abstraction has 1242 states and 1455 transitions. [2023-12-02 16:44:11,446 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 29 states have (on average 4.0) internal successors, (116), 29 states have internal predecessors, (116), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 12 states have call predecessors, (21), 11 states have call successors, (21) [2023-12-02 16:44:11,447 INFO L276 IsEmpty]: Start isEmpty. Operand 1242 states and 1455 transitions. [2023-12-02 16:44:11,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2023-12-02 16:44:11,450 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:44:11,450 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:44:11,457 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 16:44:11,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:44:11,653 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:44:11,653 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:44:11,653 INFO L85 PathProgramCache]: Analyzing trace with hash -1925960739, now seen corresponding path program 2 times [2023-12-02 16:44:11,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:44:11,653 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704967343] [2023-12-02 16:44:11,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:44:11,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:44:11,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:44:12,217 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 34 proven. 20 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-12-02 16:44:12,217 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:44:12,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704967343] [2023-12-02 16:44:12,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704967343] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:44:12,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1433096868] [2023-12-02 16:44:12,218 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 16:44:12,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:44:12,218 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:44:12,219 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:44:12,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 16:44:12,312 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-12-02 16:44:12,312 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 16:44:12,313 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 10 conjunts are in the unsatisfiable core [2023-12-02 16:44:12,317 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:44:12,405 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-12-02 16:44:12,405 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:44:12,406 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1433096868] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:44:12,406 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:44:12,406 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [15] total 18 [2023-12-02 16:44:12,406 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [52590374] [2023-12-02 16:44:12,406 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:44:12,407 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:44:12,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:44:12,407 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:44:12,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=253, Unknown=0, NotChecked=0, Total=306 [2023-12-02 16:44:12,408 INFO L87 Difference]: Start difference. First operand 1242 states and 1455 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2023-12-02 16:44:12,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:44:12,739 INFO L93 Difference]: Finished difference Result 2561 states and 3059 transitions. [2023-12-02 16:44:12,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 16:44:12,740 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 106 [2023-12-02 16:44:12,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:44:12,749 INFO L225 Difference]: With dead ends: 2561 [2023-12-02 16:44:12,750 INFO L226 Difference]: Without dead ends: 1397 [2023-12-02 16:44:12,754 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 106 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=315, Unknown=0, NotChecked=0, Total=380 [2023-12-02 16:44:12,754 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 59 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:44:12,755 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 327 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:44:12,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1397 states. [2023-12-02 16:44:12,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1397 to 1326. [2023-12-02 16:44:12,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1326 states, 916 states have (on average 1.168122270742358) internal successors, (1070), 975 states have internal predecessors, (1070), 192 states have call successors, (192), 171 states have call predecessors, (192), 217 states have return successors, (295), 206 states have call predecessors, (295), 192 states have call successors, (295) [2023-12-02 16:44:12,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1326 states to 1326 states and 1557 transitions. [2023-12-02 16:44:12,972 INFO L78 Accepts]: Start accepts. Automaton has 1326 states and 1557 transitions. Word has length 106 [2023-12-02 16:44:12,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:44:12,973 INFO L495 AbstractCegarLoop]: Abstraction has 1326 states and 1557 transitions. [2023-12-02 16:44:12,973 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2023-12-02 16:44:12,973 INFO L276 IsEmpty]: Start isEmpty. Operand 1326 states and 1557 transitions. [2023-12-02 16:44:12,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2023-12-02 16:44:12,976 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:44:12,976 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:44:12,982 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-12-02 16:44:13,177 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-12-02 16:44:13,177 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:44:13,177 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:44:13,177 INFO L85 PathProgramCache]: Analyzing trace with hash -851188761, now seen corresponding path program 1 times [2023-12-02 16:44:13,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:44:13,178 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1077533674] [2023-12-02 16:44:13,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:44:13,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:44:13,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:44:13,535 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 52 proven. 57 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2023-12-02 16:44:13,536 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:44:13,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1077533674] [2023-12-02 16:44:13,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1077533674] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:44:13,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1074868539] [2023-12-02 16:44:13,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:44:13,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:44:13,536 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:44:13,538 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:44:13,541 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-12-02 16:44:13,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:44:13,669 INFO L262 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 23 conjunts are in the unsatisfiable core [2023-12-02 16:44:13,674 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:44:13,828 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 102 proven. 3 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-12-02 16:44:13,828 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:44:14,095 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 59 proven. 9 refuted. 0 times theorem prover too weak. 66 trivial. 0 not checked. [2023-12-02 16:44:14,096 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1074868539] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:44:14,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [907215518] [2023-12-02 16:44:14,099 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2023-12-02 16:44:14,099 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:44:14,100 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:44:14,100 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:44:14,100 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:44:16,376 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 20 for LOIs [2023-12-02 16:44:16,379 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 20 for LOIs [2023-12-02 16:44:16,709 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 3 for LOIs [2023-12-02 16:44:16,757 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 17 for LOIs [2023-12-02 16:44:16,839 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 26 for LOIs [2023-12-02 16:44:16,844 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 16 for LOIs [2023-12-02 16:44:16,847 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 9 for LOIs [2023-12-02 16:44:16,848 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 44 for LOIs [2023-12-02 16:44:16,861 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:44:20,210 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22716#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1| 0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (<= 0 ~methaneLevelCritical~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~waterLevel~0 0))' at error location [2023-12-02 16:44:20,210 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:44:20,210 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:44:20,210 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 9] total 22 [2023-12-02 16:44:20,211 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1269505598] [2023-12-02 16:44:20,211 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:44:20,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-12-02 16:44:20,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:44:20,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-12-02 16:44:20,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=342, Invalid=3564, Unknown=0, NotChecked=0, Total=3906 [2023-12-02 16:44:20,214 INFO L87 Difference]: Start difference. First operand 1326 states and 1557 transitions. Second operand has 22 states, 17 states have (on average 8.117647058823529) internal successors, (138), 17 states have internal predecessors, (138), 8 states have call successors, (33), 6 states have call predecessors, (33), 10 states have return successors, (35), 12 states have call predecessors, (35), 7 states have call successors, (35) [2023-12-02 16:44:21,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:44:21,482 INFO L93 Difference]: Finished difference Result 2578 states and 3098 transitions. [2023-12-02 16:44:21,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2023-12-02 16:44:21,483 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 17 states have (on average 8.117647058823529) internal successors, (138), 17 states have internal predecessors, (138), 8 states have call successors, (33), 6 states have call predecessors, (33), 10 states have return successors, (35), 12 states have call predecessors, (35), 7 states have call successors, (35) Word has length 129 [2023-12-02 16:44:21,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:44:21,493 INFO L225 Difference]: With dead ends: 2578 [2023-12-02 16:44:21,493 INFO L226 Difference]: Without dead ends: 1975 [2023-12-02 16:44:21,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 433 GetRequests, 343 SyntacticMatches, 6 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2592 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=695, Invalid=6615, Unknown=0, NotChecked=0, Total=7310 [2023-12-02 16:44:21,500 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 429 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 1052 mSolverCounterSat, 257 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 430 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 1309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 257 IncrementalHoareTripleChecker+Valid, 1052 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-12-02 16:44:21,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [430 Valid, 236 Invalid, 1309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [257 Valid, 1052 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-12-02 16:44:21,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1975 states. [2023-12-02 16:44:21,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1975 to 1880. [2023-12-02 16:44:21,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1880 states, 1305 states have (on average 1.1586206896551725) internal successors, (1512), 1376 states have internal predecessors, (1512), 267 states have call successors, (267), 248 states have call predecessors, (267), 307 states have return successors, (409), 289 states have call predecessors, (409), 267 states have call successors, (409) [2023-12-02 16:44:21,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1880 states to 1880 states and 2188 transitions. [2023-12-02 16:44:21,704 INFO L78 Accepts]: Start accepts. Automaton has 1880 states and 2188 transitions. Word has length 129 [2023-12-02 16:44:21,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:44:21,704 INFO L495 AbstractCegarLoop]: Abstraction has 1880 states and 2188 transitions. [2023-12-02 16:44:21,704 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 17 states have (on average 8.117647058823529) internal successors, (138), 17 states have internal predecessors, (138), 8 states have call successors, (33), 6 states have call predecessors, (33), 10 states have return successors, (35), 12 states have call predecessors, (35), 7 states have call successors, (35) [2023-12-02 16:44:21,704 INFO L276 IsEmpty]: Start isEmpty. Operand 1880 states and 2188 transitions. [2023-12-02 16:44:21,707 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2023-12-02 16:44:21,707 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:44:21,707 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:44:21,712 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2023-12-02 16:44:21,909 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2023-12-02 16:44:21,909 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:44:21,910 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:44:21,910 INFO L85 PathProgramCache]: Analyzing trace with hash -95136306, now seen corresponding path program 2 times [2023-12-02 16:44:21,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:44:21,910 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452864962] [2023-12-02 16:44:21,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:44:21,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:44:21,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:44:23,035 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 47 proven. 60 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-12-02 16:44:23,035 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:44:23,036 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452864962] [2023-12-02 16:44:23,036 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452864962] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:44:23,036 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1738671199] [2023-12-02 16:44:23,036 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 16:44:23,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:44:23,036 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:44:23,037 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:44:23,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2023-12-02 16:44:23,130 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-12-02 16:44:23,130 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 16:44:23,132 INFO L262 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 16:44:23,136 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:44:23,360 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 79 proven. 9 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2023-12-02 16:44:23,360 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:44:23,702 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 59 proven. 7 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2023-12-02 16:44:23,702 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1738671199] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:44:23,702 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [331258548] [2023-12-02 16:44:23,705 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2023-12-02 16:44:23,705 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:44:23,706 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:44:23,706 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:44:23,706 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:44:25,758 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 20 for LOIs [2023-12-02 16:44:25,762 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 20 for LOIs [2023-12-02 16:44:25,861 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 29 for LOIs [2023-12-02 16:44:25,938 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 42 for LOIs [2023-12-02 16:44:26,110 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 42 for LOIs [2023-12-02 16:44:26,127 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 16 for LOIs [2023-12-02 16:44:26,129 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 11 for LOIs [2023-12-02 16:44:26,130 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 16 for LOIs [2023-12-02 16:44:26,132 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:44:29,903 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29415#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1| 0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (<= 0 ~methaneLevelCritical~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~waterLevel~0 0))' at error location [2023-12-02 16:44:29,903 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:44:29,904 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:44:29,904 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 8, 9] total 36 [2023-12-02 16:44:29,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132533556] [2023-12-02 16:44:29,904 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:44:29,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2023-12-02 16:44:29,905 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:44:29,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2023-12-02 16:44:29,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=498, Invalid=5664, Unknown=0, NotChecked=0, Total=6162 [2023-12-02 16:44:29,908 INFO L87 Difference]: Start difference. First operand 1880 states and 2188 transitions. Second operand has 36 states, 33 states have (on average 4.9393939393939394) internal successors, (163), 33 states have internal predecessors, (163), 13 states have call successors, (33), 7 states have call predecessors, (33), 12 states have return successors, (39), 16 states have call predecessors, (39), 12 states have call successors, (39) [2023-12-02 16:44:34,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:44:34,184 INFO L93 Difference]: Finished difference Result 3968 states and 4928 transitions. [2023-12-02 16:44:34,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2023-12-02 16:44:34,185 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 33 states have (on average 4.9393939393939394) internal successors, (163), 33 states have internal predecessors, (163), 13 states have call successors, (33), 7 states have call predecessors, (33), 12 states have return successors, (39), 16 states have call predecessors, (39), 12 states have call successors, (39) Word has length 132 [2023-12-02 16:44:34,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:44:34,186 INFO L225 Difference]: With dead ends: 3968 [2023-12-02 16:44:34,187 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 16:44:34,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 511 GetRequests, 367 SyntacticMatches, 0 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7588 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=2240, Invalid=18930, Unknown=0, NotChecked=0, Total=21170 [2023-12-02 16:44:34,202 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 1405 mSDsluCounter, 1012 mSDsCounter, 0 mSdLazyCounter, 2101 mSolverCounterSat, 1009 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1405 SdHoareTripleChecker+Valid, 1087 SdHoareTripleChecker+Invalid, 3110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1009 IncrementalHoareTripleChecker+Valid, 2101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2023-12-02 16:44:34,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1405 Valid, 1087 Invalid, 3110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1009 Valid, 2101 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2023-12-02 16:44:34,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 16:44:34,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 16:44:34,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:44:34,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 16:44:34,204 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2023-12-02 16:44:34,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:44:34,204 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 16:44:34,204 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 33 states have (on average 4.9393939393939394) internal successors, (163), 33 states have internal predecessors, (163), 13 states have call successors, (33), 7 states have call predecessors, (33), 12 states have return successors, (39), 16 states have call predecessors, (39), 12 states have call successors, (39) [2023-12-02 16:44:34,204 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 16:44:34,205 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 16:44:34,207 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 16:44:34,213 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2023-12-02 16:44:34,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2023-12-02 16:44:34,410 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 16:44:58,313 WARN L293 SmtUtils]: Spent 13.75s on a formula simplification. DAG size of input: 370 DAG size of output: 261 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2023-12-02 16:45:13,317 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 841 848) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 841 848) the Hoare annotation is: (= ~pumpRunning~0 |old(~pumpRunning~0)|) [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2023-12-02 16:45:13,318 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 615 626) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse3 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (< ~waterLevel~0 2)) (.cse0 (not (= ~waterLevel~0 1))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse5 .cse4) (or .cse6 .cse7 (not (= ~pumpRunning~0 1)) .cse5 .cse4) (or .cse6 .cse1 .cse7 .cse5 .cse4) (or .cse0 .cse6 .cse1 .cse7 .cse4))) [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 615 626) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 807) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point L795(lines 795 812) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point L696(line 696) no Hoare annotation was computed. [2023-12-02 16:45:13,318 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2023-12-02 16:45:13,319 INFO L895 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse2 (and (not (= |old(~waterLevel~0)| 1)) (<= |old(~waterLevel~0)| 1))) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse3) (or .cse0 .cse5 .cse2 .cse3) (or .cse4 .cse5 (not (= |old(~pumpRunning~0)| 1)) (and (= |timeShift_processEnvironment_~tmp~7#1| 0) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= ~pumpRunning~0 1)) .cse3) (or .cse0 (not .cse3)))) [2023-12-02 16:45:13,319 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (not (= |old(~waterLevel~0)| 1)) (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (= |timeShift_processEnvironment_~tmp~7#1| 1))) (or .cse4 .cse5 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse0 .cse5 .cse2 .cse3) (or .cse0 (not .cse3)))) [2023-12-02 16:45:13,319 INFO L895 garLoopResultBuilder]: At program point L797(line 797) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (not (= |old(~waterLevel~0)| 1)) (<= |old(~waterLevel~0)| 1))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse0 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or .cse4 .cse5 .cse6 .cse3) (or .cse4 .cse2 .cse6 .cse3) (or .cse1 .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse3) (or .cse4 (not .cse3)))) [2023-12-02 16:45:13,319 INFO L899 garLoopResultBuilder]: For program point L797-1(line 797) no Hoare annotation was computed. [2023-12-02 16:45:13,319 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 576) no Hoare annotation was computed. [2023-12-02 16:45:13,319 INFO L899 garLoopResultBuilder]: For program point L566(lines 566 579) no Hoare annotation was computed. [2023-12-02 16:45:13,319 INFO L899 garLoopResultBuilder]: For program point L566-1(lines 558 582) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse3 (< |old(~waterLevel~0)| 2)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse1 (= ~waterLevel~0 1))) (.cse0 (not .cse6)) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse3 (and .cse1 .cse6 .cse2) .cse7 .cse5) (or .cse0 .cse8 .cse9 .cse7 .cse5) (or .cse3 .cse4 (not (= |old(~pumpRunning~0)| 1)) .cse5) (or .cse0 .cse8 .cse4 .cse9 .cse5) (or .cse0 (not .cse5))))) [2023-12-02 16:45:13,320 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 707 730) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse5)) (.cse6 (and (not (= |old(~waterLevel~0)| 1)) (<= |old(~waterLevel~0)| 1))) (.cse3 (< |old(~waterLevel~0)| 2)) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse4 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and .cse5 (= ~pumpRunning~0 1))) (or .cse0 .cse1 .cse4 .cse6 .cse2) (or .cse0 .cse1 .cse7 .cse6 .cse2) (or .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse7 .cse2)))) [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point L810-1(lines 791 815) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 696) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point L443(lines 418 447) no Hoare annotation was computed. [2023-12-02 16:45:13,320 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2023-12-02 16:45:13,321 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2023-12-02 16:45:13,321 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 418 447) the Hoare annotation is: true [2023-12-02 16:45:13,321 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L989(lines 989 995) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L989-1(lines 989 995) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 513) no Hoare annotation was computed. [2023-12-02 16:45:13,321 INFO L899 garLoopResultBuilder]: For program point L506-2(lines 506 513) no Hoare annotation was computed. [2023-12-02 16:45:13,322 INFO L895 garLoopResultBuilder]: At program point L1014(lines 969 1016) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 1)) (.cse9 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse9)) (.cse2 (or (< 1 ~waterLevel~0) .cse10)) (.cse3 (<= 0 (+ |ULTIMATE.start_test_~tmp~11#1| 2147483648))) (.cse5 (<= 0 (+ |ULTIMATE.start_test_~tmp___0~3#1| 2147483648))) (.cse6 (<= |ULTIMATE.start_test_~tmp___0~3#1| 2147483647)) (.cse8 (<= |ULTIMATE.start_test_~tmp~11#1| 2147483647)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~pumpRunning~0 1)) (and .cse0 .cse2 .cse3 (= ~methaneLevelCritical~0 1) .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse4 .cse9) (let ((.cse11 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (<= 1 |#StackHeapBarrier|) .cse0 (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) .cse1 (= |ULTIMATE.start_valid_product_#res#1| 1) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) .cse4 (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= 9 (select |#length| 11)) .cse10 (= (select .cse11 0) 48) (= (select |#valid| 6) 1) (= (select .cse11 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (= ~cleanupTimeShifts~0 4)))))) [2023-12-02 16:45:13,322 INFO L895 garLoopResultBuilder]: At program point L981(line 981) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0)) (.cse9 (= ~waterLevel~0 1))) (let ((.cse2 (or (< 1 ~waterLevel~0) .cse9)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 0 (+ |ULTIMATE.start_test_~tmp~11#1| 2147483648))) (.cse5 (<= 0 (+ |ULTIMATE.start_test_~tmp___0~3#1| 2147483648))) (.cse6 (<= |ULTIMATE.start_test_~tmp___0~3#1| 2147483647)) (.cse7 (not .cse11)) (.cse8 (<= |ULTIMATE.start_test_~tmp~11#1| 2147483647)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (let ((.cse10 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (<= 1 |#StackHeapBarrier|) .cse0 (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (not (= |ULTIMATE.start_test_~tmp~11#1| 0)) .cse1 (= |ULTIMATE.start_valid_product_#res#1| 1) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) .cse3 (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) .cse4 (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= 9 (select |#length| 11)) .cse9 (= (select .cse10 0) 48) (= (select |#valid| 6) 1) (= (select .cse10 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) .cse8 (= (select |#valid| 13) 1) (= ~cleanupTimeShifts~0 4))) (and .cse0 .cse2 .cse3 (= ~methaneLevelCritical~0 1) .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~pumpRunning~0 1)) (and .cse0 .cse4 .cse11)))) [2023-12-02 16:45:13,322 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L970(lines 969 1016) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L999(lines 999 1012) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L895 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse1 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse2 (<= 0 (+ |ULTIMATE.start_test_~tmp~11#1| 2147483648))) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 0 (+ |ULTIMATE.start_test_~tmp___0~3#1| 2147483648))) (.cse5 (<= |ULTIMATE.start_test_~tmp___0~3#1| 2147483647)) (.cse6 (not .cse10)) (.cse7 (<= |ULTIMATE.start_test_~tmp~11#1| 2147483647))) (or (and .cse0 (or (< 1 ~waterLevel~0) .cse1) .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ~pumpRunning~0 1)) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse1 .cse5 .cse6 .cse7) (and .cse0 .cse3 .cse10) (and .cse0 .cse8 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7)))) [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L1020(lines 959 1024) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L979(lines 979 985) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L979-1(lines 979 985) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 16:45:13,323 INFO L895 garLoopResultBuilder]: At program point L1017(lines 968 1018) the Hoare annotation is: false [2023-12-02 16:45:13,323 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2023-12-02 16:45:13,324 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2023-12-02 16:45:13,324 INFO L899 garLoopResultBuilder]: For program point L1005(lines 1005 1011) no Hoare annotation was computed. [2023-12-02 16:45:13,324 INFO L895 garLoopResultBuilder]: At program point L1005-2(lines 999 1012) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse2 (= ~methaneLevelCritical~0 1)) (.cse6 (not .cse11)) (.cse9 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~waterLevel~0 1)) (.cse1 (<= 0 (+ |ULTIMATE.start_test_~tmp~11#1| 2147483648))) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 0 (+ |ULTIMATE.start_test_~tmp___0~3#1| 2147483648))) (.cse5 (<= |ULTIMATE.start_test_~tmp___0~3#1| 2147483647)) (.cse7 (<= |ULTIMATE.start_test_~tmp~11#1| 2147483647))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7 (= ~pumpRunning~0 1)) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse10 .cse5 .cse6 .cse7) (and .cse9 .cse3 .cse11) (and .cse9 .cse8 (or (< 1 ~waterLevel~0) .cse10) .cse1 .cse3 .cse4 .cse5 .cse7)))) [2023-12-02 16:45:13,324 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (let ((.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2023-12-02 16:45:13,324 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2023-12-02 16:45:13,324 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 763) the Hoare annotation is: (let ((.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3))) [2023-12-02 16:45:13,324 INFO L895 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (< ~waterLevel~0 2)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse2 .cse5 .cse3 .cse6))) [2023-12-02 16:45:13,324 INFO L899 garLoopResultBuilder]: For program point L829-1(line 829) no Hoare annotation was computed. [2023-12-02 16:45:13,324 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2023-12-02 16:45:13,325 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 1))) (let ((.cse0 (not .cse5)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse7 (= 0 ~systemActive~0))) (and (or (and .cse0 (<= ~waterLevel~0 1)) .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) (not (= ~methaneLevelCritical~0 1)) .cse7) (or .cse1 .cse8 (< ~waterLevel~0 2) .cse7) (or .cse0 .cse1 .cse8 (and .cse2 .cse3 .cse4 .cse6) .cse7)))) [2023-12-02 16:45:13,325 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2023-12-02 16:45:13,325 INFO L899 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2023-12-02 16:45:13,325 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 603 614) no Hoare annotation was computed. [2023-12-02 16:45:13,325 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 603 614) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (not (= |old(~waterLevel~0)| 1)) (<= |old(~waterLevel~0)| 1))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse3 .cse1) (or (< |old(~waterLevel~0)| 2) .cse4 (not (= ~pumpRunning~0 1)) .cse1 .cse2) (or .cse0 .cse4 .cse3 .cse1))) [2023-12-02 16:45:13,325 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse2))) [2023-12-02 16:45:13,325 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 765 789) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse4) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1)))) [2023-12-02 16:45:13,326 INFO L895 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and (< 0 |processEnvironment__wrappee__methaneQuery_~tmp~6#1|) (= ~pumpRunning~0 1))))) [2023-12-02 16:45:13,326 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2023-12-02 16:45:13,326 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2023-12-02 16:45:13,326 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse4) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4))) [2023-12-02 16:45:13,326 INFO L899 garLoopResultBuilder]: For program point L784-1(lines 765 789) no Hoare annotation was computed. [2023-12-02 16:45:13,326 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 765 789) no Hoare annotation was computed. [2023-12-02 16:45:13,326 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 849 859) no Hoare annotation was computed. [2023-12-02 16:45:13,326 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 849 859) the Hoare annotation is: true [2023-12-02 16:45:13,329 INFO L445 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:45:13,331 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 16:45:13,345 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[15] could not be translated [2023-12-02 16:45:13,346 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[5] could not be translated [2023-12-02 16:45:13,346 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[9] could not be translated [2023-12-02 16:45:13,347 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[7] could not be translated [2023-12-02 16:45:13,347 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[5] could not be translated [2023-12-02 16:45:13,347 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[3] could not be translated [2023-12-02 16:45:13,348 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[15] could not be translated [2023-12-02 16:45:13,348 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[9] could not be translated [2023-12-02 16:45:13,348 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[12] could not be translated [2023-12-02 16:45:13,349 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[11] could not be translated [2023-12-02 16:45:13,349 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[4] could not be translated [2023-12-02 16:45:13,349 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[2] could not be translated [2023-12-02 16:45:13,350 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[1] could not be translated [2023-12-02 16:45:13,350 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[8] could not be translated [2023-12-02 16:45:13,350 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[3] could not be translated [2023-12-02 16:45:13,350 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[7] could not be translated [2023-12-02 16:45:13,351 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[13] could not be translated [2023-12-02 16:45:13,351 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[10] could not be translated [2023-12-02 16:45:13,351 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[12] could not be translated [2023-12-02 16:45:13,351 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[4] could not be translated [2023-12-02 16:45:13,352 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[1] could not be translated [2023-12-02 16:45:13,352 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[6] could not be translated [2023-12-02 16:45:13,352 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[14] could not be translated [2023-12-02 16:45:13,352 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[14] could not be translated [2023-12-02 16:45:13,353 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[0] could not be translated [2023-12-02 16:45:13,353 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[2] could not be translated [2023-12-02 16:45:13,353 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #length[11] could not be translated [2023-12-02 16:45:13,353 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #memory_int[1][0] could not be translated [2023-12-02 16:45:13,354 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[6] could not be translated [2023-12-02 16:45:13,354 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #memory_int[1][1] could not be translated [2023-12-02 16:45:13,354 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[10] could not be translated [2023-12-02 16:45:13,354 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[8] could not be translated [2023-12-02 16:45:13,354 WARN L1572 BoogieBacktranslator]: Unfinished Backtranslation: ArrayAccessExpression #valid[13] could not be translated [2023-12-02 16:45:13,357 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 04:45:13 BoogieIcfgContainer [2023-12-02 16:45:13,358 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 16:45:13,358 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 16:45:13,358 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 16:45:13,359 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 16:45:13,359 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:43:35" (3/4) ... [2023-12-02 16:45:13,361 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 16:45:13,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 16:45:13,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 16:45:13,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 16:45:13,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 16:45:13,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 16:45:13,366 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:45:13,366 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 16:45:13,366 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:45:13,366 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 16:45:13,374 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 48 nodes and edges [2023-12-02 16:45:13,375 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 16:45:13,376 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 16:45:13,376 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:45:13,377 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:45:13,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) || (((((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) && (pumpRunning == 1))) || ((((((((pumpRunning == 0) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && (tmp <= 2147483647))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && (cleanupTimeShifts == 4))) [2023-12-02 16:45:13,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive))) && (((((\old(waterLevel) < 2) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (0 == systemActive))) [2023-12-02 16:45:13,442 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) || (((((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) && (pumpRunning == 1))) || ((((((((pumpRunning == 0) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && (tmp <= 2147483647))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && (cleanupTimeShifts == 4))) [2023-12-02 16:45:13,444 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive))) && (((((\old(waterLevel) < 2) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (0 == systemActive))) [2023-12-02 16:45:13,496 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 16:45:13,496 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 16:45:13,496 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 16:45:13,497 INFO L158 Benchmark]: Toolchain (without parser) took 98745.26ms. Allocated memory was 142.6MB in the beginning and 994.1MB in the end (delta: 851.4MB). Free memory was 112.5MB in the beginning and 825.7MB in the end (delta: -713.1MB). Peak memory consumption was 139.8MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,497 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 113.2MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 16:45:13,498 INFO L158 Benchmark]: CACSL2BoogieTranslator took 401.46ms. Allocated memory is still 142.6MB. Free memory was 112.5MB in the beginning and 92.8MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,498 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.19ms. Allocated memory is still 142.6MB. Free memory was 92.3MB in the beginning and 90.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,498 INFO L158 Benchmark]: Boogie Preprocessor took 23.28ms. Allocated memory is still 142.6MB. Free memory was 90.2MB in the beginning and 88.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,499 INFO L158 Benchmark]: RCFGBuilder took 496.32ms. Allocated memory is still 142.6MB. Free memory was 88.5MB in the beginning and 111.0MB in the end (delta: -22.5MB). Peak memory consumption was 32.6MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,499 INFO L158 Benchmark]: TraceAbstraction took 97632.23ms. Allocated memory was 142.6MB in the beginning and 994.1MB in the end (delta: 851.4MB). Free memory was 110.3MB in the beginning and 834.0MB in the end (delta: -723.8MB). Peak memory consumption was 621.0MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,499 INFO L158 Benchmark]: Witness Printer took 138.21ms. Allocated memory is still 994.1MB. Free memory was 834.0MB in the beginning and 825.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-12-02 16:45:13,501 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 113.2MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 401.46ms. Allocated memory is still 142.6MB. Free memory was 112.5MB in the beginning and 92.8MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.19ms. Allocated memory is still 142.6MB. Free memory was 92.3MB in the beginning and 90.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 23.28ms. Allocated memory is still 142.6MB. Free memory was 90.2MB in the beginning and 88.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 496.32ms. Allocated memory is still 142.6MB. Free memory was 88.5MB in the beginning and 111.0MB in the end (delta: -22.5MB). Peak memory consumption was 32.6MB. Max. memory is 16.1GB. * TraceAbstraction took 97632.23ms. Allocated memory was 142.6MB in the beginning and 994.1MB in the end (delta: 851.4MB). Free memory was 110.3MB in the beginning and 834.0MB in the end (delta: -723.8MB). Peak memory consumption was 621.0MB. Max. memory is 16.1GB. * Witness Printer took 138.21ms. Allocated memory is still 994.1MB. Free memory was 834.0MB in the beginning and 825.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 519]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [519] - GenericResultAtLocation [Line: 554]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [554] - GenericResultAtLocation [Line: 583]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] - GenericResultAtLocation [Line: 691]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [691] - GenericResultAtLocation [Line: 700]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [700] - GenericResultAtLocation [Line: 958]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [958] - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[15] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[5] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[9] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[7] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[5] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[3] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[15] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[9] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[12] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[11] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[4] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[2] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[1] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[8] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[3] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[7] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[13] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[10] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[12] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[4] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[1] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[6] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[14] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[14] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[0] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[2] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #length[11] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #memory_int[1][0] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[6] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #memory_int[1][1] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[10] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[8] could not be translated - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: ArrayAccessExpression #valid[13] could not be translated * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 696]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 73 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 97.5s, OverallIterations: 15, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 19.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 38.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4561 SdHoareTripleChecker+Valid, 6.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4497 mSDsluCounter, 4654 SdHoareTripleChecker+Invalid, 5.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3666 mSDsCounter, 2630 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7872 IncrementalHoareTripleChecker+Invalid, 10502 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2630 mSolverCounterUnsat, 988 mSDtfsCounter, 7872 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1849 GetRequests, 1304 SyntacticMatches, 9 SemanticMatches, 536 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20008 ImplicationChecksByTransitivity, 23.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1880occurred in iteration=14, InterpolantAutomatonStates: 320, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 15 MinimizatonAttempts, 873 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 28 LocationsWithAnnotation, 3173 PreInvPairs, 3400 NumberOfFragments, 2157 HoareAnnotationTreeSize, 3173 FomulaSimplifications, 784425 FormulaSimplificationTreeSizeReduction, 24.5s HoareSimplificationTime, 28 FomulaSimplificationsInter, 192994 FormulaSimplificationTreeSizeReductionInter, 14.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 6.1s InterpolantComputationTime, 1517 NumberOfCodeBlocks, 1422 NumberOfCodeBlocksAsserted, 24 NumberOfCheckSat, 1890 ConstructedInterpolants, 0 QuantifiedInterpolants, 5592 SizeOfPredicates, 42 NumberOfNonLiveVariables, 2014 ConjunctsInSsa, 122 ConjunctsInUnsatCore, 26 InterpolantComputations, 11 PerfectInterpolantSequences, 1021/1255 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 6.4s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 6, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 47, DAG_INTERPRETER_EARLY_EXITS: 1, TOOLS_POST_APPLICATIONS: 65, TOOLS_POST_TIME: 2.6s, TOOLS_POST_CALL_APPLICATIONS: 31, TOOLS_POST_CALL_TIME: 1.6s, TOOLS_POST_RETURN_APPLICATIONS: 26, TOOLS_POST_RETURN_TIME: 1.3s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 122, TOOLS_QUANTIFIERELIM_TIME: 5.5s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.5s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 153, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 27, DOMAIN_JOIN_TIME: 0.6s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 47, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 5.1s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 5.1s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 26, CALL_SUMMARIZER_CACHE_MISSES: 5, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 462, DAG_COMPRESSION_RETAINED_NODES: 128, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) || (((((((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (0 <= (tmp + 2147483648))) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && !((0 == systemActive))) && (tmp <= 2147483647)) && (pumpRunning == 1))) || ((((((((pumpRunning == 0) && ((1 < waterLevel) || (waterLevel == 1))) && (0 <= (tmp + 2147483648))) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (0 <= (tmp___0 + 2147483648))) && (tmp___0 <= 2147483647)) && (tmp <= 2147483647))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && (cleanupTimeShifts == 4))) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive))) && (((((\old(waterLevel) < 2) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (!((\old(waterLevel) == 1)) && (\old(waterLevel) <= 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 1))) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-12-02 16:45:13,528 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e274ea2-5149-4188-a301-0f9f47b32d4e/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE