./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 14:10:30,738 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 14:10:30,807 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 14:10:30,813 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 14:10:30,813 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 14:10:30,839 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 14:10:30,840 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 14:10:30,840 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 14:10:30,841 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 14:10:30,841 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 14:10:30,842 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 14:10:30,843 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 14:10:30,843 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 14:10:30,843 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 14:10:30,844 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 14:10:30,844 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 14:10:30,845 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 14:10:30,845 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 14:10:30,846 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 14:10:30,846 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 14:10:30,847 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 14:10:30,848 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 14:10:30,848 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 14:10:30,849 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 14:10:30,849 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 14:10:30,850 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 14:10:30,850 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 14:10:30,850 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 14:10:30,851 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 14:10:30,851 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 14:10:30,852 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 14:10:30,852 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 14:10:30,852 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 14:10:30,853 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 14:10:30,853 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 14:10:30,854 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 14:10:30,854 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 14:10:30,865 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 14:10:30,865 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 14:10:30,865 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 14:10:30,866 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 14:10:30,866 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 14:10:30,866 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 14:10:30,867 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 14:10:30,867 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 14:10:30,867 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 14:10:30,867 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 14:10:30,867 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 [2023-12-02 14:10:31,104 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 14:10:31,126 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 14:10:31,129 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 14:10:31,130 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 14:10:31,130 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 14:10:31,132 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2023-12-02 14:10:33,887 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 14:10:34,134 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 14:10:34,135 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2023-12-02 14:10:34,147 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/data/2be13a4d1/c9a128928c4d42fabe2ea8861df4aaed/FLAGa12ebc7c3 [2023-12-02 14:10:34,158 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/data/2be13a4d1/c9a128928c4d42fabe2ea8861df4aaed [2023-12-02 14:10:34,160 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 14:10:34,162 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 14:10:34,163 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 14:10:34,163 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 14:10:34,168 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 14:10:34,169 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,170 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@ade90cf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34, skipping insertion in model container [2023-12-02 14:10:34,170 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,219 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 14:10:34,344 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2023-12-02 14:10:34,452 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 14:10:34,464 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 14:10:34,474 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-12-02 14:10:34,475 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [58] [2023-12-02 14:10:34,475 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [164] [2023-12-02 14:10:34,476 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [215] [2023-12-02 14:10:34,476 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [581] [2023-12-02 14:10:34,476 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [679] [2023-12-02 14:10:34,476 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [871] [2023-12-02 14:10:34,476 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [906] [2023-12-02 14:10:34,481 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2023-12-02 14:10:34,532 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 14:10:34,551 INFO L206 MainTranslator]: Completed translation [2023-12-02 14:10:34,551 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34 WrapperNode [2023-12-02 14:10:34,551 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 14:10:34,553 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 14:10:34,553 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 14:10:34,553 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 14:10:34,560 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,573 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,598 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 206 [2023-12-02 14:10:34,598 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 14:10:34,599 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 14:10:34,599 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 14:10:34,599 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 14:10:34,610 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,610 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,612 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,613 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,616 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,619 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,621 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,623 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,625 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 14:10:34,625 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 14:10:34,625 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 14:10:34,626 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 14:10:34,626 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (1/1) ... [2023-12-02 14:10:34,631 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 14:10:34,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:10:34,665 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 14:10:34,669 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 14:10:34,694 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 14:10:34,694 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 14:10:34,694 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 14:10:34,694 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 14:10:34,695 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 14:10:34,695 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 14:10:34,695 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 14:10:34,695 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 14:10:34,695 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 14:10:34,695 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 14:10:34,695 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 14:10:34,696 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-12-02 14:10:34,696 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-12-02 14:10:34,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 14:10:34,696 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 14:10:34,696 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 14:10:34,696 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 14:10:34,696 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 14:10:34,774 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 14:10:34,776 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 14:10:34,982 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 14:10:35,083 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 14:10:35,083 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 14:10:35,085 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:10:35 BoogieIcfgContainer [2023-12-02 14:10:35,085 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 14:10:35,088 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 14:10:35,088 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 14:10:35,091 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 14:10:35,092 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 02:10:34" (1/3) ... [2023-12-02 14:10:35,093 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8238857 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 02:10:35, skipping insertion in model container [2023-12-02 14:10:35,093 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:10:34" (2/3) ... [2023-12-02 14:10:35,093 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8238857 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 02:10:35, skipping insertion in model container [2023-12-02 14:10:35,093 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:10:35" (3/3) ... [2023-12-02 14:10:35,095 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product38.cil.c [2023-12-02 14:10:35,113 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 14:10:35,113 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 14:10:35,171 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 14:10:35,176 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@32a7f23f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 14:10:35,176 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 14:10:35,180 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-12-02 14:10:35,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 14:10:35,188 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:35,188 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:35,188 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:35,192 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:35,193 INFO L85 PathProgramCache]: Analyzing trace with hash 1968410651, now seen corresponding path program 1 times [2023-12-02 14:10:35,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:35,200 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1758056966] [2023-12-02 14:10:35,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:35,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:35,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:35,376 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 14:10:35,377 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:35,377 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1758056966] [2023-12-02 14:10:35,378 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1758056966] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:35,378 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:35,378 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 14:10:35,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879831224] [2023-12-02 14:10:35,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:35,386 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 14:10:35,386 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:35,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 14:10:35,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 14:10:35,419 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:35,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:35,479 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2023-12-02 14:10:35,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 14:10:35,481 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-12-02 14:10:35,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:35,489 INFO L225 Difference]: With dead ends: 114 [2023-12-02 14:10:35,489 INFO L226 Difference]: Without dead ends: 53 [2023-12-02 14:10:35,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 14:10:35,495 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:35,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 57 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 14:10:35,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-12-02 14:10:35,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-12-02 14:10:35,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-12-02 14:10:35,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2023-12-02 14:10:35,534 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 21 [2023-12-02 14:10:35,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:35,534 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2023-12-02 14:10:35,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:35,535 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2023-12-02 14:10:35,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-12-02 14:10:35,537 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:35,538 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:35,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 14:10:35,538 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:35,539 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:35,539 INFO L85 PathProgramCache]: Analyzing trace with hash -212175465, now seen corresponding path program 1 times [2023-12-02 14:10:35,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:35,540 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1499395068] [2023-12-02 14:10:35,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:35,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:35,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:35,639 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 14:10:35,640 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:35,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1499395068] [2023-12-02 14:10:35,640 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1499395068] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:35,640 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:35,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 14:10:35,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [118500667] [2023-12-02 14:10:35,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:35,642 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 14:10:35,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:35,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 14:10:35,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 14:10:35,644 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:35,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:35,685 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2023-12-02 14:10:35,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 14:10:35,686 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-12-02 14:10:35,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:35,687 INFO L225 Difference]: With dead ends: 83 [2023-12-02 14:10:35,687 INFO L226 Difference]: Without dead ends: 45 [2023-12-02 14:10:35,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 14:10:35,690 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 7 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:35,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 77 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 14:10:35,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-12-02 14:10:35,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-12-02 14:10:35,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-12-02 14:10:35,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2023-12-02 14:10:35,700 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 22 [2023-12-02 14:10:35,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:35,701 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2023-12-02 14:10:35,701 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:35,701 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2023-12-02 14:10:35,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-12-02 14:10:35,703 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:35,703 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:35,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 14:10:35,704 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:35,704 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:35,704 INFO L85 PathProgramCache]: Analyzing trace with hash -790718053, now seen corresponding path program 1 times [2023-12-02 14:10:35,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:35,705 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602489173] [2023-12-02 14:10:35,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:35,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:35,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:35,869 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 14:10:35,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:35,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602489173] [2023-12-02 14:10:35,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602489173] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:35,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:35,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 14:10:35,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216329774] [2023-12-02 14:10:35,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:35,871 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 14:10:35,871 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:35,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 14:10:35,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 14:10:35,872 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:36,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:36,024 INFO L93 Difference]: Finished difference Result 124 states and 161 transitions. [2023-12-02 14:10:36,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 14:10:36,025 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 24 [2023-12-02 14:10:36,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:36,027 INFO L225 Difference]: With dead ends: 124 [2023-12-02 14:10:36,028 INFO L226 Difference]: Without dead ends: 81 [2023-12-02 14:10:36,029 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 14:10:36,030 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 30 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:36,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 200 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 14:10:36,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2023-12-02 14:10:36,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 79. [2023-12-02 14:10:36,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 52 states have (on average 1.2692307692307692) internal successors, (66), 59 states have internal predecessors, (66), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2023-12-02 14:10:36,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 98 transitions. [2023-12-02 14:10:36,048 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 98 transitions. Word has length 24 [2023-12-02 14:10:36,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:36,048 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 98 transitions. [2023-12-02 14:10:36,049 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 14:10:36,049 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 98 transitions. [2023-12-02 14:10:36,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-12-02 14:10:36,050 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:36,051 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:36,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 14:10:36,051 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:36,052 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:36,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1803828152, now seen corresponding path program 1 times [2023-12-02 14:10:36,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:36,052 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947232196] [2023-12-02 14:10:36,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:36,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:36,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:36,357 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 14:10:36,357 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:36,357 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947232196] [2023-12-02 14:10:36,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947232196] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:36,358 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:36,358 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 14:10:36,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19167373] [2023-12-02 14:10:36,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:36,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-12-02 14:10:36,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:36,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-12-02 14:10:36,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 14:10:36,360 INFO L87 Difference]: Start difference. First operand 79 states and 98 transitions. Second operand has 7 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 14:10:36,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:36,574 INFO L93 Difference]: Finished difference Result 223 states and 278 transitions. [2023-12-02 14:10:36,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 14:10:36,575 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-12-02 14:10:36,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:36,578 INFO L225 Difference]: With dead ends: 223 [2023-12-02 14:10:36,578 INFO L226 Difference]: Without dead ends: 146 [2023-12-02 14:10:36,579 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2023-12-02 14:10:36,580 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 86 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:36,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 182 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 14:10:36,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2023-12-02 14:10:36,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 141. [2023-12-02 14:10:36,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 93 states have (on average 1.2473118279569892) internal successors, (116), 103 states have internal predecessors, (116), 25 states have call successors, (25), 21 states have call predecessors, (25), 22 states have return successors, (33), 25 states have call predecessors, (33), 25 states have call successors, (33) [2023-12-02 14:10:36,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 174 transitions. [2023-12-02 14:10:36,605 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 174 transitions. Word has length 32 [2023-12-02 14:10:36,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:36,605 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 174 transitions. [2023-12-02 14:10:36,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.4285714285714284) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 14:10:36,606 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 174 transitions. [2023-12-02 14:10:36,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-12-02 14:10:36,607 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:36,607 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:36,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 14:10:36,608 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:36,608 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:36,608 INFO L85 PathProgramCache]: Analyzing trace with hash -155294572, now seen corresponding path program 1 times [2023-12-02 14:10:36,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:36,609 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [751343985] [2023-12-02 14:10:36,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:36,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:36,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:36,884 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 14:10:36,884 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:36,884 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [751343985] [2023-12-02 14:10:36,885 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [751343985] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:36,885 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:36,885 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 14:10:36,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338838695] [2023-12-02 14:10:36,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:36,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 14:10:36,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:36,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 14:10:36,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-12-02 14:10:36,887 INFO L87 Difference]: Start difference. First operand 141 states and 174 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 14:10:37,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:37,318 INFO L93 Difference]: Finished difference Result 348 states and 436 transitions. [2023-12-02 14:10:37,319 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 14:10:37,319 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 35 [2023-12-02 14:10:37,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:37,322 INFO L225 Difference]: With dead ends: 348 [2023-12-02 14:10:37,323 INFO L226 Difference]: Without dead ends: 243 [2023-12-02 14:10:37,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=66, Invalid=174, Unknown=0, NotChecked=0, Total=240 [2023-12-02 14:10:37,325 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 177 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 284 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 284 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:37,326 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [186 Valid, 193 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 284 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 14:10:37,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2023-12-02 14:10:37,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 231. [2023-12-02 14:10:37,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 154 states have (on average 1.2532467532467533) internal successors, (193), 171 states have internal predecessors, (193), 40 states have call successors, (40), 31 states have call predecessors, (40), 36 states have return successors, (55), 42 states have call predecessors, (55), 40 states have call successors, (55) [2023-12-02 14:10:37,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 288 transitions. [2023-12-02 14:10:37,365 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 288 transitions. Word has length 35 [2023-12-02 14:10:37,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:37,365 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 288 transitions. [2023-12-02 14:10:37,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 14:10:37,365 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 288 transitions. [2023-12-02 14:10:37,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-12-02 14:10:37,368 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:37,368 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:37,368 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 14:10:37,368 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:37,369 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:37,369 INFO L85 PathProgramCache]: Analyzing trace with hash -859295708, now seen corresponding path program 1 times [2023-12-02 14:10:37,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:37,369 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [391342764] [2023-12-02 14:10:37,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:37,370 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:37,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:37,467 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 14:10:37,467 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:37,467 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [391342764] [2023-12-02 14:10:37,467 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [391342764] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:37,467 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 14:10:37,467 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 14:10:37,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297961518] [2023-12-02 14:10:37,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:37,468 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 14:10:37,468 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:37,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 14:10:37,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 14:10:37,470 INFO L87 Difference]: Start difference. First operand 231 states and 288 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-12-02 14:10:37,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:37,532 INFO L93 Difference]: Finished difference Result 460 states and 580 transitions. [2023-12-02 14:10:37,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 14:10:37,533 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 52 [2023-12-02 14:10:37,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:37,537 INFO L225 Difference]: With dead ends: 460 [2023-12-02 14:10:37,537 INFO L226 Difference]: Without dead ends: 231 [2023-12-02 14:10:37,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 14:10:37,539 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 44 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:37,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 70 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 14:10:37,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2023-12-02 14:10:37,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231. [2023-12-02 14:10:37,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 154 states have (on average 1.2207792207792207) internal successors, (188), 171 states have internal predecessors, (188), 40 states have call successors, (40), 31 states have call predecessors, (40), 36 states have return successors, (55), 42 states have call predecessors, (55), 40 states have call successors, (55) [2023-12-02 14:10:37,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 283 transitions. [2023-12-02 14:10:37,573 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 283 transitions. Word has length 52 [2023-12-02 14:10:37,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:37,573 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 283 transitions. [2023-12-02 14:10:37,574 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-12-02 14:10:37,574 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 283 transitions. [2023-12-02 14:10:37,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-12-02 14:10:37,576 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:37,577 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:37,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 14:10:37,577 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:37,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:37,578 INFO L85 PathProgramCache]: Analyzing trace with hash -535348927, now seen corresponding path program 1 times [2023-12-02 14:10:37,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:37,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925473370] [2023-12-02 14:10:37,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:37,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:37,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:37,660 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-12-02 14:10:37,661 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:37,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925473370] [2023-12-02 14:10:37,661 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925473370] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 14:10:37,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1342086312] [2023-12-02 14:10:37,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:37,661 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:37,662 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:10:37,665 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 14:10:37,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 14:10:37,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:37,765 INFO L262 TraceCheckSpWp]: Trace formula consists of 268 conjuncts, 4 conjunts are in the unsatisfiable core [2023-12-02 14:10:37,778 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 14:10:37,846 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 14:10:37,846 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 14:10:37,846 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1342086312] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 14:10:37,847 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 14:10:37,847 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2023-12-02 14:10:37,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1772903138] [2023-12-02 14:10:37,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 14:10:37,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 14:10:37,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:37,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 14:10:37,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-12-02 14:10:37,849 INFO L87 Difference]: Start difference. First operand 231 states and 283 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 14:10:37,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:37,908 INFO L93 Difference]: Finished difference Result 344 states and 426 transitions. [2023-12-02 14:10:37,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 14:10:37,909 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 60 [2023-12-02 14:10:37,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:37,911 INFO L225 Difference]: With dead ends: 344 [2023-12-02 14:10:37,911 INFO L226 Difference]: Without dead ends: 221 [2023-12-02 14:10:37,912 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-12-02 14:10:37,913 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 26 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:37,913 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 97 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 14:10:37,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2023-12-02 14:10:37,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 221. [2023-12-02 14:10:37,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 147 states have (on average 1.1904761904761905) internal successors, (175), 163 states have internal predecessors, (175), 38 states have call successors, (38), 31 states have call predecessors, (38), 35 states have return successors, (45), 39 states have call predecessors, (45), 38 states have call successors, (45) [2023-12-02 14:10:37,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 258 transitions. [2023-12-02 14:10:37,937 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 258 transitions. Word has length 60 [2023-12-02 14:10:37,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:37,937 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 258 transitions. [2023-12-02 14:10:37,937 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 14:10:37,938 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 258 transitions. [2023-12-02 14:10:37,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-12-02 14:10:37,939 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:37,939 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:37,945 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 14:10:38,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-12-02 14:10:38,140 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:38,140 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:38,140 INFO L85 PathProgramCache]: Analyzing trace with hash -1308520352, now seen corresponding path program 1 times [2023-12-02 14:10:38,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:38,141 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1912744627] [2023-12-02 14:10:38,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:38,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:38,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:38,257 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 14:10:38,257 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:38,258 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1912744627] [2023-12-02 14:10:38,258 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1912744627] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 14:10:38,258 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1473116807] [2023-12-02 14:10:38,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:38,258 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:38,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:10:38,259 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 14:10:38,261 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 14:10:38,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:38,356 INFO L262 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 8 conjunts are in the unsatisfiable core [2023-12-02 14:10:38,360 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 14:10:38,468 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 18 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 14:10:38,468 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 14:10:38,622 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 14:10:38,622 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1473116807] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 14:10:38,622 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1282722540] [2023-12-02 14:10:38,640 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2023-12-02 14:10:38,640 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 14:10:38,643 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 14:10:38,649 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 14:10:38,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 14:10:41,115 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 17 for LOIs [2023-12-02 14:10:41,120 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2023-12-02 14:10:41,606 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 52 for LOIs [2023-12-02 14:10:41,627 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 82 for LOIs [2023-12-02 14:10:41,922 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 65 for LOIs [2023-12-02 14:10:41,936 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 14:10:44,966 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4314#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2147483647) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= ~pumpRunning~0 2147483647) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= 0 (+ ~pumpRunning~0 2147483648)) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 14:10:44,967 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 14:10:44,967 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 14:10:44,967 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2023-12-02 14:10:44,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209406420] [2023-12-02 14:10:44,967 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 14:10:44,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-12-02 14:10:44,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:44,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-12-02 14:10:44,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=1803, Unknown=0, NotChecked=0, Total=1980 [2023-12-02 14:10:44,970 INFO L87 Difference]: Start difference. First operand 221 states and 258 transitions. Second operand has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-12-02 14:10:45,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:45,496 INFO L93 Difference]: Finished difference Result 284 states and 339 transitions. [2023-12-02 14:10:45,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-12-02 14:10:45,497 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) Word has length 63 [2023-12-02 14:10:45,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:45,499 INFO L225 Difference]: With dead ends: 284 [2023-12-02 14:10:45,499 INFO L226 Difference]: Without dead ends: 282 [2023-12-02 14:10:45,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 154 SyntacticMatches, 7 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1159 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=306, Invalid=3234, Unknown=0, NotChecked=0, Total=3540 [2023-12-02 14:10:45,502 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 158 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 437 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 532 SdHoareTripleChecker+Invalid, 503 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:45,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 532 Invalid, 503 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 437 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 14:10:45,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2023-12-02 14:10:45,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 265. [2023-12-02 14:10:45,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 174 states have (on average 1.1781609195402298) internal successors, (205), 195 states have internal predecessors, (205), 47 states have call successors, (47), 39 states have call predecessors, (47), 43 states have return successors, (58), 46 states have call predecessors, (58), 47 states have call successors, (58) [2023-12-02 14:10:45,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 310 transitions. [2023-12-02 14:10:45,529 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 310 transitions. Word has length 63 [2023-12-02 14:10:45,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:45,529 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 310 transitions. [2023-12-02 14:10:45,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-12-02 14:10:45,530 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 310 transitions. [2023-12-02 14:10:45,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2023-12-02 14:10:45,531 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:45,532 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:45,538 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-12-02 14:10:45,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:45,732 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:45,733 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:45,733 INFO L85 PathProgramCache]: Analyzing trace with hash 1828751455, now seen corresponding path program 1 times [2023-12-02 14:10:45,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:45,733 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714878815] [2023-12-02 14:10:45,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:45,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:45,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:45,990 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 33 proven. 3 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-12-02 14:10:45,991 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:45,991 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714878815] [2023-12-02 14:10:45,991 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714878815] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 14:10:45,991 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [718991089] [2023-12-02 14:10:45,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:45,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:45,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:10:45,992 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 14:10:45,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 14:10:46,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:46,088 INFO L262 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 15 conjunts are in the unsatisfiable core [2023-12-02 14:10:46,092 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 14:10:46,275 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 14:10:46,275 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 14:10:46,517 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 45 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-12-02 14:10:46,518 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [718991089] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 14:10:46,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1896722167] [2023-12-02 14:10:46,521 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-12-02 14:10:46,521 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 14:10:46,522 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 14:10:46,522 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 14:10:46,522 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 14:10:48,370 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 19 for LOIs [2023-12-02 14:10:48,375 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 49 for LOIs [2023-12-02 14:10:48,732 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 55 for LOIs [2023-12-02 14:10:48,746 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 48 for LOIs [2023-12-02 14:10:48,781 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 14:10:50,875 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5620#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2147483648)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 ~pumpRunning~0) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 14:10:50,875 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 14:10:50,875 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 14:10:50,875 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 20 [2023-12-02 14:10:50,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [620834485] [2023-12-02 14:10:50,875 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 14:10:50,876 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-12-02 14:10:50,876 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:50,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-12-02 14:10:50,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2175, Unknown=0, NotChecked=0, Total=2450 [2023-12-02 14:10:50,879 INFO L87 Difference]: Start difference. First operand 265 states and 310 transitions. Second operand has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-12-02 14:10:52,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:10:52,003 INFO L93 Difference]: Finished difference Result 772 states and 995 transitions. [2023-12-02 14:10:52,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-12-02 14:10:52,004 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) Word has length 80 [2023-12-02 14:10:52,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:10:52,008 INFO L225 Difference]: With dead ends: 772 [2023-12-02 14:10:52,008 INFO L226 Difference]: Without dead ends: 501 [2023-12-02 14:10:52,011 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 216 SyntacticMatches, 0 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2033 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=712, Invalid=5450, Unknown=0, NotChecked=0, Total=6162 [2023-12-02 14:10:52,011 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 309 mSDsluCounter, 391 mSDsCounter, 0 mSdLazyCounter, 985 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 1178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 985 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 14:10:52,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 447 Invalid, 1178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 985 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-12-02 14:10:52,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2023-12-02 14:10:52,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 324. [2023-12-02 14:10:52,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 214 states have (on average 1.1401869158878504) internal successors, (244), 236 states have internal predecessors, (244), 54 states have call successors, (54), 49 states have call predecessors, (54), 55 states have return successors, (69), 55 states have call predecessors, (69), 54 states have call successors, (69) [2023-12-02 14:10:52,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 367 transitions. [2023-12-02 14:10:52,056 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 367 transitions. Word has length 80 [2023-12-02 14:10:52,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:10:52,056 INFO L495 AbstractCegarLoop]: Abstraction has 324 states and 367 transitions. [2023-12-02 14:10:52,056 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-12-02 14:10:52,057 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 367 transitions. [2023-12-02 14:10:52,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2023-12-02 14:10:52,058 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:10:52,058 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:10:52,064 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 14:10:52,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:52,259 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:10:52,260 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:10:52,260 INFO L85 PathProgramCache]: Analyzing trace with hash 849835123, now seen corresponding path program 1 times [2023-12-02 14:10:52,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:10:52,260 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508662065] [2023-12-02 14:10:52,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:52,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:10:52,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:52,966 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 25 proven. 29 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 14:10:52,966 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:10:52,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508662065] [2023-12-02 14:10:52,966 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508662065] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 14:10:52,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [728045797] [2023-12-02 14:10:52,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:10:52,967 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:10:52,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:10:52,968 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 14:10:52,970 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 14:10:53,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:10:53,073 INFO L262 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 29 conjunts are in the unsatisfiable core [2023-12-02 14:10:53,077 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 14:10:53,572 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 53 proven. 17 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 14:10:53,572 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 14:10:54,107 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 49 proven. 5 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 14:10:54,107 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [728045797] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 14:10:54,107 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [719072761] [2023-12-02 14:10:54,110 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-12-02 14:10:54,110 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 14:10:54,110 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 14:10:54,110 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 14:10:54,111 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 14:10:55,648 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 15 for LOIs [2023-12-02 14:10:55,651 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 47 for LOIs [2023-12-02 14:10:55,948 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 54 for LOIs [2023-12-02 14:10:55,962 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 46 for LOIs [2023-12-02 14:10:55,993 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 14:10:58,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7750#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2147483648)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 ~pumpRunning~0) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 14:10:58,383 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 14:10:58,383 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 14:10:58,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 12, 11] total 30 [2023-12-02 14:10:58,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766331539] [2023-12-02 14:10:58,383 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 14:10:58,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2023-12-02 14:10:58,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:10:58,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2023-12-02 14:10:58,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=345, Invalid=2847, Unknown=0, NotChecked=0, Total=3192 [2023-12-02 14:10:58,386 INFO L87 Difference]: Start difference. First operand 324 states and 367 transitions. Second operand has 30 states, 30 states have (on average 4.566666666666666) internal successors, (137), 30 states have internal predecessors, (137), 15 states have call successors, (25), 7 states have call predecessors, (25), 11 states have return successors, (25), 17 states have call predecessors, (25), 14 states have call successors, (25) [2023-12-02 14:11:00,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:11:00,288 INFO L93 Difference]: Finished difference Result 910 states and 1064 transitions. [2023-12-02 14:11:00,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2023-12-02 14:11:00,289 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 4.566666666666666) internal successors, (137), 30 states have internal predecessors, (137), 15 states have call successors, (25), 7 states have call predecessors, (25), 11 states have return successors, (25), 17 states have call predecessors, (25), 14 states have call successors, (25) Word has length 85 [2023-12-02 14:11:00,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:11:00,294 INFO L225 Difference]: With dead ends: 910 [2023-12-02 14:11:00,294 INFO L226 Difference]: Without dead ends: 735 [2023-12-02 14:11:00,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 233 SyntacticMatches, 13 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3424 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=1077, Invalid=8429, Unknown=0, NotChecked=0, Total=9506 [2023-12-02 14:11:00,300 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 902 mSDsluCounter, 759 mSDsCounter, 0 mSdLazyCounter, 1524 mSolverCounterSat, 749 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 906 SdHoareTripleChecker+Valid, 879 SdHoareTripleChecker+Invalid, 2273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 749 IncrementalHoareTripleChecker+Valid, 1524 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-12-02 14:11:00,300 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [906 Valid, 879 Invalid, 2273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [749 Valid, 1524 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-12-02 14:11:00,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2023-12-02 14:11:00,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 651. [2023-12-02 14:11:00,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 651 states, 430 states have (on average 1.1395348837209303) internal successors, (490), 467 states have internal predecessors, (490), 112 states have call successors, (112), 104 states have call predecessors, (112), 108 states have return successors, (140), 109 states have call predecessors, (140), 112 states have call successors, (140) [2023-12-02 14:11:00,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 651 states to 651 states and 742 transitions. [2023-12-02 14:11:00,374 INFO L78 Accepts]: Start accepts. Automaton has 651 states and 742 transitions. Word has length 85 [2023-12-02 14:11:00,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:11:00,375 INFO L495 AbstractCegarLoop]: Abstraction has 651 states and 742 transitions. [2023-12-02 14:11:00,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 4.566666666666666) internal successors, (137), 30 states have internal predecessors, (137), 15 states have call successors, (25), 7 states have call predecessors, (25), 11 states have return successors, (25), 17 states have call predecessors, (25), 14 states have call successors, (25) [2023-12-02 14:11:00,375 INFO L276 IsEmpty]: Start isEmpty. Operand 651 states and 742 transitions. [2023-12-02 14:11:00,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2023-12-02 14:11:00,377 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 14:11:00,377 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:11:00,383 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 14:11:00,580 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:11:00,581 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 14:11:00,581 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 14:11:00,581 INFO L85 PathProgramCache]: Analyzing trace with hash -763023879, now seen corresponding path program 2 times [2023-12-02 14:11:00,581 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 14:11:00,581 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796127795] [2023-12-02 14:11:00,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 14:11:00,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 14:11:00,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 14:11:01,149 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 21 proven. 35 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2023-12-02 14:11:01,149 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 14:11:01,149 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796127795] [2023-12-02 14:11:01,149 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796127795] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 14:11:01,149 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [351746402] [2023-12-02 14:11:01,149 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 14:11:01,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:11:01,150 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 14:11:01,150 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 14:11:01,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 14:11:01,250 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2023-12-02 14:11:01,250 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 14:11:01,252 INFO L262 TraceCheckSpWp]: Trace formula consists of 355 conjuncts, 37 conjunts are in the unsatisfiable core [2023-12-02 14:11:01,257 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 14:11:01,742 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 48 proven. 25 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 14:11:01,742 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 14:11:02,451 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 50 proven. 7 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 14:11:02,451 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [351746402] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 14:11:02,451 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1651318592] [2023-12-02 14:11:02,453 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-12-02 14:11:02,454 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 14:11:02,454 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 14:11:02,454 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 14:11:02,454 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 14:11:04,119 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 15 for LOIs [2023-12-02 14:11:04,121 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 47 for LOIs [2023-12-02 14:11:04,347 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 54 for LOIs [2023-12-02 14:11:04,358 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 46 for LOIs [2023-12-02 14:11:04,387 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 14:11:06,854 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10582#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2147483647) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2147483648)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (<= 0 ~pumpRunning~0) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 14:11:06,854 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 14:11:06,854 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 14:11:06,854 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 14] total 38 [2023-12-02 14:11:06,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2067817423] [2023-12-02 14:11:06,854 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 14:11:06,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-12-02 14:11:06,861 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 14:11:06,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-12-02 14:11:06,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=435, Invalid=3597, Unknown=0, NotChecked=0, Total=4032 [2023-12-02 14:11:06,864 INFO L87 Difference]: Start difference. First operand 651 states and 742 transitions. Second operand has 38 states, 36 states have (on average 3.8055555555555554) internal successors, (137), 36 states have internal predecessors, (137), 17 states have call successors, (28), 10 states have call predecessors, (28), 15 states have return successors, (29), 19 states have call predecessors, (29), 17 states have call successors, (29) [2023-12-02 14:11:08,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 14:11:08,395 INFO L93 Difference]: Finished difference Result 1117 states and 1284 transitions. [2023-12-02 14:11:08,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2023-12-02 14:11:08,396 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 36 states have (on average 3.8055555555555554) internal successors, (137), 36 states have internal predecessors, (137), 17 states have call successors, (28), 10 states have call predecessors, (28), 15 states have return successors, (29), 19 states have call predecessors, (29), 17 states have call successors, (29) Word has length 88 [2023-12-02 14:11:08,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 14:11:08,397 INFO L225 Difference]: With dead ends: 1117 [2023-12-02 14:11:08,397 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 14:11:08,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 334 GetRequests, 227 SyntacticMatches, 14 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3105 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=1157, Invalid=7773, Unknown=0, NotChecked=0, Total=8930 [2023-12-02 14:11:08,403 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 1014 mSDsluCounter, 518 mSDsCounter, 0 mSdLazyCounter, 1093 mSolverCounterSat, 765 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1017 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 1858 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 765 IncrementalHoareTripleChecker+Valid, 1093 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 14:11:08,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1017 Valid, 583 Invalid, 1858 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [765 Valid, 1093 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 14:11:08,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 14:11:08,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 14:11:08,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 14:11:08,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 14:11:08,404 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 88 [2023-12-02 14:11:08,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 14:11:08,404 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 14:11:08,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 36 states have (on average 3.8055555555555554) internal successors, (137), 36 states have internal predecessors, (137), 17 states have call successors, (28), 10 states have call predecessors, (28), 15 states have return successors, (29), 19 states have call predecessors, (29), 17 states have call successors, (29) [2023-12-02 14:11:08,404 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 14:11:08,405 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 14:11:08,406 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 14:11:08,413 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-12-02 14:11:08,607 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 14:11:08,609 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 14:11:11,211 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 713 719) no Hoare annotation was computed. [2023-12-02 14:11:11,211 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 713 719) the Hoare annotation is: true [2023-12-02 14:11:11,211 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 612 623) the Hoare annotation is: true [2023-12-02 14:11:11,211 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 612 623) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2) (or (< |old(~waterLevel~0)| 2) .cse3 .cse2 .cse4) (or .cse0 (and .cse1 (= 2 ~waterLevel~0)) (not (= |old(~waterLevel~0)| 2)) .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse2 .cse4))) [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L766-1(lines 747 771) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L700-1(lines 700 706) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse2 (< 2 |old(~waterLevel~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse6 .cse1 .cse7 .cse2) (or .cse6 (< 0 |old(~waterLevel~0)|) .cse0 .cse1 (and .cse8 .cse7 .cse4)) (or (< 1 |old(~waterLevel~0)|) .cse5 (and .cse9 .cse8) .cse1) (or .cse5 (and .cse9 .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 (and (= ~waterLevel~0 1) .cse7 .cse4) .cse1))) [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L181-1(line 181) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L693-2(lines 689 711) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 763) no Hoare annotation was computed. [2023-12-02 14:11:11,212 INFO L899 garLoopResultBuilder]: For program point L751(lines 751 768) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 208) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point L194-1(lines 186 214) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 686 712) the Hoare annotation is: (let ((.cse2 (< 2 |old(~waterLevel~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse6 .cse1 .cse7 .cse2) (or .cse6 (< 0 |old(~waterLevel~0)|) .cse0 .cse1 (and .cse8 .cse7 .cse4)) (or (< 1 |old(~waterLevel~0)|) .cse5 (and .cse9 .cse8) .cse1) (or .cse5 (and .cse9 .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 (and (= ~waterLevel~0 1) .cse7 .cse4) .cse1))) [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 205) no Hoare annotation was computed. [2023-12-02 14:11:11,213 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (let ((.cse1 (< 2 |old(~waterLevel~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (< |old(~waterLevel~0)| 2) .cse2 (and (= ~waterLevel~0 1) .cse3 .cse4) .cse0 .cse1) (or (< 1 |old(~waterLevel~0)|) (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (<= ~waterLevel~0 0) .cse3 .cse4) (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse0))) [2023-12-02 14:11:11,213 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 686 712) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (< 2 |old(~waterLevel~0)|))) (and (let ((.cse0 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 1)) (.cse1 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (< |old(~waterLevel~0)| 2) (and .cse4 .cse0 .cse1 .cse2) .cse5 .cse6 .cse7)) (or .cse8 (not (= |old(~waterLevel~0)| 2)) .cse6) (let ((.cse9 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse11)))) (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse6 (and .cse4 .cse9 .cse10 .cse2) (and .cse9 .cse10 .cse2 .cse3))) (or .cse8 (and .cse4 .cse10 .cse11) .cse6 .cse7))) [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L86(lines 61 90) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L902 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2023-12-02 14:11:11,214 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 61 90) the Hoare annotation is: true [2023-12-02 14:11:11,214 INFO L902 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2023-12-02 14:11:11,214 INFO L902 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 933) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L927-1(lines 927 933) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 158) no Hoare annotation was computed. [2023-12-02 14:11:11,214 INFO L899 garLoopResultBuilder]: For program point L151-2(lines 151 158) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L965(lines 916 966) the Hoare annotation is: false [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L937(lines 937 943) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 937 943) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L962(lines 917 964) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4) (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3))) [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L929(line 929) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4) (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3))) [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L955-2(lines 947 960) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 (<= ~waterLevel~0 1) .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse2 (or (< ~waterLevel~0 1) (= ~waterLevel~0 1)) .cse3))) [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L918(lines 917 964) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L939(line 939) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 (<= ~waterLevel~0 1) .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse2 (or (< ~waterLevel~0 1) (= ~waterLevel~0 1)) .cse3))) [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L968(lines 907 972) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse0 (< ~switchedOnBeforeTS~0 1)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~waterLevel~0 1))) (.cse2 (<= 1 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse5 (not (= 2 ~waterLevel~0)) .cse3) (or .cse5 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (and .cse4 .cse2) .cse3))) [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 737) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 742) no Hoare annotation was computed. [2023-12-02 14:11:11,215 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 721 745) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (and .cse0 (not (= 2 ~waterLevel~0)) (<= 1 ~waterLevel~0)) .cse1) (or .cse0 .cse2 .cse3 .cse1 .cse4) (or (< 0 ~waterLevel~0) .cse2 .cse3 .cse1 .cse4))) [2023-12-02 14:11:11,216 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= 2 ~waterLevel~0)) (<= 1 ~waterLevel~0)) .cse3) (or (< 0 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2023-12-02 14:11:11,216 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 721 745) no Hoare annotation was computed. [2023-12-02 14:11:11,216 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 721 745) no Hoare annotation was computed. [2023-12-02 14:11:11,216 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 600 611) no Hoare annotation was computed. [2023-12-02 14:11:11,216 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 600 611) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (< ~switchedOnBeforeTS~0 1)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~pumpRunning~0 1))) (.cse5 (and (or .cse4 .cse0 .cse3) (or .cse6 .cse3)))) (and (or (< 0 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (= ~waterLevel~0 1) .cse5) (or (not (= ~pumpRunning~0 0)) .cse2 .cse3 (< 2 |old(~waterLevel~0)|)) (or (= 2 ~waterLevel~0) .cse1 .cse6 .cse5)))) [2023-12-02 14:11:11,216 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 799 807) no Hoare annotation was computed. [2023-12-02 14:11:11,216 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 799 807) the Hoare annotation is: true [2023-12-02 14:11:11,218 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 14:11:11,219 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 14:11:11,229 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 02:11:11 BoogieIcfgContainer [2023-12-02 14:11:11,229 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 14:11:11,229 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 14:11:11,229 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 14:11:11,230 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 14:11:11,230 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:10:35" (3/4) ... [2023-12-02 14:11:11,231 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 14:11:11,234 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 14:11:11,234 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 14:11:11,234 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 14:11:11,234 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 14:11:11,235 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 14:11:11,235 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 14:11:11,235 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-12-02 14:11:11,242 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 47 nodes and edges [2023-12-02 14:11:11,243 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-12-02 14:11:11,244 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 14:11:11,244 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 14:11:11,245 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 14:11:11,346 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 14:11:11,347 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 14:11:11,347 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 14:11:11,347 INFO L158 Benchmark]: Toolchain (without parser) took 37185.50ms. Allocated memory was 136.3MB in the beginning and 536.9MB in the end (delta: 400.6MB). Free memory was 104.2MB in the beginning and 492.7MB in the end (delta: -388.5MB). Peak memory consumption was 324.8MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,347 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory is still 106.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 14:11:11,348 INFO L158 Benchmark]: CACSL2BoogieTranslator took 388.59ms. Allocated memory is still 136.3MB. Free memory was 104.2MB in the beginning and 84.9MB in the end (delta: 19.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,348 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.58ms. Allocated memory is still 136.3MB. Free memory was 84.5MB in the beginning and 82.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,348 INFO L158 Benchmark]: Boogie Preprocessor took 26.10ms. Allocated memory is still 136.3MB. Free memory was 82.4MB in the beginning and 80.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,348 INFO L158 Benchmark]: RCFGBuilder took 459.60ms. Allocated memory is still 136.3MB. Free memory was 80.7MB in the beginning and 54.7MB in the end (delta: 26.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,349 INFO L158 Benchmark]: TraceAbstraction took 36141.09ms. Allocated memory was 136.3MB in the beginning and 536.9MB in the end (delta: 400.6MB). Free memory was 53.9MB in the beginning and 185.2MB in the end (delta: -131.2MB). Peak memory consumption was 275.8MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,349 INFO L158 Benchmark]: Witness Printer took 117.53ms. Allocated memory is still 536.9MB. Free memory was 185.2MB in the beginning and 492.7MB in the end (delta: -307.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 14:11:11,351 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory is still 106.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 388.59ms. Allocated memory is still 136.3MB. Free memory was 104.2MB in the beginning and 84.9MB in the end (delta: 19.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.58ms. Allocated memory is still 136.3MB. Free memory was 84.5MB in the beginning and 82.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.10ms. Allocated memory is still 136.3MB. Free memory was 82.4MB in the beginning and 80.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 459.60ms. Allocated memory is still 136.3MB. Free memory was 80.7MB in the beginning and 54.7MB in the end (delta: 26.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 36141.09ms. Allocated memory was 136.3MB in the beginning and 536.9MB in the end (delta: 400.6MB). Free memory was 53.9MB in the beginning and 185.2MB in the end (delta: -131.2MB). Peak memory consumption was 275.8MB. Max. memory is 16.1GB. * Witness Printer took 117.53ms. Allocated memory is still 536.9MB. Free memory was 185.2MB in the beginning and 492.7MB in the end (delta: -307.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [58] - GenericResultAtLocation [Line: 164]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [164] - GenericResultAtLocation [Line: 215]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [215] - GenericResultAtLocation [Line: 581]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [581] - GenericResultAtLocation [Line: 679]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [679] - GenericResultAtLocation [Line: 871]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [871] - GenericResultAtLocation [Line: 906]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [906] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 36.1s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2785 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2753 mSDsluCounter, 3317 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2612 mSDsCounter, 1900 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4675 IncrementalHoareTripleChecker+Invalid, 6575 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1900 mSolverCounterUnsat, 705 mSDtfsCounter, 4675 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1307 GetRequests, 914 SyntacticMatches, 34 SemanticMatches, 359 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9753 ImplicationChecksByTransitivity, 13.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=651occurred in iteration=10, InterpolantAutomatonStates: 181, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 297 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 794 PreInvPairs, 867 NumberOfFragments, 1117 HoareAnnotationTreeSize, 794 FomulaSimplifications, 8780 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 21 FomulaSimplificationsInter, 9532 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 5.6s InterpolantComputationTime, 938 NumberOfCodeBlocks, 938 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1234 ConstructedInterpolants, 0 QuantifiedInterpolants, 4577 SizeOfPredicates, 31 NumberOfNonLiveVariables, 1579 ConjunctsInSsa, 93 ConjunctsInUnsatCore, 20 InterpolantComputations, 7 PerfectInterpolantSequences, 670/818 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: (((((((((tmp == 1) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) && (pumpRunning == 1)) || (((((2 == waterLevel) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) || ((((((tmp == 1) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((pumpRunning == 0) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-12-02 14:11:11,370 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bf857dff-0257-47e5-949a-5f657b1274b2/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE