./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 31801b0d0a8db366707af3e7371b9dc02f7c34625c63f4c3f856015d4449b4b2 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 16:52:44,833 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 16:52:44,897 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 16:52:44,902 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 16:52:44,902 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 16:52:44,926 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 16:52:44,927 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 16:52:44,928 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 16:52:44,928 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 16:52:44,929 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 16:52:44,930 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 16:52:44,930 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 16:52:44,931 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 16:52:44,931 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 16:52:44,931 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 16:52:44,932 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 16:52:44,933 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 16:52:44,933 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 16:52:44,933 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 16:52:44,934 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 16:52:44,935 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 16:52:44,935 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 16:52:44,936 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 16:52:44,936 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 16:52:44,937 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 16:52:44,937 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 16:52:44,938 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 16:52:44,938 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 16:52:44,938 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 16:52:44,939 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 16:52:44,939 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 16:52:44,940 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 16:52:44,940 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 16:52:44,940 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 16:52:44,941 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 16:52:44,941 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 16:52:44,941 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 16:52:44,941 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:52:44,942 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 16:52:44,942 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 16:52:44,942 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 16:52:44,942 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 16:52:44,942 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 16:52:44,943 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 16:52:44,943 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 16:52:44,943 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 16:52:44,943 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 16:52:44,943 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 31801b0d0a8db366707af3e7371b9dc02f7c34625c63f4c3f856015d4449b4b2 [2023-12-02 16:52:45,150 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 16:52:45,171 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 16:52:45,174 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 16:52:45,175 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 16:52:45,176 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 16:52:45,177 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2023-12-02 16:52:47,918 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 16:52:48,131 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 16:52:48,132 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2023-12-02 16:52:48,146 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/data/c043fb872/f08305f6ec654912944b88ccac76c562/FLAGdbcb50aaa [2023-12-02 16:52:48,161 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/data/c043fb872/f08305f6ec654912944b88ccac76c562 [2023-12-02 16:52:48,164 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 16:52:48,165 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 16:52:48,167 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 16:52:48,167 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 16:52:48,172 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 16:52:48,173 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,174 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3aebc65d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48, skipping insertion in model container [2023-12-02 16:52:48,174 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,226 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 16:52:48,479 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c[17098,17111] [2023-12-02 16:52:48,489 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:52:48,501 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 16:52:48,512 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-12-02 16:52:48,514 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [266] [2023-12-02 16:52:48,514 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [338] [2023-12-02 16:52:48,514 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [704] [2023-12-02 16:52:48,515 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [755] [2023-12-02 16:52:48,515 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [855] [2023-12-02 16:52:48,515 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [864] [2023-12-02 16:52:48,515 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [899] [2023-12-02 16:52:48,562 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c[17098,17111] [2023-12-02 16:52:48,566 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:52:48,586 INFO L206 MainTranslator]: Completed translation [2023-12-02 16:52:48,587 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48 WrapperNode [2023-12-02 16:52:48,587 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 16:52:48,588 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 16:52:48,588 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 16:52:48,588 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 16:52:48,596 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,609 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,635 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 209 [2023-12-02 16:52:48,635 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 16:52:48,636 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 16:52:48,636 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 16:52:48,636 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 16:52:48,646 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,646 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,648 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,648 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,654 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,658 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,660 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,661 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,664 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 16:52:48,665 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 16:52:48,665 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 16:52:48,665 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 16:52:48,666 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (1/1) ... [2023-12-02 16:52:48,672 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:52:48,683 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:52:48,695 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 16:52:48,700 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 16:52:48,725 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 16:52:48,725 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 16:52:48,725 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 16:52:48,726 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 16:52:48,726 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 16:52:48,726 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 16:52:48,726 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 16:52:48,726 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:52:48,727 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:52:48,727 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 16:52:48,727 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 16:52:48,727 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-12-02 16:52:48,727 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-12-02 16:52:48,728 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 16:52:48,728 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 16:52:48,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 16:52:48,728 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 16:52:48,729 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 16:52:48,729 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 16:52:48,729 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 16:52:48,802 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 16:52:48,804 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 16:52:49,021 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 16:52:49,143 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 16:52:49,144 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 16:52:49,145 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:52:49 BoogieIcfgContainer [2023-12-02 16:52:49,145 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 16:52:49,148 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 16:52:49,148 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 16:52:49,152 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 16:52:49,152 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 04:52:48" (1/3) ... [2023-12-02 16:52:49,153 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1070df0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:52:49, skipping insertion in model container [2023-12-02 16:52:49,153 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:52:48" (2/3) ... [2023-12-02 16:52:49,153 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1070df0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:52:49, skipping insertion in model container [2023-12-02 16:52:49,153 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:52:49" (3/3) ... [2023-12-02 16:52:49,155 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product40.cil.c [2023-12-02 16:52:49,174 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 16:52:49,174 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 16:52:49,215 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 16:52:49,220 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@43df1ef4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 16:52:49,220 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 16:52:49,223 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-12-02 16:52:49,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 16:52:49,230 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:49,231 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:49,231 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:49,235 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:49,235 INFO L85 PathProgramCache]: Analyzing trace with hash -209156913, now seen corresponding path program 1 times [2023-12-02 16:52:49,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:49,243 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402390900] [2023-12-02 16:52:49,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:49,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:49,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:49,418 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:49,419 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:49,419 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402390900] [2023-12-02 16:52:49,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402390900] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:49,420 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:49,420 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 16:52:49,422 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760226556] [2023-12-02 16:52:49,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:49,427 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 16:52:49,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:49,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 16:52:49,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:52:49,459 INFO L87 Difference]: Start difference. First operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:49,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:49,522 INFO L93 Difference]: Finished difference Result 130 states and 179 transitions. [2023-12-02 16:52:49,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 16:52:49,524 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-12-02 16:52:49,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:49,533 INFO L225 Difference]: With dead ends: 130 [2023-12-02 16:52:49,533 INFO L226 Difference]: Without dead ends: 61 [2023-12-02 16:52:49,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:52:49,540 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:49,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 68 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:52:49,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-12-02 16:52:49,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-12-02 16:52:49,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 39 states have (on average 1.358974358974359) internal successors, (53), 47 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-12-02 16:52:49,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 80 transitions. [2023-12-02 16:52:49,583 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 80 transitions. Word has length 21 [2023-12-02 16:52:49,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:49,584 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 80 transitions. [2023-12-02 16:52:49,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:49,584 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 80 transitions. [2023-12-02 16:52:49,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-12-02 16:52:49,587 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:49,587 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:49,588 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 16:52:49,588 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:49,589 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:49,589 INFO L85 PathProgramCache]: Analyzing trace with hash -886331353, now seen corresponding path program 1 times [2023-12-02 16:52:49,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:49,589 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2100135445] [2023-12-02 16:52:49,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:49,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:49,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:49,681 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:49,682 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:49,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2100135445] [2023-12-02 16:52:49,682 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2100135445] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:49,682 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:49,683 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:52:49,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942125155] [2023-12-02 16:52:49,683 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:49,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:52:49,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:49,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:52:49,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:52:49,686 INFO L87 Difference]: Start difference. First operand 61 states and 80 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:49,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:49,726 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2023-12-02 16:52:49,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:52:49,727 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-12-02 16:52:49,727 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:49,728 INFO L225 Difference]: With dead ends: 94 [2023-12-02 16:52:49,728 INFO L226 Difference]: Without dead ends: 53 [2023-12-02 16:52:49,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:52:49,731 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 14 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:49,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 92 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:52:49,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-12-02 16:52:49,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-12-02 16:52:49,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3823529411764706) internal successors, (47), 42 states have internal predecessors, (47), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-12-02 16:52:49,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 69 transitions. [2023-12-02 16:52:49,740 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 69 transitions. Word has length 22 [2023-12-02 16:52:49,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:49,741 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 69 transitions. [2023-12-02 16:52:49,741 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:49,741 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 69 transitions. [2023-12-02 16:52:49,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-12-02 16:52:49,742 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:49,742 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:49,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 16:52:49,743 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:49,743 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:49,744 INFO L85 PathProgramCache]: Analyzing trace with hash -1456310801, now seen corresponding path program 1 times [2023-12-02 16:52:49,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:49,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1020003372] [2023-12-02 16:52:49,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:49,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:49,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:49,851 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:49,852 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:49,852 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1020003372] [2023-12-02 16:52:49,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1020003372] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:49,852 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:49,853 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:52:49,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821403299] [2023-12-02 16:52:49,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:49,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:52:49,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:49,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:52:49,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:52:49,855 INFO L87 Difference]: Start difference. First operand 53 states and 69 transitions. Second operand has 4 states, 4 states have (on average 4.75) internal successors, (19), 4 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 16:52:49,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:49,951 INFO L93 Difference]: Finished difference Result 140 states and 183 transitions. [2023-12-02 16:52:49,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 16:52:49,951 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.75) internal successors, (19), 4 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2023-12-02 16:52:49,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:49,953 INFO L225 Difference]: With dead ends: 140 [2023-12-02 16:52:49,953 INFO L226 Difference]: Without dead ends: 89 [2023-12-02 16:52:49,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:52:49,956 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 90 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:49,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 140 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:52:49,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2023-12-02 16:52:49,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 86. [2023-12-02 16:52:49,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 56 states have (on average 1.375) internal successors, (77), 67 states have internal predecessors, (77), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2023-12-02 16:52:49,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 112 transitions. [2023-12-02 16:52:49,973 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 112 transitions. Word has length 25 [2023-12-02 16:52:49,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:49,974 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 112 transitions. [2023-12-02 16:52:49,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.75) internal successors, (19), 4 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 16:52:49,974 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 112 transitions. [2023-12-02 16:52:49,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-12-02 16:52:49,976 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:49,976 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:49,976 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 16:52:49,976 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:49,977 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:49,977 INFO L85 PathProgramCache]: Analyzing trace with hash 1537377469, now seen corresponding path program 1 times [2023-12-02 16:52:49,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:49,978 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [525904909] [2023-12-02 16:52:49,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:49,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:49,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:50,109 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 16:52:50,110 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:50,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [525904909] [2023-12-02 16:52:50,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [525904909] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:50,110 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:50,111 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 16:52:50,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [966100015] [2023-12-02 16:52:50,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:50,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 16:52:50,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:50,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 16:52:50,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:52:50,113 INFO L87 Difference]: Start difference. First operand 86 states and 112 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:50,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:50,277 INFO L93 Difference]: Finished difference Result 206 states and 275 transitions. [2023-12-02 16:52:50,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 16:52:50,280 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2023-12-02 16:52:50,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:50,282 INFO L225 Difference]: With dead ends: 206 [2023-12-02 16:52:50,282 INFO L226 Difference]: Without dead ends: 122 [2023-12-02 16:52:50,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 16:52:50,285 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 34 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:50,285 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 243 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:52:50,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2023-12-02 16:52:50,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 118. [2023-12-02 16:52:50,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 79 states have (on average 1.2911392405063291) internal successors, (102), 89 states have internal predecessors, (102), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2023-12-02 16:52:50,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 150 transitions. [2023-12-02 16:52:50,305 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 150 transitions. Word has length 28 [2023-12-02 16:52:50,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:50,305 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 150 transitions. [2023-12-02 16:52:50,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:52:50,306 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 150 transitions. [2023-12-02 16:52:50,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-12-02 16:52:50,307 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:50,308 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:50,308 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 16:52:50,308 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:50,308 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:50,309 INFO L85 PathProgramCache]: Analyzing trace with hash 494457542, now seen corresponding path program 1 times [2023-12-02 16:52:50,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:50,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116183117] [2023-12-02 16:52:50,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:50,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:50,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:50,347 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:50,348 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:50,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116183117] [2023-12-02 16:52:50,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116183117] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:50,348 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:50,348 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:52:50,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1148819264] [2023-12-02 16:52:50,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:50,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:52:50,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:50,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:52:50,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:52:50,350 INFO L87 Difference]: Start difference. First operand 118 states and 150 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 16:52:50,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:50,401 INFO L93 Difference]: Finished difference Result 236 states and 300 transitions. [2023-12-02 16:52:50,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:52:50,402 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 36 [2023-12-02 16:52:50,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:50,403 INFO L225 Difference]: With dead ends: 236 [2023-12-02 16:52:50,403 INFO L226 Difference]: Without dead ends: 120 [2023-12-02 16:52:50,404 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:52:50,406 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 30 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:50,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 127 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:52:50,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-12-02 16:52:50,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 118. [2023-12-02 16:52:50,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 79 states have (on average 1.2784810126582278) internal successors, (101), 89 states have internal predecessors, (101), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (25), 20 states have call predecessors, (25), 21 states have call successors, (25) [2023-12-02 16:52:50,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 147 transitions. [2023-12-02 16:52:50,423 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 147 transitions. Word has length 36 [2023-12-02 16:52:50,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:50,424 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 147 transitions. [2023-12-02 16:52:50,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 16:52:50,424 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 147 transitions. [2023-12-02 16:52:50,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-12-02 16:52:50,425 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:50,426 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:50,426 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 16:52:50,426 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:50,426 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:50,427 INFO L85 PathProgramCache]: Analyzing trace with hash -840601096, now seen corresponding path program 1 times [2023-12-02 16:52:50,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:50,427 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271754365] [2023-12-02 16:52:50,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:50,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:50,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:50,659 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:50,659 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:50,660 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271754365] [2023-12-02 16:52:50,660 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271754365] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:50,660 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:50,660 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-12-02 16:52:50,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096341877] [2023-12-02 16:52:50,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:50,661 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-12-02 16:52:50,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:50,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-12-02 16:52:50,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 16:52:50,662 INFO L87 Difference]: Start difference. First operand 118 states and 147 transitions. Second operand has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 16:52:50,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:50,898 INFO L93 Difference]: Finished difference Result 345 states and 432 transitions. [2023-12-02 16:52:50,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 16:52:50,899 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 33 [2023-12-02 16:52:50,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:50,902 INFO L225 Difference]: With dead ends: 345 [2023-12-02 16:52:50,902 INFO L226 Difference]: Without dead ends: 229 [2023-12-02 16:52:50,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2023-12-02 16:52:50,904 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 115 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:50,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 291 Invalid, 227 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 16:52:50,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2023-12-02 16:52:50,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 221. [2023-12-02 16:52:50,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 149 states have (on average 1.2684563758389262) internal successors, (189), 165 states have internal predecessors, (189), 39 states have call successors, (39), 32 states have call predecessors, (39), 32 states have return successors, (47), 36 states have call predecessors, (47), 39 states have call successors, (47) [2023-12-02 16:52:50,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 275 transitions. [2023-12-02 16:52:50,956 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 275 transitions. Word has length 33 [2023-12-02 16:52:50,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:50,956 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 275 transitions. [2023-12-02 16:52:50,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-12-02 16:52:50,956 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 275 transitions. [2023-12-02 16:52:50,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-12-02 16:52:50,959 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:50,959 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:50,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 16:52:50,959 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:50,960 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:50,960 INFO L85 PathProgramCache]: Analyzing trace with hash 983552711, now seen corresponding path program 1 times [2023-12-02 16:52:50,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:50,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842585166] [2023-12-02 16:52:50,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:50,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:50,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:51,222 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:52:51,223 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:51,223 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842585166] [2023-12-02 16:52:51,223 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842585166] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:51,223 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:51,223 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 16:52:51,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014902283] [2023-12-02 16:52:51,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:51,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 16:52:51,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:51,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 16:52:51,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-12-02 16:52:51,225 INFO L87 Difference]: Start difference. First operand 221 states and 275 transitions. Second operand has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:52:51,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:51,703 INFO L93 Difference]: Finished difference Result 526 states and 661 transitions. [2023-12-02 16:52:51,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 16:52:51,705 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 36 [2023-12-02 16:52:51,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:51,711 INFO L225 Difference]: With dead ends: 526 [2023-12-02 16:52:51,711 INFO L226 Difference]: Without dead ends: 370 [2023-12-02 16:52:51,712 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=66, Invalid=174, Unknown=0, NotChecked=0, Total=240 [2023-12-02 16:52:51,713 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 181 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 458 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:51,713 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 280 Invalid, 458 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 16:52:51,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2023-12-02 16:52:51,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 347. [2023-12-02 16:52:51,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 235 states have (on average 1.2680851063829788) internal successors, (298), 261 states have internal predecessors, (298), 60 states have call successors, (60), 47 states have call predecessors, (60), 51 states have return successors, (75), 58 states have call predecessors, (75), 60 states have call successors, (75) [2023-12-02 16:52:51,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 433 transitions. [2023-12-02 16:52:51,775 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 433 transitions. Word has length 36 [2023-12-02 16:52:51,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:51,776 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 433 transitions. [2023-12-02 16:52:51,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:52:51,776 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 433 transitions. [2023-12-02 16:52:51,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-12-02 16:52:51,779 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:51,779 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:51,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 16:52:51,779 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:51,780 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:51,780 INFO L85 PathProgramCache]: Analyzing trace with hash 1303109840, now seen corresponding path program 1 times [2023-12-02 16:52:51,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:51,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1196665081] [2023-12-02 16:52:51,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:51,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:51,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:51,879 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 17 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-12-02 16:52:51,880 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:51,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1196665081] [2023-12-02 16:52:51,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1196665081] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:52:51,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131040740] [2023-12-02 16:52:51,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:51,880 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:52:51,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:52:51,884 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:52:51,889 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 16:52:51,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:51,994 INFO L262 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 4 conjunts are in the unsatisfiable core [2023-12-02 16:52:52,001 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:52:52,071 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:52:52,071 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 16:52:52,071 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131040740] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:52,072 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 16:52:52,072 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2023-12-02 16:52:52,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964551392] [2023-12-02 16:52:52,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:52,073 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:52:52,073 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:52,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:52:52,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:52:52,074 INFO L87 Difference]: Start difference. First operand 347 states and 433 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:52:52,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:52,150 INFO L93 Difference]: Finished difference Result 619 states and 777 transitions. [2023-12-02 16:52:52,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:52:52,151 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 62 [2023-12-02 16:52:52,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:52,154 INFO L225 Difference]: With dead ends: 619 [2023-12-02 16:52:52,154 INFO L226 Difference]: Without dead ends: 337 [2023-12-02 16:52:52,155 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:52:52,156 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 33 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:52,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 121 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:52:52,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2023-12-02 16:52:52,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 337. [2023-12-02 16:52:52,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 228 states have (on average 1.236842105263158) internal successors, (282), 252 states have internal predecessors, (282), 58 states have call successors, (58), 47 states have call predecessors, (58), 50 states have return successors, (65), 56 states have call predecessors, (65), 58 states have call successors, (65) [2023-12-02 16:52:52,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 405 transitions. [2023-12-02 16:52:52,195 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 405 transitions. Word has length 62 [2023-12-02 16:52:52,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:52,196 INFO L495 AbstractCegarLoop]: Abstraction has 337 states and 405 transitions. [2023-12-02 16:52:52,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 16:52:52,196 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 405 transitions. [2023-12-02 16:52:52,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-12-02 16:52:52,197 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:52,198 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:52,208 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 16:52:52,401 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:52:52,402 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:52,402 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:52,402 INFO L85 PathProgramCache]: Analyzing trace with hash -1921174161, now seen corresponding path program 1 times [2023-12-02 16:52:52,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:52,402 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [68237086] [2023-12-02 16:52:52,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:52,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:52,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:52,535 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 16:52:52,535 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:52,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [68237086] [2023-12-02 16:52:52,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [68237086] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:52:52,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1792420939] [2023-12-02 16:52:52,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:52,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:52:52,536 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:52:52,537 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:52:52,540 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 16:52:52,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:52,642 INFO L262 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 8 conjunts are in the unsatisfiable core [2023-12-02 16:52:52,645 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:52:52,745 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:52:52,745 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:52:52,925 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 16:52:52,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1792420939] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:52:52,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1897377955] [2023-12-02 16:52:52,946 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2023-12-02 16:52:52,946 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:52:52,950 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:52:52,955 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:52:52,955 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:52:55,732 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 23 for LOIs [2023-12-02 16:52:55,738 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:52:55,905 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 28 for LOIs [2023-12-02 16:52:55,910 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 41 for LOIs [2023-12-02 16:52:55,980 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 28 for LOIs [2023-12-02 16:52:55,983 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:52:58,192 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5619#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483647) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:52:58,193 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:52:58,193 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:52:58,193 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2023-12-02 16:52:58,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1983775845] [2023-12-02 16:52:58,193 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:52:58,194 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-12-02 16:52:58,194 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:58,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-12-02 16:52:58,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=202, Invalid=1868, Unknown=0, NotChecked=0, Total=2070 [2023-12-02 16:52:58,197 INFO L87 Difference]: Start difference. First operand 337 states and 405 transitions. Second operand has 13 states, 10 states have (on average 7.9) internal successors, (79), 11 states have internal predecessors, (79), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-12-02 16:52:58,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:58,815 INFO L93 Difference]: Finished difference Result 435 states and 535 transitions. [2023-12-02 16:52:58,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2023-12-02 16:52:58,815 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 7.9) internal successors, (79), 11 states have internal predecessors, (79), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) Word has length 65 [2023-12-02 16:52:58,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:58,818 INFO L225 Difference]: With dead ends: 435 [2023-12-02 16:52:58,819 INFO L226 Difference]: Without dead ends: 433 [2023-12-02 16:52:58,821 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 162 SyntacticMatches, 4 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1333 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=366, Invalid=3794, Unknown=0, NotChecked=0, Total=4160 [2023-12-02 16:52:58,822 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 142 mSDsluCounter, 656 mSDsCounter, 0 mSdLazyCounter, 494 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 781 SdHoareTripleChecker+Invalid, 537 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 494 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:58,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 781 Invalid, 537 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 494 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 16:52:58,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2023-12-02 16:52:58,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 386. [2023-12-02 16:52:58,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 386 states, 260 states have (on average 1.2346153846153847) internal successors, (321), 290 states have internal predecessors, (321), 67 states have call successors, (67), 55 states have call predecessors, (67), 58 states have return successors, (78), 63 states have call predecessors, (78), 67 states have call successors, (78) [2023-12-02 16:52:58,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 386 states and 466 transitions. [2023-12-02 16:52:58,859 INFO L78 Accepts]: Start accepts. Automaton has 386 states and 466 transitions. Word has length 65 [2023-12-02 16:52:58,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:58,859 INFO L495 AbstractCegarLoop]: Abstraction has 386 states and 466 transitions. [2023-12-02 16:52:58,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 7.9) internal successors, (79), 11 states have internal predecessors, (79), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-12-02 16:52:58,859 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 466 transitions. [2023-12-02 16:52:58,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2023-12-02 16:52:58,861 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:58,862 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:58,868 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 16:52:59,064 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:52:59,064 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:59,064 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:59,064 INFO L85 PathProgramCache]: Analyzing trace with hash 1921864722, now seen corresponding path program 1 times [2023-12-02 16:52:59,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:59,065 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453720834] [2023-12-02 16:52:59,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:59,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:59,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:59,158 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-12-02 16:52:59,158 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:59,158 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453720834] [2023-12-02 16:52:59,158 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453720834] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:52:59,159 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:52:59,159 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-12-02 16:52:59,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900000894] [2023-12-02 16:52:59,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:52:59,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 16:52:59,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:52:59,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 16:52:59,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-12-02 16:52:59,161 INFO L87 Difference]: Start difference. First operand 386 states and 466 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 4 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2023-12-02 16:52:59,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:52:59,343 INFO L93 Difference]: Finished difference Result 927 states and 1126 transitions. [2023-12-02 16:52:59,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 16:52:59,345 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 4 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 86 [2023-12-02 16:52:59,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:52:59,349 INFO L225 Difference]: With dead ends: 927 [2023-12-02 16:52:59,349 INFO L226 Difference]: Without dead ends: 703 [2023-12-02 16:52:59,350 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 16:52:59,351 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 107 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 168 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 168 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:52:59,351 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 213 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 168 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:52:59,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 703 states. [2023-12-02 16:52:59,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 703 to 692. [2023-12-02 16:52:59,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 692 states, 469 states have (on average 1.2302771855010661) internal successors, (577), 518 states have internal predecessors, (577), 118 states have call successors, (118), 101 states have call predecessors, (118), 104 states have return successors, (132), 111 states have call predecessors, (132), 118 states have call successors, (132) [2023-12-02 16:52:59,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 692 states to 692 states and 827 transitions. [2023-12-02 16:52:59,432 INFO L78 Accepts]: Start accepts. Automaton has 692 states and 827 transitions. Word has length 86 [2023-12-02 16:52:59,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:52:59,433 INFO L495 AbstractCegarLoop]: Abstraction has 692 states and 827 transitions. [2023-12-02 16:52:59,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 4 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2023-12-02 16:52:59,433 INFO L276 IsEmpty]: Start isEmpty. Operand 692 states and 827 transitions. [2023-12-02 16:52:59,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2023-12-02 16:52:59,436 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:52:59,437 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:52:59,437 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-12-02 16:52:59,437 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:52:59,437 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:52:59,438 INFO L85 PathProgramCache]: Analyzing trace with hash -1914563047, now seen corresponding path program 1 times [2023-12-02 16:52:59,438 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:52:59,438 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [862136387] [2023-12-02 16:52:59,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:59,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:52:59,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:59,727 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 35 proven. 3 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-12-02 16:52:59,727 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:52:59,727 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [862136387] [2023-12-02 16:52:59,728 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [862136387] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:52:59,728 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1281245479] [2023-12-02 16:52:59,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:52:59,728 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:52:59,728 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:52:59,729 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:52:59,731 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 16:52:59,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:52:59,855 INFO L262 TraceCheckSpWp]: Trace formula consists of 353 conjuncts, 15 conjunts are in the unsatisfiable core [2023-12-02 16:52:59,861 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:53:00,125 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 16:53:00,125 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:53:00,443 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 48 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-12-02 16:53:00,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1281245479] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:53:00,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [548076237] [2023-12-02 16:53:00,448 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2023-12-02 16:53:00,448 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:53:00,448 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:53:00,449 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:53:00,449 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:53:02,756 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 20 for LOIs [2023-12-02 16:53:02,760 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:53:02,933 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 31 for LOIs [2023-12-02 16:53:02,939 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 21 for LOIs [2023-12-02 16:53:02,962 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 15 for LOIs [2023-12-02 16:53:02,965 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2023-12-02 16:53:02,969 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:53:06,570 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9544#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= ~pumpRunning~0 1) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (<= ~waterLevel~0 2147483647) (<= 0 ~pumpRunning~0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483648)) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:53:06,571 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:53:06,571 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:53:06,571 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 20 [2023-12-02 16:53:06,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996689980] [2023-12-02 16:53:06,571 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:53:06,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-12-02 16:53:06,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:53:06,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-12-02 16:53:06,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=306, Invalid=2774, Unknown=0, NotChecked=0, Total=3080 [2023-12-02 16:53:06,575 INFO L87 Difference]: Start difference. First operand 692 states and 827 transitions. Second operand has 20 states, 20 states have (on average 5.45) internal successors, (109), 20 states have internal predecessors, (109), 9 states have call successors, (22), 5 states have call predecessors, (22), 8 states have return successors, (23), 10 states have call predecessors, (23), 9 states have call successors, (23) [2023-12-02 16:53:07,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:53:07,989 INFO L93 Difference]: Finished difference Result 2218 states and 2887 transitions. [2023-12-02 16:53:07,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-12-02 16:53:07,990 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.45) internal successors, (109), 20 states have internal predecessors, (109), 9 states have call successors, (22), 5 states have call predecessors, (22), 8 states have return successors, (23), 10 states have call predecessors, (23), 9 states have call successors, (23) Word has length 89 [2023-12-02 16:53:07,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:53:08,001 INFO L225 Difference]: With dead ends: 2218 [2023-12-02 16:53:08,002 INFO L226 Difference]: Without dead ends: 1520 [2023-12-02 16:53:08,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 320 GetRequests, 237 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2434 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=721, Invalid=6419, Unknown=0, NotChecked=0, Total=7140 [2023-12-02 16:53:08,008 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 541 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 956 mSolverCounterSat, 316 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 546 SdHoareTripleChecker+Valid, 555 SdHoareTripleChecker+Invalid, 1272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 316 IncrementalHoareTripleChecker+Valid, 956 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 16:53:08,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [546 Valid, 555 Invalid, 1272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [316 Valid, 956 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 16:53:08,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1520 states. [2023-12-02 16:53:08,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1520 to 917. [2023-12-02 16:53:08,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 917 states, 629 states have (on average 1.2162162162162162) internal successors, (765), 686 states have internal predecessors, (765), 141 states have call successors, (141), 136 states have call predecessors, (141), 146 states have return successors, (166), 147 states have call predecessors, (166), 141 states have call successors, (166) [2023-12-02 16:53:08,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 917 states to 917 states and 1072 transitions. [2023-12-02 16:53:08,116 INFO L78 Accepts]: Start accepts. Automaton has 917 states and 1072 transitions. Word has length 89 [2023-12-02 16:53:08,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:53:08,116 INFO L495 AbstractCegarLoop]: Abstraction has 917 states and 1072 transitions. [2023-12-02 16:53:08,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.45) internal successors, (109), 20 states have internal predecessors, (109), 9 states have call successors, (22), 5 states have call predecessors, (22), 8 states have return successors, (23), 10 states have call predecessors, (23), 9 states have call successors, (23) [2023-12-02 16:53:08,117 INFO L276 IsEmpty]: Start isEmpty. Operand 917 states and 1072 transitions. [2023-12-02 16:53:08,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2023-12-02 16:53:08,120 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:53:08,120 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:53:08,126 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 16:53:08,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-12-02 16:53:08,322 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:53:08,323 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:53:08,323 INFO L85 PathProgramCache]: Analyzing trace with hash 1357838083, now seen corresponding path program 1 times [2023-12-02 16:53:08,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:53:08,323 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102906131] [2023-12-02 16:53:08,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:53:08,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:53:08,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:53:08,883 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 26 proven. 31 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 16:53:08,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:53:08,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102906131] [2023-12-02 16:53:08,883 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102906131] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:53:08,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2010055674] [2023-12-02 16:53:08,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:53:08,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:53:08,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:53:08,884 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:53:08,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 16:53:08,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:53:08,978 INFO L262 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 16:53:08,982 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:53:09,381 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 37 proven. 40 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:53:09,381 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:53:09,828 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 52 proven. 5 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 16:53:09,828 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2010055674] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:53:09,828 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1643569092] [2023-12-02 16:53:09,831 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2023-12-02 16:53:09,831 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:53:09,832 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:53:09,832 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:53:09,832 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:53:12,481 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 136 for LOIs [2023-12-02 16:53:12,549 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2023-12-02 16:53:12,730 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 37 for LOIs [2023-12-02 16:53:12,737 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 23 for LOIs [2023-12-02 16:53:12,760 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 19 for LOIs [2023-12-02 16:53:12,763 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 30 for LOIs [2023-12-02 16:53:12,766 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:53:16,361 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14451#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483648)) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483647) (<= 0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:53:16,361 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:53:16,361 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:53:16,361 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 11] total 33 [2023-12-02 16:53:16,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1550073342] [2023-12-02 16:53:16,361 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:53:16,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-12-02 16:53:16,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:53:16,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-12-02 16:53:16,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=427, Invalid=3863, Unknown=0, NotChecked=0, Total=4290 [2023-12-02 16:53:16,366 INFO L87 Difference]: Start difference. First operand 917 states and 1072 transitions. Second operand has 33 states, 33 states have (on average 4.818181818181818) internal successors, (159), 33 states have internal predecessors, (159), 18 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (32), 18 states have call predecessors, (32), 17 states have call successors, (32) [2023-12-02 16:53:19,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:53:19,240 INFO L93 Difference]: Finished difference Result 2652 states and 3203 transitions. [2023-12-02 16:53:19,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2023-12-02 16:53:19,241 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 4.818181818181818) internal successors, (159), 33 states have internal predecessors, (159), 18 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (32), 18 states have call predecessors, (32), 17 states have call successors, (32) Word has length 94 [2023-12-02 16:53:19,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:53:19,242 INFO L225 Difference]: With dead ends: 2652 [2023-12-02 16:53:19,242 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 16:53:19,253 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 397 GetRequests, 261 SyntacticMatches, 13 SemanticMatches, 123 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6158 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=1705, Invalid=13795, Unknown=0, NotChecked=0, Total=15500 [2023-12-02 16:53:19,253 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 1537 mSDsluCounter, 1379 mSDsCounter, 0 mSdLazyCounter, 2423 mSolverCounterSat, 1041 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1538 SdHoareTripleChecker+Valid, 1532 SdHoareTripleChecker+Invalid, 3464 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1041 IncrementalHoareTripleChecker+Valid, 2423 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-12-02 16:53:19,254 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1538 Valid, 1532 Invalid, 3464 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1041 Valid, 2423 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2023-12-02 16:53:19,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 16:53:19,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 16:53:19,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:53:19,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 16:53:19,255 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2023-12-02 16:53:19,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:53:19,255 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 16:53:19,256 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 4.818181818181818) internal successors, (159), 33 states have internal predecessors, (159), 18 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (32), 18 states have call predecessors, (32), 17 states have call successors, (32) [2023-12-02 16:53:19,256 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 16:53:19,256 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 16:53:19,258 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 16:53:19,263 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-12-02 16:53:19,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:53:19,460 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 16:53:28,253 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 160 167) no Hoare annotation was computed. [2023-12-02 16:53:28,253 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 160 167) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= ~pumpRunning~0 1))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse1 .cse2))) [2023-12-02 16:53:28,253 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2023-12-02 16:53:28,253 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2023-12-02 16:53:28,253 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 926 937) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse6 (not (= 2 ~waterLevel~0))) (.cse5 (not (= ~pumpRunning~0 1))) (.cse1 (not .cse7)) (.cse9 (not (= 0 ~systemActive~0))) (.cse0 (< 2 ~waterLevel~0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse8 (not .cse3))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse3 .cse4 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse5) (or .cse4 .cse6 .cse7 .cse8 .cse5) (or .cse1 .cse3 .cse4 .cse6 .cse5) (or .cse0 .cse2 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse3 .cse9) (or .cse0 .cse2 .cse4 .cse7 .cse8)))) [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 926 937) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 757 786) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L902 garLoopResultBuilder]: At program point L767-2(lines 767 781) the Hoare annotation is: true [2023-12-02 16:53:28,254 INFO L902 garLoopResultBuilder]: At program point L763(line 763) the Hoare annotation is: true [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point L763-1(line 763) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point L782(lines 757 786) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point L778(line 778) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 757 786) the Hoare annotation is: true [2023-12-02 16:53:28,254 INFO L899 garLoopResultBuilder]: For program point L771(lines 771 775) no Hoare annotation was computed. [2023-12-02 16:53:28,254 INFO L902 garLoopResultBuilder]: At program point L771-1(lines 771 775) the Hoare annotation is: true [2023-12-02 16:53:28,255 INFO L895 garLoopResultBuilder]: At program point L721(line 721) the Hoare annotation is: (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and (= ~pumpRunning~0 0) .cse10)) (.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 (not .cse1) .cse6 .cse7 .cse4) (or .cse0 .cse8 .cse5 (not (= 0 ~systemActive~0))) (or .cse3 .cse6 .cse7 (and (= 2 ~waterLevel~0) .cse9)) (or (< 1 |old(~waterLevel~0)|) .cse2 .cse3 .cse6 (and .cse10 .cse4 .cse9)) (or .cse0 .cse8 .cse3 .cse5)))) [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L721-1(line 721) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L738(lines 738 748) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L734(lines 734 751) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L734-1(lines 726 754) no Hoare annotation was computed. [2023-12-02 16:53:28,255 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2023-12-02 16:53:28,256 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse1 (= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3) (< |old(~switchedOnBeforeTS~0)| 1) .cse4 .cse5) (or .cse6 .cse4 .cse7) (or .cse0 .cse4 .cse5 (not (= |old(~waterLevel~0)| 2))) (or .cse4 (and .cse1 (= ~waterLevel~0 1) .cse2 .cse3) (< |old(~waterLevel~0)| 2) .cse5 .cse7) (or .cse6 .cse7 (not (= 0 ~systemActive~0))))) [2023-12-02 16:53:28,256 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 66 92) the Hoare annotation is: (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and (= ~pumpRunning~0 0) .cse10)) (.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 (not .cse1) .cse6 .cse7 .cse4) (or .cse0 .cse8 .cse5 (not (= 0 ~systemActive~0))) (or .cse3 .cse6 .cse7 (and (= 2 ~waterLevel~0) .cse9)) (or (< 1 |old(~waterLevel~0)|) .cse2 .cse3 .cse6 (and .cse10 .cse4 .cse9)) (or .cse0 .cse8 .cse3 .cse5)))) [2023-12-02 16:53:28,256 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse12 (= ~methaneLevelCritical~0 0)) (.cse7 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (= 0 ~systemActive~0)) (.cse6 (< 2 |old(~waterLevel~0)|))) (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 1)) (.cse4 (and (or .cse12 .cse9 .cse11 .cse10) (or .cse12 .cse7 .cse9 .cse10 .cse6))) (.cse3 (not (= 1 ~systemActive~0))) (.cse8 (not .cse12))) (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse0 .cse1 .cse2) (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse3 (< 0 |old(~waterLevel~0)|) .cse4 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 .cse1 .cse2)) (or .cse5 .cse3 .cse6) (or .cse7 .cse3 .cse8 .cse9 .cse6) (or .cse5 .cse6 (not .cse10)) (or (and .cse0 (= ~waterLevel~0 1) .cse1 .cse2) .cse3 .cse4 .cse11) (or .cse3 .cse8 .cse9 .cse11)))) [2023-12-02 16:53:28,256 INFO L895 garLoopResultBuilder]: At program point L736(line 736) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not .cse12)) (.cse5 (= ~pumpRunning~0 1)) (.cse7 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse15))) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (and .cse11 .cse8 .cse15)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse14 (not (= 0 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2 .cse3 (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 1) (= ~waterLevel~0 1) .cse4 .cse5)) (or (< 1 |old(~waterLevel~0)|) .cse6 .cse0 .cse1 .cse2 (and .cse7 .cse8 .cse4 .cse5)) (or .cse9 .cse0 .cse10) (or .cse0 (and .cse11 .cse7 .cse8 .cse4) (and (or .cse12 .cse2 .cse10) (or .cse12 .cse6 .cse2 .cse3))) (or .cse9 .cse13 .cse0 .cse3) (or .cse9 .cse13 .cse3 .cse14) (or .cse9 .cse10 .cse14)))) [2023-12-02 16:53:28,256 INFO L899 garLoopResultBuilder]: For program point L736-1(line 736) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L860(line 860) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 127 151) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 860) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L333(lines 270 337) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L300(lines 300 306) no Hoare annotation was computed. [2023-12-02 16:53:28,257 INFO L899 garLoopResultBuilder]: For program point L300-1(lines 300 306) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L895 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (<= ~waterLevel~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (not .cse6)) (.cse9 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse4 .cse5 (<= ~waterLevel~0 0) .cse7 .cse8) (and .cse0 .cse4 .cse5 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse9 .cse2 .cse3 .cse4 .cse5 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse4 .cse5) (and .cse6 .cse2 .cse4 .cse5 (= ~waterLevel~0 1) .cse7 .cse8) (and .cse0 .cse9 .cse6 .cse2 .cse4 .cse5) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5) (and .cse9 .cse6 .cse2 .cse4 .cse5 .cse8)))) [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point L247-1(lines 247 253) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point L842(lines 842 849) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L895 garLoopResultBuilder]: At program point L330(lines 279 331) the Hoare annotation is: false [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point L842-2(lines 842 849) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 324) no Hoare annotation was computed. [2023-12-02 16:53:28,258 INFO L895 garLoopResultBuilder]: At program point L318-2(lines 310 325) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (= 0 ~systemActive~0)) (.cse0 (<= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (not .cse9)) (.cse8 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 .cse2 .cse3 .cse6) (and .cse5 .cse0 .cse1 .cse7 .cse2 .cse3) (and .cse5 .cse8 .cse2 .cse3 .cse6) (and .cse8 .cse1 .cse7 .cse2 .cse3 .cse4) (and .cse5 .cse9 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse8 .cse9 .cse1 .cse2 .cse3) (and .cse5 .cse8 .cse1 .cse7 .cse2 .cse3) (and .cse8 .cse9 .cse1 .cse2 .cse3 .cse4)))) [2023-12-02 16:53:28,259 INFO L899 garLoopResultBuilder]: For program point L281(lines 280 329) no Hoare annotation was computed. [2023-12-02 16:53:28,259 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 325) no Hoare annotation was computed. [2023-12-02 16:53:28,259 INFO L895 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (not .cse9)) (.cse7 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse6 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse3 .cse4) (and .cse7 .cse5 .cse6 .cse2 .cse3 .cse8) (and .cse0 .cse9 .cse1 .cse5 .cse2 .cse3) (and .cse9 .cse1 .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse8) (and .cse0 .cse7 .cse9 .cse5 .cse2 .cse3) (and .cse0 .cse7 .cse5 .cse6 .cse2 .cse3) (and .cse7 .cse9 .cse5 .cse2 .cse3 .cse8)))) [2023-12-02 16:53:28,259 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 16:53:28,259 INFO L895 garLoopResultBuilder]: At program point L327(lines 280 329) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (not .cse7)) (.cse10 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse6 .cse2 .cse3) (and .cse7 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse8 .cse9) (and .cse0 .cse10 .cse2 .cse3 .cse4) (and .cse10 .cse5 .cse6 .cse2 .cse3 .cse9) (and .cse0 .cse7 .cse1 .cse5 .cse2 .cse3) (and .cse7 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse8 .cse9) (and .cse0 .cse10 .cse7 .cse5 .cse2 .cse3) (and .cse0 .cse10 .cse5 .cse6 .cse2 .cse3) (and .cse10 .cse7 .cse5 .cse2 .cse3 .cse9)))) [2023-12-02 16:53:28,259 INFO L899 garLoopResultBuilder]: For program point L290(lines 290 296) no Hoare annotation was computed. [2023-12-02 16:53:28,259 INFO L899 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2023-12-02 16:53:28,259 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= ~pumpRunning~0 1))) (or (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2023-12-02 16:53:28,260 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse1 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (or (not (= ~waterLevel~0 1)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 (< 1 ~waterLevel~0)))) [2023-12-02 16:53:28,260 INFO L899 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2023-12-02 16:53:28,260 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 101 125) the Hoare annotation is: (let ((.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (= ~pumpRunning~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 0 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 (< 1 ~waterLevel~0)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 (not (= 2 ~waterLevel~0))))) [2023-12-02 16:53:28,260 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2023-12-02 16:53:28,260 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (< 0 ~waterLevel~0) .cse1 .cse2 .cse3) (or .cse4 .cse0 (< 1 ~waterLevel~0) (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))) (or .cse4 .cse5 .cse0 (not (= 2 ~waterLevel~0))))) [2023-12-02 16:53:28,260 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2023-12-02 16:53:28,260 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2023-12-02 16:53:28,260 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 914 925) no Hoare annotation was computed. [2023-12-02 16:53:28,261 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 914 925) the Hoare annotation is: (let ((.cse4 (< ~switchedOnBeforeTS~0 1)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~pumpRunning~0 1))) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse1 (< 0 |old(~waterLevel~0)|) .cse4 .cse5 .cse6 .cse2) (or .cse0 .cse7 .cse1 .cse8 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse4 .cse5 .cse6 (= ~waterLevel~0 1)) (or .cse7 .cse1 .cse6 .cse8) (or .cse0 .cse2 (< 2 |old(~waterLevel~0)|) (not .cse3)))) [2023-12-02 16:53:28,261 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 179 187) no Hoare annotation was computed. [2023-12-02 16:53:28,261 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 179 187) the Hoare annotation is: true [2023-12-02 16:53:28,263 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:53:28,265 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 16:53:28,277 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 04:53:28 BoogieIcfgContainer [2023-12-02 16:53:28,278 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 16:53:28,278 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 16:53:28,278 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 16:53:28,278 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 16:53:28,279 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:52:49" (3/4) ... [2023-12-02 16:53:28,281 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 16:53:28,284 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-12-02 16:53:28,292 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 44 nodes and edges [2023-12-02 16:53:28,292 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-12-02 16:53:28,293 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 16:53:28,294 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:53:28,294 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:53:28,405 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 16:53:28,406 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 16:53:28,406 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 16:53:28,406 INFO L158 Benchmark]: Toolchain (without parser) took 40241.31ms. Allocated memory was 176.2MB in the beginning and 847.2MB in the end (delta: 671.1MB). Free memory was 128.3MB in the beginning and 688.1MB in the end (delta: -559.8MB). Peak memory consumption was 113.0MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,407 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 117.4MB. Free memory is still 65.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 16:53:28,407 INFO L158 Benchmark]: CACSL2BoogieTranslator took 420.49ms. Allocated memory is still 176.2MB. Free memory was 127.9MB in the beginning and 108.4MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,407 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.58ms. Allocated memory is still 176.2MB. Free memory was 108.4MB in the beginning and 106.4MB in the end (delta: 2.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,408 INFO L158 Benchmark]: Boogie Preprocessor took 28.10ms. Allocated memory is still 176.2MB. Free memory was 106.4MB in the beginning and 104.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 16:53:28,408 INFO L158 Benchmark]: RCFGBuilder took 480.32ms. Allocated memory is still 176.2MB. Free memory was 104.3MB in the beginning and 137.1MB in the end (delta: -32.8MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,409 INFO L158 Benchmark]: TraceAbstraction took 39129.70ms. Allocated memory was 176.2MB in the beginning and 847.2MB in the end (delta: 671.1MB). Free memory was 136.8MB in the beginning and 696.5MB in the end (delta: -559.7MB). Peak memory consumption was 505.6MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,409 INFO L158 Benchmark]: Witness Printer took 127.66ms. Allocated memory is still 847.2MB. Free memory was 695.5MB in the beginning and 688.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 16:53:28,411 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 117.4MB. Free memory is still 65.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 420.49ms. Allocated memory is still 176.2MB. Free memory was 127.9MB in the beginning and 108.4MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.58ms. Allocated memory is still 176.2MB. Free memory was 108.4MB in the beginning and 106.4MB in the end (delta: 2.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.10ms. Allocated memory is still 176.2MB. Free memory was 106.4MB in the beginning and 104.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 480.32ms. Allocated memory is still 176.2MB. Free memory was 104.3MB in the beginning and 137.1MB in the end (delta: -32.8MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. * TraceAbstraction took 39129.70ms. Allocated memory was 176.2MB in the beginning and 847.2MB in the end (delta: 671.1MB). Free memory was 136.8MB in the beginning and 696.5MB in the end (delta: -559.7MB). Peak memory consumption was 505.6MB. Max. memory is 16.1GB. * Witness Printer took 127.66ms. Allocated memory is still 847.2MB. Free memory was 695.5MB in the beginning and 688.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 266]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [266] - GenericResultAtLocation [Line: 338]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [338] - GenericResultAtLocation [Line: 704]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [704] - GenericResultAtLocation [Line: 755]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [755] - GenericResultAtLocation [Line: 855]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [855] - GenericResultAtLocation [Line: 864]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [864] - GenericResultAtLocation [Line: 899]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [899] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 860]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 39.1s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2860 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2824 mSDsluCounter, 4443 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3470 mSDsCounter, 1541 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4900 IncrementalHoareTripleChecker+Invalid, 6441 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1541 mSolverCounterUnsat, 973 mSDtfsCounter, 4900 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1075 GetRequests, 748 SyntacticMatches, 17 SemanticMatches, 310 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9958 ImplicationChecksByTransitivity, 12.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=917occurred in iteration=11, InterpolantAutomatonStates: 176, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 701 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 1656 PreInvPairs, 1915 NumberOfFragments, 2131 HoareAnnotationTreeSize, 1656 FomulaSimplifications, 39549 FormulaSimplificationTreeSizeReduction, 1.6s HoareSimplificationTime, 24 FomulaSimplificationsInter, 38591 FormulaSimplificationTreeSizeReductionInter, 7.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.7s InterpolantComputationTime, 907 NumberOfCodeBlocks, 907 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1136 ConstructedInterpolants, 0 QuantifiedInterpolants, 3090 SizeOfPredicates, 21 NumberOfNonLiveVariables, 1268 ConjunctsInSsa, 53 ConjunctsInUnsatCore, 19 InterpolantComputations, 9 PerfectInterpolantSequences, 551/657 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (tmp == 1)) && (splverifierCounter == 0))) || (((((((methaneLevelCritical == 0) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((2 == waterLevel) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (tmp == 1)) && (splverifierCounter == 0)) && (pumpRunning == 1))) || ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((((methaneLevelCritical == 0) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && (pumpRunning == 1))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0))) || ((((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (tmp == 1)) && (splverifierCounter == 0))) || ((((((2 == waterLevel) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (pumpRunning == 1))) - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-12-02 16:53:28,428 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4b2b8c1-4c73-45ab-a050-97f4ad91152a/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE