./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 15:51:39,192 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 15:51:39,255 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 15:51:39,261 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 15:51:39,261 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 15:51:39,286 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 15:51:39,287 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 15:51:39,288 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 15:51:39,288 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 15:51:39,289 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 15:51:39,289 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 15:51:39,290 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 15:51:39,290 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 15:51:39,291 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 15:51:39,291 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 15:51:39,292 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 15:51:39,292 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 15:51:39,293 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 15:51:39,293 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 15:51:39,294 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 15:51:39,294 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 15:51:39,295 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 15:51:39,295 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 15:51:39,296 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 15:51:39,296 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 15:51:39,297 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 15:51:39,297 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 15:51:39,298 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 15:51:39,298 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 15:51:39,298 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 15:51:39,299 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 15:51:39,299 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 15:51:39,300 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 15:51:39,300 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 15:51:39,300 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 15:51:39,301 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 15:51:39,301 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 15:51:39,301 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 15:51:39,302 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 15:51:39,302 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 15:51:39,302 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 15:51:39,303 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 15:51:39,303 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 15:51:39,303 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 15:51:39,303 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 15:51:39,304 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 15:51:39,304 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 15:51:39,304 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2023-12-02 15:51:39,526 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 15:51:39,547 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 15:51:39,549 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 15:51:39,551 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 15:51:39,551 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 15:51:39,553 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2023-12-02 15:51:42,399 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 15:51:42,596 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 15:51:42,596 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2023-12-02 15:51:42,607 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/data/f90fb1506/cd541c656aad43edbf740c92a33e7692/FLAG6689a523e [2023-12-02 15:51:42,617 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/data/f90fb1506/cd541c656aad43edbf740c92a33e7692 [2023-12-02 15:51:42,619 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 15:51:42,620 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 15:51:42,621 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 15:51:42,622 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 15:51:42,627 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 15:51:42,627 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:51:42" (1/1) ... [2023-12-02 15:51:42,628 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1795294f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:42, skipping insertion in model container [2023-12-02 15:51:42,629 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:51:42" (1/1) ... [2023-12-02 15:51:42,676 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 15:51:42,830 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2023-12-02 15:51:42,936 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 15:51:42,952 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 15:51:42,964 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-12-02 15:51:42,966 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] [2023-12-02 15:51:42,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [159] [2023-12-02 15:51:42,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [525] [2023-12-02 15:51:42,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] [2023-12-02 15:51:42,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [777] [2023-12-02 15:51:42,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [843] [2023-12-02 15:51:42,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [881] [2023-12-02 15:51:42,979 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2023-12-02 15:51:43,045 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 15:51:43,071 INFO L206 MainTranslator]: Completed translation [2023-12-02 15:51:43,072 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43 WrapperNode [2023-12-02 15:51:43,072 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 15:51:43,073 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 15:51:43,074 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 15:51:43,074 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 15:51:43,083 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,102 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,137 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 211 [2023-12-02 15:51:43,138 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 15:51:43,139 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 15:51:43,139 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 15:51:43,139 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 15:51:43,151 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,152 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,155 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,155 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,162 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,168 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,171 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,173 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,177 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 15:51:43,178 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 15:51:43,178 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 15:51:43,178 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 15:51:43,179 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (1/1) ... [2023-12-02 15:51:43,185 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 15:51:43,203 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:51:43,220 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 15:51:43,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 15:51:43,263 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 15:51:43,263 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 15:51:43,263 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 15:51:43,263 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 15:51:43,264 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 15:51:43,264 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 15:51:43,264 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 15:51:43,264 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 15:51:43,264 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 15:51:43,265 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 15:51:43,265 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 15:51:43,265 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-12-02 15:51:43,265 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-12-02 15:51:43,265 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 15:51:43,266 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 15:51:43,266 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 15:51:43,266 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 15:51:43,266 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 15:51:43,266 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 15:51:43,267 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 15:51:43,366 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 15:51:43,369 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 15:51:43,672 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 15:51:43,823 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 15:51:43,823 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 15:51:43,825 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:51:43 BoogieIcfgContainer [2023-12-02 15:51:43,825 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 15:51:43,828 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 15:51:43,828 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 15:51:43,832 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 15:51:43,832 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 03:51:42" (1/3) ... [2023-12-02 15:51:43,833 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36406561 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:51:43, skipping insertion in model container [2023-12-02 15:51:43,833 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:51:43" (2/3) ... [2023-12-02 15:51:43,834 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36406561 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:51:43, skipping insertion in model container [2023-12-02 15:51:43,834 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:51:43" (3/3) ... [2023-12-02 15:51:43,836 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2023-12-02 15:51:43,854 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 15:51:43,854 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 15:51:43,910 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 15:51:43,917 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@11f06625, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 15:51:43,917 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 15:51:43,921 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 40 states have (on average 1.4) internal successors, (56), 48 states have internal predecessors, (56), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2023-12-02 15:51:43,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 15:51:43,932 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:43,933 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:43,933 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:43,939 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:43,939 INFO L85 PathProgramCache]: Analyzing trace with hash -837450234, now seen corresponding path program 1 times [2023-12-02 15:51:43,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:43,949 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974220269] [2023-12-02 15:51:43,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:43,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:44,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:44,148 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:44,148 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:44,149 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974220269] [2023-12-02 15:51:44,150 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [974220269] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:44,150 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:44,150 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 15:51:44,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065255242] [2023-12-02 15:51:44,153 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:44,158 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 15:51:44,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:44,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 15:51:44,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 15:51:44,195 INFO L87 Difference]: Start difference. First operand has 64 states, 40 states have (on average 1.4) internal successors, (56), 48 states have internal predecessors, (56), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:51:44,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:44,275 INFO L93 Difference]: Finished difference Result 126 states and 169 transitions. [2023-12-02 15:51:44,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 15:51:44,278 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-12-02 15:51:44,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:44,288 INFO L225 Difference]: With dead ends: 126 [2023-12-02 15:51:44,288 INFO L226 Difference]: Without dead ends: 59 [2023-12-02 15:51:44,292 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 15:51:44,297 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:44,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 64 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:51:44,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-12-02 15:51:44,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2023-12-02 15:51:44,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.2972972972972974) internal successors, (48), 44 states have internal predecessors, (48), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-12-02 15:51:44,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 75 transitions. [2023-12-02 15:51:44,346 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 75 transitions. Word has length 21 [2023-12-02 15:51:44,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:44,346 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 75 transitions. [2023-12-02 15:51:44,347 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:51:44,347 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 75 transitions. [2023-12-02 15:51:44,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-12-02 15:51:44,351 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:44,351 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:44,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 15:51:44,352 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:44,352 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:44,353 INFO L85 PathProgramCache]: Analyzing trace with hash 804977273, now seen corresponding path program 1 times [2023-12-02 15:51:44,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:44,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [240471706] [2023-12-02 15:51:44,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:44,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:44,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:44,505 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:44,505 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:44,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [240471706] [2023-12-02 15:51:44,506 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [240471706] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:44,506 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:44,506 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 15:51:44,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [61267901] [2023-12-02 15:51:44,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:44,508 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 15:51:44,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:44,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 15:51:44,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:51:44,510 INFO L87 Difference]: Start difference. First operand 59 states and 75 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 15:51:44,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:44,568 INFO L93 Difference]: Finished difference Result 116 states and 151 transitions. [2023-12-02 15:51:44,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 15:51:44,569 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2023-12-02 15:51:44,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:44,572 INFO L225 Difference]: With dead ends: 116 [2023-12-02 15:51:44,572 INFO L226 Difference]: Without dead ends: 59 [2023-12-02 15:51:44,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:51:44,576 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 62 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:44,577 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 58 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:51:44,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-12-02 15:51:44,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2023-12-02 15:51:44,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.2702702702702702) internal successors, (47), 44 states have internal predecessors, (47), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-12-02 15:51:44,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 74 transitions. [2023-12-02 15:51:44,593 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 74 transitions. Word has length 24 [2023-12-02 15:51:44,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:44,595 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 74 transitions. [2023-12-02 15:51:44,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 15:51:44,596 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 74 transitions. [2023-12-02 15:51:44,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-12-02 15:51:44,598 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:44,598 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:44,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 15:51:44,599 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:44,600 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:44,600 INFO L85 PathProgramCache]: Analyzing trace with hash -324633623, now seen corresponding path program 1 times [2023-12-02 15:51:44,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:44,601 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968360955] [2023-12-02 15:51:44,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:44,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:44,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:44,733 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:44,733 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:44,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968360955] [2023-12-02 15:51:44,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [968360955] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:44,734 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:44,734 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 15:51:44,734 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748156239] [2023-12-02 15:51:44,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:44,735 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 15:51:44,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:44,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 15:51:44,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:51:44,737 INFO L87 Difference]: Start difference. First operand 59 states and 74 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-12-02 15:51:44,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:44,792 INFO L93 Difference]: Finished difference Result 95 states and 119 transitions. [2023-12-02 15:51:44,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 15:51:44,793 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 29 [2023-12-02 15:51:44,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:44,794 INFO L225 Difference]: With dead ends: 95 [2023-12-02 15:51:44,795 INFO L226 Difference]: Without dead ends: 51 [2023-12-02 15:51:44,796 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:51:44,798 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 7 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:44,799 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 89 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:51:44,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2023-12-02 15:51:44,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2023-12-02 15:51:44,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 32 states have (on average 1.28125) internal successors, (41), 39 states have internal predecessors, (41), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-12-02 15:51:44,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 63 transitions. [2023-12-02 15:51:44,812 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 63 transitions. Word has length 29 [2023-12-02 15:51:44,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:44,813 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 63 transitions. [2023-12-02 15:51:44,813 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-12-02 15:51:44,814 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 63 transitions. [2023-12-02 15:51:44,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-12-02 15:51:44,815 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:44,816 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:44,816 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 15:51:44,816 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:44,817 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:44,817 INFO L85 PathProgramCache]: Analyzing trace with hash -659106701, now seen corresponding path program 1 times [2023-12-02 15:51:44,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:44,818 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1418919487] [2023-12-02 15:51:44,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:44,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:44,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:44,993 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:44,994 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:44,994 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1418919487] [2023-12-02 15:51:44,994 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1418919487] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:44,994 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:44,995 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 15:51:44,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910207220] [2023-12-02 15:51:44,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:44,996 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 15:51:44,996 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:44,997 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 15:51:44,997 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 15:51:44,997 INFO L87 Difference]: Start difference. First operand 51 states and 63 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 15:51:45,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:45,203 INFO L93 Difference]: Finished difference Result 150 states and 188 transitions. [2023-12-02 15:51:45,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 15:51:45,206 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2023-12-02 15:51:45,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:45,208 INFO L225 Difference]: With dead ends: 150 [2023-12-02 15:51:45,209 INFO L226 Difference]: Without dead ends: 101 [2023-12-02 15:51:45,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 15:51:45,212 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 44 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:45,213 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 255 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 15:51:45,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2023-12-02 15:51:45,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 95. [2023-12-02 15:51:45,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 71 states have internal predecessors, (77), 21 states have call successors, (21), 13 states have call predecessors, (21), 13 states have return successors, (21), 17 states have call predecessors, (21), 21 states have call successors, (21) [2023-12-02 15:51:45,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 119 transitions. [2023-12-02 15:51:45,239 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 119 transitions. Word has length 31 [2023-12-02 15:51:45,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:45,240 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 119 transitions. [2023-12-02 15:51:45,240 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-12-02 15:51:45,240 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 119 transitions. [2023-12-02 15:51:45,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-12-02 15:51:45,243 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:45,243 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:45,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 15:51:45,243 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:45,244 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:45,244 INFO L85 PathProgramCache]: Analyzing trace with hash 1927310735, now seen corresponding path program 1 times [2023-12-02 15:51:45,244 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:45,245 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [318419930] [2023-12-02 15:51:45,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:45,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:45,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:45,381 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 15:51:45,381 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:45,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [318419930] [2023-12-02 15:51:45,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [318419930] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:45,382 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:45,382 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 15:51:45,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687618355] [2023-12-02 15:51:45,383 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:45,383 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 15:51:45,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:45,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 15:51:45,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 15:51:45,385 INFO L87 Difference]: Start difference. First operand 95 states and 119 transitions. Second operand has 6 states, 5 states have (on average 5.0) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 15:51:45,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:45,609 INFO L93 Difference]: Finished difference Result 261 states and 331 transitions. [2023-12-02 15:51:45,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 15:51:45,610 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.0) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 34 [2023-12-02 15:51:45,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:45,613 INFO L225 Difference]: With dead ends: 261 [2023-12-02 15:51:45,613 INFO L226 Difference]: Without dead ends: 168 [2023-12-02 15:51:45,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 15:51:45,616 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 43 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:45,617 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 211 Invalid, 118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 15:51:45,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2023-12-02 15:51:45,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 164. [2023-12-02 15:51:45,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 107 states have (on average 1.2149532710280373) internal successors, (130), 117 states have internal predecessors, (130), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 30 states have call predecessors, (38), 30 states have call successors, (38) [2023-12-02 15:51:45,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 198 transitions. [2023-12-02 15:51:45,652 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 198 transitions. Word has length 34 [2023-12-02 15:51:45,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:45,653 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 198 transitions. [2023-12-02 15:51:45,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.0) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 15:51:45,653 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 198 transitions. [2023-12-02 15:51:45,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-12-02 15:51:45,655 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:45,655 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:45,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 15:51:45,656 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:45,656 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:45,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1432301024, now seen corresponding path program 1 times [2023-12-02 15:51:45,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:45,657 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885485414] [2023-12-02 15:51:45,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:45,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:45,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:45,899 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:45,900 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:45,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885485414] [2023-12-02 15:51:45,900 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885485414] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:45,900 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:45,900 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 15:51:45,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355081457] [2023-12-02 15:51:45,901 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:45,901 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 15:51:45,902 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:45,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 15:51:45,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-12-02 15:51:45,903 INFO L87 Difference]: Start difference. First operand 164 states and 198 transitions. Second operand has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-12-02 15:51:46,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:46,156 INFO L93 Difference]: Finished difference Result 477 states and 597 transitions. [2023-12-02 15:51:46,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 15:51:46,157 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 36 [2023-12-02 15:51:46,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:46,161 INFO L225 Difference]: With dead ends: 477 [2023-12-02 15:51:46,161 INFO L226 Difference]: Without dead ends: 315 [2023-12-02 15:51:46,162 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2023-12-02 15:51:46,163 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 130 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:46,163 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 191 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 15:51:46,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2023-12-02 15:51:46,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 307. [2023-12-02 15:51:46,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 204 states have (on average 1.2107843137254901) internal successors, (247), 217 states have internal predecessors, (247), 55 states have call successors, (55), 47 states have call predecessors, (55), 47 states have return successors, (76), 53 states have call predecessors, (76), 55 states have call successors, (76) [2023-12-02 15:51:46,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 378 transitions. [2023-12-02 15:51:46,222 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 378 transitions. Word has length 36 [2023-12-02 15:51:46,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:46,223 INFO L495 AbstractCegarLoop]: Abstraction has 307 states and 378 transitions. [2023-12-02 15:51:46,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-12-02 15:51:46,223 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 378 transitions. [2023-12-02 15:51:46,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-12-02 15:51:46,225 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:46,225 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:46,226 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 15:51:46,226 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:46,226 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:46,226 INFO L85 PathProgramCache]: Analyzing trace with hash 571875191, now seen corresponding path program 1 times [2023-12-02 15:51:46,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:46,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101801454] [2023-12-02 15:51:46,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:46,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:46,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:46,472 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:51:46,473 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:46,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101801454] [2023-12-02 15:51:46,473 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101801454] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:46,473 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:46,473 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 15:51:46,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732275044] [2023-12-02 15:51:46,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:46,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 15:51:46,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:46,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 15:51:46,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-12-02 15:51:46,475 INFO L87 Difference]: Start difference. First operand 307 states and 378 transitions. Second operand has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 15:51:47,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:47,063 INFO L93 Difference]: Finished difference Result 909 states and 1129 transitions. [2023-12-02 15:51:47,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-12-02 15:51:47,064 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 39 [2023-12-02 15:51:47,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:47,069 INFO L225 Difference]: With dead ends: 909 [2023-12-02 15:51:47,069 INFO L226 Difference]: Without dead ends: 604 [2023-12-02 15:51:47,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=75, Invalid=231, Unknown=0, NotChecked=0, Total=306 [2023-12-02 15:51:47,072 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 151 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:47,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [160 Valid, 282 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 15:51:47,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 604 states. [2023-12-02 15:51:47,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 604 to 584. [2023-12-02 15:51:47,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 393 states have (on average 1.1806615776081424) internal successors, (464), 419 states have internal predecessors, (464), 100 states have call successors, (100), 81 states have call predecessors, (100), 90 states have return successors, (137), 100 states have call predecessors, (137), 100 states have call successors, (137) [2023-12-02 15:51:47,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 701 transitions. [2023-12-02 15:51:47,154 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 701 transitions. Word has length 39 [2023-12-02 15:51:47,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:47,155 INFO L495 AbstractCegarLoop]: Abstraction has 584 states and 701 transitions. [2023-12-02 15:51:47,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 15:51:47,155 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 701 transitions. [2023-12-02 15:51:47,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2023-12-02 15:51:47,158 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:47,159 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:47,159 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 15:51:47,159 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:47,159 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:47,160 INFO L85 PathProgramCache]: Analyzing trace with hash -1124363813, now seen corresponding path program 1 times [2023-12-02 15:51:47,160 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:47,160 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464385333] [2023-12-02 15:51:47,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:47,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:47,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:47,348 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-12-02 15:51:47,348 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:47,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1464385333] [2023-12-02 15:51:47,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1464385333] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:51:47,349 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:51:47,349 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 15:51:47,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [319295600] [2023-12-02 15:51:47,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:51:47,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 15:51:47,350 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:47,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 15:51:47,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-12-02 15:51:47,351 INFO L87 Difference]: Start difference. First operand 584 states and 701 transitions. Second operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 8 states have internal predecessors, (43), 5 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 4 states have call predecessors, (9), 5 states have call successors, (9) [2023-12-02 15:51:47,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:51:47,630 INFO L93 Difference]: Finished difference Result 1174 states and 1419 transitions. [2023-12-02 15:51:47,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-12-02 15:51:47,631 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 8 states have internal predecessors, (43), 5 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 4 states have call predecessors, (9), 5 states have call successors, (9) Word has length 67 [2023-12-02 15:51:47,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:51:47,635 INFO L225 Difference]: With dead ends: 1174 [2023-12-02 15:51:47,635 INFO L226 Difference]: Without dead ends: 608 [2023-12-02 15:51:47,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=75, Invalid=165, Unknown=0, NotChecked=0, Total=240 [2023-12-02 15:51:47,637 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 80 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 15:51:47,638 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 121 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 15:51:47,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2023-12-02 15:51:47,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 584. [2023-12-02 15:51:47,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 393 states have (on average 1.1755725190839694) internal successors, (462), 419 states have internal predecessors, (462), 100 states have call successors, (100), 81 states have call predecessors, (100), 90 states have return successors, (137), 100 states have call predecessors, (137), 100 states have call successors, (137) [2023-12-02 15:51:47,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 699 transitions. [2023-12-02 15:51:47,693 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 699 transitions. Word has length 67 [2023-12-02 15:51:47,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:51:47,693 INFO L495 AbstractCegarLoop]: Abstraction has 584 states and 699 transitions. [2023-12-02 15:51:47,693 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 8 states have internal predecessors, (43), 5 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 4 states have call predecessors, (9), 5 states have call successors, (9) [2023-12-02 15:51:47,694 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 699 transitions. [2023-12-02 15:51:47,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2023-12-02 15:51:47,696 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:51:47,697 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:51:47,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-12-02 15:51:47,697 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:51:47,697 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:51:47,697 INFO L85 PathProgramCache]: Analyzing trace with hash 1244773011, now seen corresponding path program 1 times [2023-12-02 15:51:47,698 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:51:47,698 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396973891] [2023-12-02 15:51:47,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:47,698 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:51:47,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:47,940 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 5 proven. 15 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-12-02 15:51:47,940 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:51:47,941 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396973891] [2023-12-02 15:51:47,941 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1396973891] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:51:47,941 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [269723221] [2023-12-02 15:51:47,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:51:47,941 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:51:47,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:51:47,945 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:51:47,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 15:51:48,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:51:48,068 INFO L262 TraceCheckSpWp]: Trace formula consists of 293 conjuncts, 13 conjunts are in the unsatisfiable core [2023-12-02 15:51:48,077 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:51:48,196 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-12-02 15:51:48,197 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:51:48,399 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-12-02 15:51:48,399 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [269723221] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:51:48,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [305937783] [2023-12-02 15:51:48,423 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2023-12-02 15:51:48,423 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:51:48,427 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:51:48,433 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:51:48,433 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:51:53,256 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 130 for LOIs [2023-12-02 15:51:53,337 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2023-12-02 15:51:53,991 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 30 for LOIs [2023-12-02 15:51:53,998 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 68 for LOIs [2023-12-02 15:51:54,404 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 42 for LOIs [2023-12-02 15:51:54,423 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 55 for LOIs [2023-12-02 15:51:54,461 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:51:59,937 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7631#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= ~pumpRunning~0 2147483647) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 (+ ~waterLevel~0 2147483648)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 (+ ~pumpRunning~0 2147483648)) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 15:51:59,937 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:51:59,938 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:51:59,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 17 [2023-12-02 15:51:59,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450705636] [2023-12-02 15:51:59,938 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:51:59,939 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2023-12-02 15:51:59,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:51:59,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2023-12-02 15:51:59,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=279, Invalid=2691, Unknown=0, NotChecked=0, Total=2970 [2023-12-02 15:51:59,942 INFO L87 Difference]: Start difference. First operand 584 states and 699 transitions. Second operand has 17 states, 14 states have (on average 5.5) internal successors, (77), 13 states have internal predecessors, (77), 5 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 5 states have call successors, (20) [2023-12-02 15:52:02,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:52:02,888 INFO L93 Difference]: Finished difference Result 1427 states and 1789 transitions. [2023-12-02 15:52:02,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2023-12-02 15:52:02,889 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 14 states have (on average 5.5) internal successors, (77), 13 states have internal predecessors, (77), 5 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 5 states have call successors, (20) Word has length 71 [2023-12-02 15:52:02,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:52:02,898 INFO L225 Difference]: With dead ends: 1427 [2023-12-02 15:52:02,899 INFO L226 Difference]: Without dead ends: 930 [2023-12-02 15:52:02,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 303 GetRequests, 188 SyntacticMatches, 3 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4329 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=1152, Invalid=11730, Unknown=0, NotChecked=0, Total=12882 [2023-12-02 15:52:02,909 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 764 mSDsluCounter, 934 mSDsCounter, 0 mSdLazyCounter, 1549 mSolverCounterSat, 529 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 770 SdHoareTripleChecker+Valid, 1086 SdHoareTripleChecker+Invalid, 2078 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 529 IncrementalHoareTripleChecker+Valid, 1549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-12-02 15:52:02,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [770 Valid, 1086 Invalid, 2078 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [529 Valid, 1549 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-12-02 15:52:02,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 930 states. [2023-12-02 15:52:03,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 930 to 774. [2023-12-02 15:52:03,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 509 states have (on average 1.1669941060903732) internal successors, (594), 549 states have internal predecessors, (594), 141 states have call successors, (141), 118 states have call predecessors, (141), 123 states have return successors, (185), 132 states have call predecessors, (185), 141 states have call successors, (185) [2023-12-02 15:52:03,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 920 transitions. [2023-12-02 15:52:03,025 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 920 transitions. Word has length 71 [2023-12-02 15:52:03,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:52:03,026 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 920 transitions. [2023-12-02 15:52:03,026 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 14 states have (on average 5.5) internal successors, (77), 13 states have internal predecessors, (77), 5 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 5 states have call successors, (20) [2023-12-02 15:52:03,026 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 920 transitions. [2023-12-02 15:52:03,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-12-02 15:52:03,030 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:52:03,030 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:52:03,040 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 15:52:03,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:52:03,232 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:52:03,232 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:52:03,232 INFO L85 PathProgramCache]: Analyzing trace with hash -1468908318, now seen corresponding path program 1 times [2023-12-02 15:52:03,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:52:03,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [195274290] [2023-12-02 15:52:03,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:52:03,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:52:03,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:52:03,774 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 6 proven. 18 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-12-02 15:52:03,774 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:52:03,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [195274290] [2023-12-02 15:52:03,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [195274290] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:52:03,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1107040148] [2023-12-02 15:52:03,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:52:03,775 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:52:03,775 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:52:03,776 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:52:03,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 15:52:03,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:52:03,885 INFO L262 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 28 conjunts are in the unsatisfiable core [2023-12-02 15:52:03,891 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:52:04,392 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 18 proven. 13 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-12-02 15:52:04,392 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:52:04,932 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 1 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2023-12-02 15:52:04,932 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1107040148] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:52:04,932 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1600888238] [2023-12-02 15:52:04,937 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2023-12-02 15:52:04,937 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:52:04,937 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:52:04,938 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:52:04,938 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:52:08,852 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 128 for LOIs [2023-12-02 15:52:08,892 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2023-12-02 15:52:10,337 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 3 for LOIs [2023-12-02 15:52:10,338 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 27 for LOIs [2023-12-02 15:52:10,472 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 28 for LOIs [2023-12-02 15:52:10,478 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 28 for LOIs [2023-12-02 15:52:10,482 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:52:17,640 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11260#(and (= |old(~pumpRunning~0)| 0) (<= ~waterLevel~0 2147483647) (or (and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (exists ((|v_processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1_BEFORE_RETURN_12| Int) (|v_processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1_BEFORE_RETURN_12| Int) (|v_processEnvironment__wrappee__methaneQuery_~tmp~4#1_BEFORE_RETURN_12| Int)) (and (= |v_processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1_BEFORE_RETURN_12| 0) (<= 2 ~waterLevel~0) (= |v_processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1_BEFORE_RETURN_12| 1) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (exists ((|v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret37#1_36| Int)) (and (= |v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret37#1_36| 0) (= ~pumpRunning~0 1))) (= |v_processEnvironment__wrappee__methaneQuery_~tmp~4#1_BEFORE_RETURN_12| 1))) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (not (= 0 ~systemActive~0)) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| Int) (|v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| Int)) (and (or (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 0)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| 2147483648)) (<= |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| 2147483647))) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483647) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483648))))) (and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (exists ((|v_processEnvironment__wrappee__methaneQuery_~tmp~4#1_BEFORE_RETURN_11| Int) (|v_processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1_BEFORE_RETURN_11| Int) (|v_processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1_BEFORE_RETURN_11| Int)) (and (= |v_processEnvironment__wrappee__methaneQuery_~tmp~4#1_BEFORE_RETURN_11| 1) (<= 2 ~waterLevel~0) (= |v_processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1_BEFORE_RETURN_11| 1) (= |v_processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1_BEFORE_RETURN_11| 0) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (exists ((|v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret37#1_36| Int)) (and (= |v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret37#1_36| 0) (= ~pumpRunning~0 1))))) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (not (= 0 ~systemActive~0)) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| Int) (|v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| Int)) (and (or (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 0)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| 2147483648)) (<= |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_14| 2147483647))) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483647) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_24| 2147483648)))))) (= ~switchedOnBeforeTS~0 0) (= |old(~switchedOnBeforeTS~0)| 0))' at error location [2023-12-02 15:52:17,640 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:52:17,640 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:52:17,640 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 10] total 24 [2023-12-02 15:52:17,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [399839611] [2023-12-02 15:52:17,640 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:52:17,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2023-12-02 15:52:17,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:52:17,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2023-12-02 15:52:17,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=427, Invalid=2995, Unknown=0, NotChecked=0, Total=3422 [2023-12-02 15:52:17,644 INFO L87 Difference]: Start difference. First operand 774 states and 920 transitions. Second operand has 24 states, 22 states have (on average 4.909090909090909) internal successors, (108), 24 states have internal predecessors, (108), 14 states have call successors, (30), 9 states have call predecessors, (30), 11 states have return successors, (28), 13 states have call predecessors, (28), 14 states have call successors, (28) [2023-12-02 15:52:19,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:52:19,027 INFO L93 Difference]: Finished difference Result 1456 states and 1776 transitions. [2023-12-02 15:52:19,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2023-12-02 15:52:19,030 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 4.909090909090909) internal successors, (108), 24 states have internal predecessors, (108), 14 states have call successors, (30), 9 states have call predecessors, (30), 11 states have return successors, (28), 13 states have call predecessors, (28), 14 states have call successors, (28) Word has length 72 [2023-12-02 15:52:19,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:52:19,031 INFO L225 Difference]: With dead ends: 1456 [2023-12-02 15:52:19,031 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 15:52:19,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 172 SyntacticMatches, 7 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2746 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=934, Invalid=6548, Unknown=0, NotChecked=0, Total=7482 [2023-12-02 15:52:19,039 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 462 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 812 mSolverCounterSat, 270 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 467 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 1082 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 270 IncrementalHoareTripleChecker+Valid, 812 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-12-02 15:52:19,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [467 Valid, 453 Invalid, 1082 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [270 Valid, 812 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-12-02 15:52:19,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 15:52:19,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 15:52:19,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 15:52:19,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 15:52:19,042 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 72 [2023-12-02 15:52:19,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:52:19,043 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 15:52:19,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 4.909090909090909) internal successors, (108), 24 states have internal predecessors, (108), 14 states have call successors, (30), 9 states have call predecessors, (30), 11 states have return successors, (28), 13 states have call predecessors, (28), 14 states have call successors, (28) [2023-12-02 15:52:19,043 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 15:52:19,043 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 15:52:19,046 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 15:52:19,054 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 15:52:19,247 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:52:19,249 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 15:52:23,345 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2023-12-02 15:52:23,345 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2023-12-02 15:52:23,345 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse6 (= |old(~methaneLevelCritical~0)| 0)) (.cse7 (= ~pumpRunning~0 1))) (let ((.cse3 (not .cse7)) (.cse0 (not .cse6)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= 2 ~waterLevel~0))) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or .cse0 .cse1 .cse2 (< 1 ~waterLevel~0) (not (= ~switchedOnBeforeTS~0 1)) .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse5 .cse1 .cse2) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse4 .cse6 (not .cse1) .cse7)))) [2023-12-02 15:52:23,345 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-12-02 15:52:23,345 INFO L899 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2023-12-02 15:52:23,345 INFO L902 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L902 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2023-12-02 15:52:23,346 INFO L902 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L908(lines 883 912) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 883 912) the Hoare annotation is: true [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse4 (= ~switchedOnBeforeTS~0 0)) (.cse0 (< 1 |old(~waterLevel~0)|)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not .cse1) .cse2 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (or .cse2 (not (= |old(~waterLevel~0)| 2)) (and .cse3 (= 2 ~waterLevel~0) .cse1 .cse4)) (or .cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse2 (= |old(~switchedOnBeforeTS~0)| 0)))) [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L663-1(lines 644 668) no Hoare annotation was computed. [2023-12-02 15:52:23,346 INFO L899 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L895 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse7 (= ~switchedOnBeforeTS~0 0)) (.cse13 (not (= |old(~waterLevel~0)| 2)))) (let ((.cse8 (and (<= 2 |old(~waterLevel~0)|) .cse13)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse1 (not .cse7)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |old(~waterLevel~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (= ~pumpRunning~0 1))) (and (let ((.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (< 1 |old(~waterLevel~0)|) (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 (and .cse1 .cse2 .cse3 .cse4) (and .cse5 (< ~waterLevel~0 1) .cse3 .cse4 .cse6) (= |old(~switchedOnBeforeTS~0)| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse0 .cse8) (or .cse0 .cse9 .cse10 .cse8 (not (= |old(~switchedOnBeforeTS~0)| 1)) .cse11) (let ((.cse12 (<= ~waterLevel~0 1))) (or (and .cse5 .cse12 .cse3 .cse6) .cse0 (and .cse1 .cse2 .cse12 .cse3) .cse13)) (or .cse0 .cse9 .cse10 .cse13 .cse11)))) [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 660) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L895 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse6 (not (= |old(~waterLevel~0)| 2)))) (let ((.cse0 (not (= ~switchedOnBeforeTS~0 0))) (.cse3 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (and (<= 2 |old(~waterLevel~0)|) .cse6)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2 (and .cse0 (= ~pumpRunning~0 0) .cse4) .cse3) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse1 (and .cse5 .cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2) (or .cse1 (and .cse5 (= 2 ~waterLevel~0)) .cse6)))) [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L541-1(line 541) no Hoare annotation was computed. [2023-12-02 15:52:23,347 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2023-12-02 15:52:23,348 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2023-12-02 15:52:23,348 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 583 609) the Hoare annotation is: (let ((.cse6 (not (= |old(~waterLevel~0)| 2)))) (let ((.cse0 (not (= ~switchedOnBeforeTS~0 0))) (.cse3 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (and (<= 2 |old(~waterLevel~0)|) .cse6)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2 (and .cse0 (= ~pumpRunning~0 0) .cse4) .cse3) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse1 (and .cse5 .cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2) (or .cse1 (and .cse5 (= 2 ~waterLevel~0)) .cse6)))) [2023-12-02 15:52:23,348 INFO L899 garLoopResultBuilder]: For program point L554-1(lines 546 574) no Hoare annotation was computed. [2023-12-02 15:52:23,348 INFO L895 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (or (< 1 |old(~waterLevel~0)|) (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 (< ~waterLevel~0 1) .cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse2) .cse3) (or (and .cse0 (not (= ~pumpRunning~0 0)) (<= ~waterLevel~0 1) .cse1 .cse2) .cse3 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (<= 2 |old(~waterLevel~0)|)))) [2023-12-02 15:52:23,348 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2023-12-02 15:52:23,348 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2023-12-02 15:52:23,348 INFO L895 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2)))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse1 (and (<= 2 |old(~waterLevel~0)|) .cse2))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 .cse2 (and .cse3 (<= ~waterLevel~0 1) .cse4)) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 (and .cse3 (or (< ~waterLevel~0 1) (< ~waterLevel~0 |old(~waterLevel~0)|)) (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse4) .cse1)))) [2023-12-02 15:52:23,348 INFO L899 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L895 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) .cse0 .cse1) (and .cse2 .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse2 .cse0 .cse1))) [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L965(lines 965 972) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L965-2(lines 965 972) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L895 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse3 (= 2 ~waterLevel~0))) (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (or .cse3 (< ~waterLevel~0 2)))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and .cse3 .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2)))) [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2023-12-02 15:52:23,349 INFO L899 garLoopResultBuilder]: For program point L838(lines 779 842) no Hoare annotation was computed. [2023-12-02 15:52:23,350 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) .cse0 .cse1) (and .cse2 .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse2 .cse0 .cse1))) [2023-12-02 15:52:23,350 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 15:52:23,350 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 15:52:23,350 INFO L895 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2023-12-02 15:52:23,350 INFO L899 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2023-12-02 15:52:23,350 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse0 (= 2 ~waterLevel~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (or .cse0 (< ~waterLevel~0 2)))) (or (and .cse0 (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) .cse1 .cse2) (and .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3)))) [2023-12-02 15:52:23,350 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-12-02 15:52:23,350 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse1 (< 1 |old(~waterLevel~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (= 2 ~waterLevel~0) .cse0 (and (= ~methaneLevelCritical~0 0) (not (= ~pumpRunning~0 1))) (not (= |old(~waterLevel~0)| 2))) (or .cse1 .cse0 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2) (or .cse1 (not (= ~pumpRunning~0 0)) .cse0 .cse2))) [2023-12-02 15:52:23,350 INFO L895 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0) (= ~switchedOnBeforeTS~0 0)) (< 1 ~waterLevel~0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 2 ~waterLevel~0)) .cse1))) [2023-12-02 15:52:23,350 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point L622(lines 622 639) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (< 1 ~waterLevel~0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 2 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 1)) .cse1))) [2023-12-02 15:52:23,351 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 618 642) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= 2 ~waterLevel~0)) .cse1) (or .cse0 (< 1 ~waterLevel~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse1))) [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point L682-1(line 682) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or .cse3 .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or .cse3 .cse0 .cse1 .cse2))) [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2023-12-02 15:52:23,351 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 713 721) the Hoare annotation is: true [2023-12-02 15:52:23,351 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2023-12-02 15:52:23,352 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 702 712) the Hoare annotation is: true [2023-12-02 15:52:23,354 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:52:23,355 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 15:52:23,364 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 03:52:23 BoogieIcfgContainer [2023-12-02 15:52:23,365 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 15:52:23,365 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 15:52:23,365 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 15:52:23,366 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 15:52:23,366 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:51:43" (3/4) ... [2023-12-02 15:52:23,368 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 15:52:23,371 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 15:52:23,371 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 15:52:23,371 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 15:52:23,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 15:52:23,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 15:52:23,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 15:52:23,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-12-02 15:52:23,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 15:52:23,380 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 47 nodes and edges [2023-12-02 15:52:23,381 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-12-02 15:52:23,382 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 15:52:23,382 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 15:52:23,383 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 15:52:23,493 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 15:52:23,494 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 15:52:23,494 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 15:52:23,495 INFO L158 Benchmark]: Toolchain (without parser) took 40874.66ms. Allocated memory was 125.8MB in the beginning and 826.3MB in the end (delta: 700.4MB). Free memory was 92.9MB in the beginning and 343.5MB in the end (delta: -250.6MB). Peak memory consumption was 451.8MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,495 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 104.9MB. Free memory is still 57.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 15:52:23,496 INFO L158 Benchmark]: CACSL2BoogieTranslator took 450.96ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 73.4MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,496 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.57ms. Allocated memory is still 125.8MB. Free memory was 73.4MB in the beginning and 70.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,496 INFO L158 Benchmark]: Boogie Preprocessor took 38.21ms. Allocated memory is still 125.8MB. Free memory was 70.9MB in the beginning and 69.7MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 15:52:23,497 INFO L158 Benchmark]: RCFGBuilder took 647.93ms. Allocated memory is still 125.8MB. Free memory was 69.3MB in the beginning and 90.6MB in the end (delta: -21.3MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,497 INFO L158 Benchmark]: TraceAbstraction took 39536.62ms. Allocated memory was 125.8MB in the beginning and 826.3MB in the end (delta: 700.4MB). Free memory was 90.0MB in the beginning and 350.9MB in the end (delta: -260.9MB). Peak memory consumption was 499.6MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,498 INFO L158 Benchmark]: Witness Printer took 129.15ms. Allocated memory is still 826.3MB. Free memory was 350.9MB in the beginning and 343.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 15:52:23,499 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 104.9MB. Free memory is still 57.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 450.96ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 73.4MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.57ms. Allocated memory is still 125.8MB. Free memory was 73.4MB in the beginning and 70.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.21ms. Allocated memory is still 125.8MB. Free memory was 70.9MB in the beginning and 69.7MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 647.93ms. Allocated memory is still 125.8MB. Free memory was 69.3MB in the beginning and 90.6MB in the end (delta: -21.3MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. * TraceAbstraction took 39536.62ms. Allocated memory was 125.8MB in the beginning and 826.3MB in the end (delta: 700.4MB). Free memory was 90.0MB in the beginning and 350.9MB in the end (delta: -260.9MB). Peak memory consumption was 499.6MB. Max. memory is 16.1GB. * Witness Printer took 129.15ms. Allocated memory is still 826.3MB. Free memory was 350.9MB in the beginning and 343.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] - GenericResultAtLocation [Line: 159]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [159] - GenericResultAtLocation [Line: 525]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [525] - GenericResultAtLocation [Line: 575]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] - GenericResultAtLocation [Line: 777]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [777] - GenericResultAtLocation [Line: 843]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [843] - GenericResultAtLocation [Line: 881]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [881] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 39.5s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1779 SdHoareTripleChecker+Valid, 2.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1743 mSDsluCounter, 2810 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2157 mSDsCounter, 932 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3381 IncrementalHoareTripleChecker+Invalid, 4313 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 932 mSolverCounterUnsat, 653 mSDtfsCounter, 3381 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 642 GetRequests, 384 SyntacticMatches, 10 SemanticMatches, 248 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7156 ImplicationChecksByTransitivity, 15.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=774occurred in iteration=9, InterpolantAutomatonStates: 160, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 218 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 1421 PreInvPairs, 1544 NumberOfFragments, 1082 HoareAnnotationTreeSize, 1421 FomulaSimplifications, 9193 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 24 FomulaSimplificationsInter, 18384 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 567 NumberOfCodeBlocks, 567 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 696 ConstructedInterpolants, 0 QuantifiedInterpolants, 2014 SizeOfPredicates, 15 NumberOfNonLiveVariables, 593 ConjunctsInSsa, 41 ConjunctsInUnsatCore, 14 InterpolantComputations, 8 PerfectInterpolantSequences, 181/230 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: ((((((2 == waterLevel) && (!((methaneLevelCritical == 0)) || (pumpRunning == 1))) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-12-02 15:52:23,520 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f64e1aca-2706-45f0-ab22-e02e3abb8680/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE