./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 15:38:12,566 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 15:38:12,648 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 15:38:12,653 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 15:38:12,653 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 15:38:12,679 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 15:38:12,680 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 15:38:12,681 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 15:38:12,681 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 15:38:12,682 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 15:38:12,683 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 15:38:12,683 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 15:38:12,684 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 15:38:12,684 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 15:38:12,685 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 15:38:12,685 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 15:38:12,686 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 15:38:12,686 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 15:38:12,687 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 15:38:12,687 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 15:38:12,688 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 15:38:12,689 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 15:38:12,689 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 15:38:12,690 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 15:38:12,690 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 15:38:12,691 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 15:38:12,691 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 15:38:12,692 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 15:38:12,692 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 15:38:12,692 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 15:38:12,693 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 15:38:12,693 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 15:38:12,693 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 15:38:12,694 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 15:38:12,694 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 15:38:12,694 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 15:38:12,695 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 15:38:12,695 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 15:38:12,695 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 15:38:12,695 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 15:38:12,696 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 15:38:12,696 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 15:38:12,696 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 15:38:12,696 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 15:38:12,697 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 15:38:12,697 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 15:38:12,697 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 15:38:12,697 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 [2023-12-02 15:38:12,901 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 15:38:12,921 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 15:38:12,923 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 15:38:12,925 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 15:38:12,925 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 15:38:12,926 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2023-12-02 15:38:15,594 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 15:38:15,831 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 15:38:15,832 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2023-12-02 15:38:15,847 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/data/557b1eac6/ca247755f2164155b04c13c100f0be62/FLAG125eccf2a [2023-12-02 15:38:15,860 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/data/557b1eac6/ca247755f2164155b04c13c100f0be62 [2023-12-02 15:38:15,863 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 15:38:15,864 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 15:38:15,866 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 15:38:15,866 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 15:38:15,871 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 15:38:15,872 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:38:15" (1/1) ... [2023-12-02 15:38:15,873 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@48cab0c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:15, skipping insertion in model container [2023-12-02 15:38:15,873 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:38:15" (1/1) ... [2023-12-02 15:38:15,920 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 15:38:16,081 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2023-12-02 15:38:16,167 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 15:38:16,178 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 15:38:16,188 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2023-12-02 15:38:16,189 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [101] [2023-12-02 15:38:16,190 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [211] [2023-12-02 15:38:16,190 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] [2023-12-02 15:38:16,190 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [323] [2023-12-02 15:38:16,190 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [560] [2023-12-02 15:38:16,190 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [627] [2023-12-02 15:38:16,191 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [662] [2023-12-02 15:38:16,201 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2023-12-02 15:38:16,250 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 15:38:16,269 INFO L206 MainTranslator]: Completed translation [2023-12-02 15:38:16,270 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16 WrapperNode [2023-12-02 15:38:16,270 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 15:38:16,271 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 15:38:16,271 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 15:38:16,271 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 15:38:16,279 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,293 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,320 INFO L138 Inliner]: procedures = 59, calls = 106, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 236 [2023-12-02 15:38:16,320 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 15:38:16,321 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 15:38:16,321 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 15:38:16,321 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 15:38:16,330 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,331 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,333 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,334 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,340 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,345 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,347 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,349 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,352 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 15:38:16,353 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 15:38:16,354 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 15:38:16,354 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 15:38:16,355 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (1/1) ... [2023-12-02 15:38:16,361 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 15:38:16,377 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:16,387 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 15:38:16,389 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 15:38:16,419 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 15:38:16,419 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 15:38:16,419 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 15:38:16,419 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 15:38:16,419 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 15:38:16,419 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 15:38:16,419 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 15:38:16,420 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 15:38:16,420 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 15:38:16,420 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 15:38:16,420 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 15:38:16,420 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 15:38:16,420 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 15:38:16,420 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-12-02 15:38:16,421 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-12-02 15:38:16,421 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 15:38:16,421 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 15:38:16,421 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 15:38:16,421 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 15:38:16,421 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 15:38:16,421 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 15:38:16,422 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 15:38:16,492 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 15:38:16,494 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 15:38:16,728 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 15:38:16,861 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 15:38:16,861 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 15:38:16,863 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:38:16 BoogieIcfgContainer [2023-12-02 15:38:16,863 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 15:38:16,867 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 15:38:16,867 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 15:38:16,870 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 15:38:16,871 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 03:38:15" (1/3) ... [2023-12-02 15:38:16,872 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@343c969b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:38:16, skipping insertion in model container [2023-12-02 15:38:16,872 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:38:16" (2/3) ... [2023-12-02 15:38:16,872 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@343c969b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:38:16, skipping insertion in model container [2023-12-02 15:38:16,872 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:38:16" (3/3) ... [2023-12-02 15:38:16,874 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product54.cil.c [2023-12-02 15:38:16,893 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 15:38:16,894 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 15:38:16,937 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 15:38:16,943 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1c9c0206, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 15:38:16,943 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 15:38:16,946 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-12-02 15:38:16,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 15:38:16,954 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:16,955 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:16,955 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:16,959 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:16,960 INFO L85 PathProgramCache]: Analyzing trace with hash 940925143, now seen corresponding path program 1 times [2023-12-02 15:38:16,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:16,970 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264580957] [2023-12-02 15:38:16,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:16,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:17,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:17,156 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:38:17,157 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:17,157 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264580957] [2023-12-02 15:38:17,158 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264580957] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:17,158 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:17,158 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 15:38:17,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226727881] [2023-12-02 15:38:17,161 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:17,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 15:38:17,166 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:17,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 15:38:17,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 15:38:17,191 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:38:17,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:17,256 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2023-12-02 15:38:17,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 15:38:17,259 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-12-02 15:38:17,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:17,268 INFO L225 Difference]: With dead ends: 136 [2023-12-02 15:38:17,269 INFO L226 Difference]: Without dead ends: 64 [2023-12-02 15:38:17,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 15:38:17,276 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:17,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:38:17,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-12-02 15:38:17,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-12-02 15:38:17,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-12-02 15:38:17,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2023-12-02 15:38:17,323 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 21 [2023-12-02 15:38:17,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:17,323 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2023-12-02 15:38:17,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:38:17,324 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2023-12-02 15:38:17,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-12-02 15:38:17,326 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:17,326 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:17,327 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 15:38:17,327 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:17,328 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:17,328 INFO L85 PathProgramCache]: Analyzing trace with hash -906402642, now seen corresponding path program 1 times [2023-12-02 15:38:17,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:17,328 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992138213] [2023-12-02 15:38:17,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:17,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:17,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:17,526 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 15:38:17,526 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:17,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1992138213] [2023-12-02 15:38:17,527 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1992138213] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:17,527 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:17,527 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 15:38:17,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1061444021] [2023-12-02 15:38:17,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:17,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 15:38:17,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:17,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 15:38:17,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 15:38:17,530 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:38:17,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:17,771 INFO L93 Difference]: Finished difference Result 174 states and 240 transitions. [2023-12-02 15:38:17,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 15:38:17,772 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 24 [2023-12-02 15:38:17,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:17,777 INFO L225 Difference]: With dead ends: 174 [2023-12-02 15:38:17,777 INFO L226 Difference]: Without dead ends: 112 [2023-12-02 15:38:17,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 15:38:17,780 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 50 mSDsluCounter, 250 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:17,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 326 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 15:38:17,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2023-12-02 15:38:17,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 110. [2023-12-02 15:38:17,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 70 states have (on average 1.2571428571428571) internal successors, (88), 78 states have internal predecessors, (88), 24 states have call successors, (24), 17 states have call predecessors, (24), 15 states have return successors, (32), 20 states have call predecessors, (32), 22 states have call successors, (32) [2023-12-02 15:38:17,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 144 transitions. [2023-12-02 15:38:17,807 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 144 transitions. Word has length 24 [2023-12-02 15:38:17,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:17,808 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 144 transitions. [2023-12-02 15:38:17,808 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 15:38:17,808 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 144 transitions. [2023-12-02 15:38:17,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-12-02 15:38:17,810 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:17,811 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:17,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 15:38:17,811 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:17,812 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:17,812 INFO L85 PathProgramCache]: Analyzing trace with hash 14817225, now seen corresponding path program 1 times [2023-12-02 15:38:17,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:17,812 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1754622576] [2023-12-02 15:38:17,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:17,813 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:17,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:17,879 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:38:17,879 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:17,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1754622576] [2023-12-02 15:38:17,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1754622576] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:17,880 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:17,880 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 15:38:17,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [144465936] [2023-12-02 15:38:17,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:17,881 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 15:38:17,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:17,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 15:38:17,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:38:17,882 INFO L87 Difference]: Start difference. First operand 110 states and 144 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 15:38:17,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:17,922 INFO L93 Difference]: Finished difference Result 176 states and 226 transitions. [2023-12-02 15:38:17,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 15:38:17,923 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 35 [2023-12-02 15:38:17,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:17,925 INFO L225 Difference]: With dead ends: 176 [2023-12-02 15:38:17,925 INFO L226 Difference]: Without dead ends: 94 [2023-12-02 15:38:17,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 15:38:17,929 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:17,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:38:17,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-12-02 15:38:17,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2023-12-02 15:38:17,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 60 states have (on average 1.2666666666666666) internal successors, (76), 68 states have internal predecessors, (76), 18 states have call successors, (18), 15 states have call predecessors, (18), 15 states have return successors, (24), 16 states have call predecessors, (24), 18 states have call successors, (24) [2023-12-02 15:38:17,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 118 transitions. [2023-12-02 15:38:17,946 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 118 transitions. Word has length 35 [2023-12-02 15:38:17,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:17,946 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 118 transitions. [2023-12-02 15:38:17,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-12-02 15:38:17,947 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 118 transitions. [2023-12-02 15:38:17,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-12-02 15:38:17,948 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:17,948 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:17,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 15:38:17,949 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:17,949 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:17,949 INFO L85 PathProgramCache]: Analyzing trace with hash -1121641611, now seen corresponding path program 1 times [2023-12-02 15:38:17,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:17,950 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [747701129] [2023-12-02 15:38:17,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:17,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:17,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:18,194 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:38:18,194 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:18,195 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [747701129] [2023-12-02 15:38:18,195 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [747701129] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:18,195 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:18,195 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 15:38:18,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [876466640] [2023-12-02 15:38:18,196 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:18,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 15:38:18,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:18,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 15:38:18,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-12-02 15:38:18,197 INFO L87 Difference]: Start difference. First operand 94 states and 118 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 15:38:18,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:18,393 INFO L93 Difference]: Finished difference Result 272 states and 341 transitions. [2023-12-02 15:38:18,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 15:38:18,393 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 37 [2023-12-02 15:38:18,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:18,396 INFO L225 Difference]: With dead ends: 272 [2023-12-02 15:38:18,396 INFO L226 Difference]: Without dead ends: 180 [2023-12-02 15:38:18,398 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2023-12-02 15:38:18,399 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 73 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:18,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 277 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 15:38:18,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2023-12-02 15:38:18,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 174. [2023-12-02 15:38:18,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 111 states have (on average 1.2342342342342343) internal successors, (137), 123 states have internal predecessors, (137), 33 states have call successors, (33), 28 states have call predecessors, (33), 29 states have return successors, (45), 30 states have call predecessors, (45), 33 states have call successors, (45) [2023-12-02 15:38:18,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 215 transitions. [2023-12-02 15:38:18,428 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 215 transitions. Word has length 37 [2023-12-02 15:38:18,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:18,429 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 215 transitions. [2023-12-02 15:38:18,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 15:38:18,429 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 215 transitions. [2023-12-02 15:38:18,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-12-02 15:38:18,431 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:18,432 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:18,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 15:38:18,432 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:18,432 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:18,432 INFO L85 PathProgramCache]: Analyzing trace with hash -650052777, now seen corresponding path program 1 times [2023-12-02 15:38:18,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:18,433 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [250516885] [2023-12-02 15:38:18,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:18,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:18,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:18,691 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 15:38:18,691 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:18,691 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [250516885] [2023-12-02 15:38:18,691 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [250516885] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:18,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:18,692 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 15:38:18,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1716459201] [2023-12-02 15:38:18,692 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:18,693 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 15:38:18,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:18,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 15:38:18,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-12-02 15:38:18,694 INFO L87 Difference]: Start difference. First operand 174 states and 215 transitions. Second operand has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 15:38:19,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:19,118 INFO L93 Difference]: Finished difference Result 411 states and 519 transitions. [2023-12-02 15:38:19,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-12-02 15:38:19,120 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 40 [2023-12-02 15:38:19,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:19,123 INFO L225 Difference]: With dead ends: 411 [2023-12-02 15:38:19,123 INFO L226 Difference]: Without dead ends: 292 [2023-12-02 15:38:19,124 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2023-12-02 15:38:19,126 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 188 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 324 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 324 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:19,126 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 225 Invalid, 399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 324 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 15:38:19,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2023-12-02 15:38:19,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 258. [2023-12-02 15:38:19,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 169 states have (on average 1.242603550295858) internal successors, (210), 186 states have internal predecessors, (210), 46 states have call successors, (46), 35 states have call predecessors, (46), 42 states have return successors, (65), 47 states have call predecessors, (65), 46 states have call successors, (65) [2023-12-02 15:38:19,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 321 transitions. [2023-12-02 15:38:19,166 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 321 transitions. Word has length 40 [2023-12-02 15:38:19,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:19,166 INFO L495 AbstractCegarLoop]: Abstraction has 258 states and 321 transitions. [2023-12-02 15:38:19,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 15:38:19,167 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 321 transitions. [2023-12-02 15:38:19,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-12-02 15:38:19,169 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:19,170 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:19,170 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 15:38:19,170 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:19,170 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:19,171 INFO L85 PathProgramCache]: Analyzing trace with hash -911275196, now seen corresponding path program 1 times [2023-12-02 15:38:19,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:19,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876294093] [2023-12-02 15:38:19,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:19,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:19,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:19,311 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 15:38:19,312 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:19,312 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876294093] [2023-12-02 15:38:19,312 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876294093] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:19,312 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:19,312 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 15:38:19,312 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265820572] [2023-12-02 15:38:19,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:19,313 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 15:38:19,313 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:19,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 15:38:19,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 15:38:19,314 INFO L87 Difference]: Start difference. First operand 258 states and 321 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 15:38:19,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:19,389 INFO L93 Difference]: Finished difference Result 514 states and 646 transitions. [2023-12-02 15:38:19,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 15:38:19,390 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 57 [2023-12-02 15:38:19,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:19,393 INFO L225 Difference]: With dead ends: 514 [2023-12-02 15:38:19,393 INFO L226 Difference]: Without dead ends: 258 [2023-12-02 15:38:19,394 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 15:38:19,395 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 54 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:19,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 107 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:38:19,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2023-12-02 15:38:19,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 258. [2023-12-02 15:38:19,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 169 states have (on average 1.21301775147929) internal successors, (205), 186 states have internal predecessors, (205), 46 states have call successors, (46), 35 states have call predecessors, (46), 42 states have return successors, (65), 47 states have call predecessors, (65), 46 states have call successors, (65) [2023-12-02 15:38:19,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 316 transitions. [2023-12-02 15:38:19,431 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 316 transitions. Word has length 57 [2023-12-02 15:38:19,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:19,431 INFO L495 AbstractCegarLoop]: Abstraction has 258 states and 316 transitions. [2023-12-02 15:38:19,432 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-12-02 15:38:19,432 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 316 transitions. [2023-12-02 15:38:19,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2023-12-02 15:38:19,433 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:19,434 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:19,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 15:38:19,434 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:19,434 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:19,434 INFO L85 PathProgramCache]: Analyzing trace with hash -733914977, now seen corresponding path program 1 times [2023-12-02 15:38:19,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:19,435 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016763588] [2023-12-02 15:38:19,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:19,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:19,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:19,514 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 4 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-12-02 15:38:19,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:19,515 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016763588] [2023-12-02 15:38:19,515 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016763588] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:38:19,515 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1310370525] [2023-12-02 15:38:19,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:19,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:19,516 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:19,518 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:38:19,524 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 15:38:19,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:19,618 INFO L262 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 4 conjunts are in the unsatisfiable core [2023-12-02 15:38:19,624 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:38:19,695 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 15:38:19,695 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 15:38:19,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1310370525] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:19,696 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 15:38:19,696 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [3] total 4 [2023-12-02 15:38:19,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165326949] [2023-12-02 15:38:19,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:19,697 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 15:38:19,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:19,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 15:38:19,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 15:38:19,698 INFO L87 Difference]: Start difference. First operand 258 states and 316 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-12-02 15:38:19,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:19,776 INFO L93 Difference]: Finished difference Result 385 states and 480 transitions. [2023-12-02 15:38:19,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 15:38:19,777 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 70 [2023-12-02 15:38:19,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:19,779 INFO L225 Difference]: With dead ends: 385 [2023-12-02 15:38:19,779 INFO L226 Difference]: Without dead ends: 248 [2023-12-02 15:38:19,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-12-02 15:38:19,781 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 35 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:19,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 119 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 15:38:19,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-12-02 15:38:19,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 248. [2023-12-02 15:38:19,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 162 states have (on average 1.1790123456790123) internal successors, (191), 178 states have internal predecessors, (191), 44 states have call successors, (44), 35 states have call predecessors, (44), 41 states have return successors, (55), 45 states have call predecessors, (55), 44 states have call successors, (55) [2023-12-02 15:38:19,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 290 transitions. [2023-12-02 15:38:19,815 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 290 transitions. Word has length 70 [2023-12-02 15:38:19,815 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:19,815 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 290 transitions. [2023-12-02 15:38:19,815 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-12-02 15:38:19,816 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 290 transitions. [2023-12-02 15:38:19,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2023-12-02 15:38:19,817 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:19,817 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:19,824 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-12-02 15:38:20,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:20,018 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:20,018 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:20,018 INFO L85 PathProgramCache]: Analyzing trace with hash 260458609, now seen corresponding path program 1 times [2023-12-02 15:38:20,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:20,019 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1503091091] [2023-12-02 15:38:20,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:20,019 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:20,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:20,110 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2023-12-02 15:38:20,110 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:20,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1503091091] [2023-12-02 15:38:20,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1503091091] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:38:20,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1540477622] [2023-12-02 15:38:20,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:20,111 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:20,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:20,112 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:38:20,115 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 15:38:20,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:20,209 INFO L262 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 8 conjunts are in the unsatisfiable core [2023-12-02 15:38:20,213 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:38:20,328 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 20 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 15:38:20,328 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:38:20,519 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-12-02 15:38:20,520 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1540477622] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:38:20,520 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [954246177] [2023-12-02 15:38:20,540 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 15:38:20,540 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:38:20,544 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:38:20,548 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:38:20,548 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:38:26,811 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 144 for LOIs [2023-12-02 15:38:26,892 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 10 for LOIs [2023-12-02 15:38:27,104 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 33 for LOIs [2023-12-02 15:38:27,186 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 35 for LOIs [2023-12-02 15:38:27,243 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 1 for LOIs [2023-12-02 15:38:27,244 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 24 for LOIs [2023-12-02 15:38:27,247 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:38:31,941 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5238#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (or (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (not (= 0 ~systemActive~0))) (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= ~methaneLevelCritical~0 0) (= |timeShift_isMethaneAlarm_#res#1| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= |timeShift_isMethaneLevelCritical_#res#1| 0))) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483648)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483647) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 15:38:31,941 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:38:31,942 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:38:31,942 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 11 [2023-12-02 15:38:31,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1958996680] [2023-12-02 15:38:31,942 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:38:31,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2023-12-02 15:38:31,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:31,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2023-12-02 15:38:31,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=2067, Unknown=0, NotChecked=0, Total=2256 [2023-12-02 15:38:31,945 INFO L87 Difference]: Start difference. First operand 248 states and 290 transitions. Second operand has 11 states, 8 states have (on average 9.625) internal successors, (77), 9 states have internal predecessors, (77), 4 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 6 states have call predecessors, (21), 4 states have call successors, (21) [2023-12-02 15:38:32,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:32,619 INFO L93 Difference]: Finished difference Result 354 states and 416 transitions. [2023-12-02 15:38:32,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-12-02 15:38:32,620 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 9.625) internal successors, (77), 9 states have internal predecessors, (77), 4 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 6 states have call predecessors, (21), 4 states have call successors, (21) Word has length 74 [2023-12-02 15:38:32,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:32,623 INFO L225 Difference]: With dead ends: 354 [2023-12-02 15:38:32,623 INFO L226 Difference]: Without dead ends: 352 [2023-12-02 15:38:32,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 177 SyntacticMatches, 6 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1053 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=294, Invalid=3488, Unknown=0, NotChecked=0, Total=3782 [2023-12-02 15:38:32,625 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 161 mSDsluCounter, 559 mSDsCounter, 0 mSdLazyCounter, 673 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 701 SdHoareTripleChecker+Invalid, 740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 673 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:32,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 701 Invalid, 740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 673 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 15:38:32,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2023-12-02 15:38:32,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 308. [2023-12-02 15:38:32,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 199 states have (on average 1.170854271356784) internal successors, (233), 221 states have internal predecessors, (233), 56 states have call successors, (56), 46 states have call predecessors, (56), 52 states have return successors, (71), 55 states have call predecessors, (71), 56 states have call successors, (71) [2023-12-02 15:38:32,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 360 transitions. [2023-12-02 15:38:32,656 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 360 transitions. Word has length 74 [2023-12-02 15:38:32,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:32,656 INFO L495 AbstractCegarLoop]: Abstraction has 308 states and 360 transitions. [2023-12-02 15:38:32,656 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 9.625) internal successors, (77), 9 states have internal predecessors, (77), 4 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 6 states have call predecessors, (21), 4 states have call successors, (21) [2023-12-02 15:38:32,657 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 360 transitions. [2023-12-02 15:38:32,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2023-12-02 15:38:32,658 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:32,659 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:32,664 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 15:38:32,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:32,859 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:32,860 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:32,860 INFO L85 PathProgramCache]: Analyzing trace with hash -1232825123, now seen corresponding path program 1 times [2023-12-02 15:38:32,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:32,860 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642223955] [2023-12-02 15:38:32,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:32,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:32,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:32,956 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2023-12-02 15:38:32,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:32,956 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642223955] [2023-12-02 15:38:32,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642223955] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 15:38:32,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 15:38:32,957 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-12-02 15:38:32,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377301376] [2023-12-02 15:38:32,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 15:38:32,957 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 15:38:32,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:32,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 15:38:32,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-12-02 15:38:32,958 INFO L87 Difference]: Start difference. First operand 308 states and 360 transitions. Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2023-12-02 15:38:33,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:33,139 INFO L93 Difference]: Finished difference Result 741 states and 876 transitions. [2023-12-02 15:38:33,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 15:38:33,141 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 93 [2023-12-02 15:38:33,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:33,145 INFO L225 Difference]: With dead ends: 741 [2023-12-02 15:38:33,145 INFO L226 Difference]: Without dead ends: 557 [2023-12-02 15:38:33,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-12-02 15:38:33,147 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 105 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:33,147 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 199 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 15:38:33,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 557 states. [2023-12-02 15:38:33,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 557 to 546. [2023-12-02 15:38:33,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 546 states, 355 states have (on average 1.1549295774647887) internal successors, (410), 389 states have internal predecessors, (410), 97 states have call successors, (97), 83 states have call predecessors, (97), 93 states have return successors, (121), 98 states have call predecessors, (121), 97 states have call successors, (121) [2023-12-02 15:38:33,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 546 states to 546 states and 628 transitions. [2023-12-02 15:38:33,201 INFO L78 Accepts]: Start accepts. Automaton has 546 states and 628 transitions. Word has length 93 [2023-12-02 15:38:33,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:33,202 INFO L495 AbstractCegarLoop]: Abstraction has 546 states and 628 transitions. [2023-12-02 15:38:33,202 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2023-12-02 15:38:33,202 INFO L276 IsEmpty]: Start isEmpty. Operand 546 states and 628 transitions. [2023-12-02 15:38:33,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-12-02 15:38:33,204 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:33,205 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:33,205 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-12-02 15:38:33,205 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:33,205 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:33,205 INFO L85 PathProgramCache]: Analyzing trace with hash 82345929, now seen corresponding path program 1 times [2023-12-02 15:38:33,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:33,206 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [407226004] [2023-12-02 15:38:33,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:33,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:33,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:33,451 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 33 proven. 3 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2023-12-02 15:38:33,452 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:33,452 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [407226004] [2023-12-02 15:38:33,452 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [407226004] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:38:33,452 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1580043606] [2023-12-02 15:38:33,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:33,452 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:33,452 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:33,455 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:38:33,457 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 15:38:33,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:33,556 INFO L262 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 15 conjunts are in the unsatisfiable core [2023-12-02 15:38:33,560 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:38:33,750 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 63 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-12-02 15:38:33,750 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:38:34,012 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 45 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-12-02 15:38:34,012 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1580043606] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:38:34,012 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1926931206] [2023-12-02 15:38:34,016 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 15:38:34,016 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:38:34,016 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:38:34,016 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:38:34,017 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:38:35,741 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 21 for LOIs [2023-12-02 15:38:35,744 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 34 for LOIs [2023-12-02 15:38:35,959 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 33 for LOIs [2023-12-02 15:38:36,025 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 33 for LOIs [2023-12-02 15:38:36,079 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 45 for LOIs [2023-12-02 15:38:36,094 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 17 for LOIs [2023-12-02 15:38:36,100 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 39 for LOIs [2023-12-02 15:38:36,111 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:38:38,982 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8562#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= ~methaneLevelCritical~0 1) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 ~methaneLevelCritical~0) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 ~pumpRunning~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2147483648)))' at error location [2023-12-02 15:38:38,982 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:38:38,982 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:38:38,983 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 20 [2023-12-02 15:38:38,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912106850] [2023-12-02 15:38:38,983 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:38:38,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-12-02 15:38:38,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:38,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-12-02 15:38:38,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=324, Invalid=2868, Unknown=0, NotChecked=0, Total=3192 [2023-12-02 15:38:38,986 INFO L87 Difference]: Start difference. First operand 546 states and 628 transitions. Second operand has 20 states, 20 states have (on average 5.5) internal successors, (110), 20 states have internal predecessors, (110), 9 states have call successors, (24), 5 states have call predecessors, (24), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) [2023-12-02 15:38:40,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:40,339 INFO L93 Difference]: Finished difference Result 1596 states and 1997 transitions. [2023-12-02 15:38:40,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-12-02 15:38:40,339 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.5) internal successors, (110), 20 states have internal predecessors, (110), 9 states have call successors, (24), 5 states have call predecessors, (24), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) Word has length 96 [2023-12-02 15:38:40,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:40,348 INFO L225 Difference]: With dead ends: 1596 [2023-12-02 15:38:40,348 INFO L226 Difference]: Without dead ends: 1060 [2023-12-02 15:38:40,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 333 GetRequests, 249 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2501 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=739, Invalid=6571, Unknown=0, NotChecked=0, Total=7310 [2023-12-02 15:38:40,354 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 430 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 1132 mSolverCounterSat, 301 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 1433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 301 IncrementalHoareTripleChecker+Valid, 1132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:40,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [433 Valid, 455 Invalid, 1433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [301 Valid, 1132 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 15:38:40,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1060 states. [2023-12-02 15:38:40,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1060 to 652. [2023-12-02 15:38:40,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 652 states, 425 states have (on average 1.1247058823529412) internal successors, (478), 460 states have internal predecessors, (478), 107 states have call successors, (107), 101 states have call predecessors, (107), 119 states have return successors, (142), 119 states have call predecessors, (142), 107 states have call successors, (142) [2023-12-02 15:38:40,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 727 transitions. [2023-12-02 15:38:40,441 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 727 transitions. Word has length 96 [2023-12-02 15:38:40,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:40,442 INFO L495 AbstractCegarLoop]: Abstraction has 652 states and 727 transitions. [2023-12-02 15:38:40,442 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.5) internal successors, (110), 20 states have internal predecessors, (110), 9 states have call successors, (24), 5 states have call predecessors, (24), 8 states have return successors, (25), 10 states have call predecessors, (25), 9 states have call successors, (25) [2023-12-02 15:38:40,442 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 727 transitions. [2023-12-02 15:38:40,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2023-12-02 15:38:40,445 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:40,445 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:40,451 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 15:38:40,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:40,646 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:40,646 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:40,646 INFO L85 PathProgramCache]: Analyzing trace with hash 1524068566, now seen corresponding path program 1 times [2023-12-02 15:38:40,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:40,647 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391631601] [2023-12-02 15:38:40,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:40,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:40,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:41,516 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 9 proven. 44 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-12-02 15:38:41,517 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:41,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391631601] [2023-12-02 15:38:41,517 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391631601] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:38:41,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2010219666] [2023-12-02 15:38:41,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:41,517 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:41,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:41,518 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:38:41,521 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 15:38:41,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:41,625 INFO L262 TraceCheckSpWp]: Trace formula consists of 381 conjuncts, 29 conjunts are in the unsatisfiable core [2023-12-02 15:38:41,630 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:38:41,993 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 58 proven. 17 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 15:38:41,994 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:38:42,691 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 51 proven. 5 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2023-12-02 15:38:42,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2010219666] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:38:42,692 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1746759691] [2023-12-02 15:38:42,695 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 15:38:42,695 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:38:42,695 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:38:42,695 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:38:42,695 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:38:44,980 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 142 for LOIs [2023-12-02 15:38:45,040 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 34 for LOIs [2023-12-02 15:38:45,277 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 33 for LOIs [2023-12-02 15:38:45,325 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 33 for LOIs [2023-12-02 15:38:45,360 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 45 for LOIs [2023-12-02 15:38:45,369 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 3 for LOIs [2023-12-02 15:38:45,371 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 39 for LOIs [2023-12-02 15:38:45,377 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:38:50,725 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12356#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= ~methaneLevelCritical~0 1) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 ~methaneLevelCritical~0) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 ~pumpRunning~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2147483648)))' at error location [2023-12-02 15:38:50,725 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:38:50,726 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:38:50,726 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 12, 11] total 33 [2023-12-02 15:38:50,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960658595] [2023-12-02 15:38:50,726 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:38:50,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-12-02 15:38:50,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:38:50,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-12-02 15:38:50,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=453, Invalid=4103, Unknown=0, NotChecked=0, Total=4556 [2023-12-02 15:38:50,730 INFO L87 Difference]: Start difference. First operand 652 states and 727 transitions. Second operand has 33 states, 31 states have (on average 4.967741935483871) internal successors, (154), 32 states have internal predecessors, (154), 17 states have call successors, (32), 7 states have call predecessors, (32), 14 states have return successors, (34), 18 states have call predecessors, (34), 16 states have call successors, (34) [2023-12-02 15:38:53,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:38:53,300 INFO L93 Difference]: Finished difference Result 1917 states and 2201 transitions. [2023-12-02 15:38:53,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2023-12-02 15:38:53,300 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 31 states have (on average 4.967741935483871) internal successors, (154), 32 states have internal predecessors, (154), 17 states have call successors, (32), 7 states have call predecessors, (32), 14 states have return successors, (34), 18 states have call predecessors, (34), 16 states have call successors, (34) Word has length 101 [2023-12-02 15:38:53,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:38:53,309 INFO L225 Difference]: With dead ends: 1917 [2023-12-02 15:38:53,309 INFO L226 Difference]: Without dead ends: 1564 [2023-12-02 15:38:53,314 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 398 GetRequests, 276 SyntacticMatches, 10 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5236 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=1306, Invalid=11576, Unknown=0, NotChecked=0, Total=12882 [2023-12-02 15:38:53,315 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 1140 mSDsluCounter, 1094 mSDsCounter, 0 mSdLazyCounter, 2480 mSolverCounterSat, 804 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1146 SdHoareTripleChecker+Valid, 1221 SdHoareTripleChecker+Invalid, 3284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 804 IncrementalHoareTripleChecker+Valid, 2480 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2023-12-02 15:38:53,315 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1146 Valid, 1221 Invalid, 3284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [804 Valid, 2480 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2023-12-02 15:38:53,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1564 states. [2023-12-02 15:38:53,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1564 to 1381. [2023-12-02 15:38:53,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1381 states, 902 states have (on average 1.1164079822616408) internal successors, (1007), 967 states have internal predecessors, (1007), 233 states have call successors, (233), 218 states have call predecessors, (233), 245 states have return successors, (296), 245 states have call predecessors, (296), 233 states have call successors, (296) [2023-12-02 15:38:53,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1381 states to 1381 states and 1536 transitions. [2023-12-02 15:38:53,426 INFO L78 Accepts]: Start accepts. Automaton has 1381 states and 1536 transitions. Word has length 101 [2023-12-02 15:38:53,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:38:53,426 INFO L495 AbstractCegarLoop]: Abstraction has 1381 states and 1536 transitions. [2023-12-02 15:38:53,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 31 states have (on average 4.967741935483871) internal successors, (154), 32 states have internal predecessors, (154), 17 states have call successors, (32), 7 states have call predecessors, (32), 14 states have return successors, (34), 18 states have call predecessors, (34), 16 states have call successors, (34) [2023-12-02 15:38:53,427 INFO L276 IsEmpty]: Start isEmpty. Operand 1381 states and 1536 transitions. [2023-12-02 15:38:53,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2023-12-02 15:38:53,429 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:38:53,430 INFO L195 NwaCegarLoop]: trace histogram [7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:38:53,436 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 15:38:53,635 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:53,635 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:38:53,635 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:38:53,636 INFO L85 PathProgramCache]: Analyzing trace with hash 2140128493, now seen corresponding path program 1 times [2023-12-02 15:38:53,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:38:53,636 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882128400] [2023-12-02 15:38:53,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:53,636 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:38:53,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:53,814 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 75 proven. 21 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2023-12-02 15:38:53,814 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:38:53,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882128400] [2023-12-02 15:38:53,814 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882128400] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:38:53,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [711388666] [2023-12-02 15:38:53,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:38:53,815 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:38:53,815 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:38:53,816 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:38:53,818 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 15:38:53,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:38:53,942 INFO L262 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 12 conjunts are in the unsatisfiable core [2023-12-02 15:38:53,946 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:38:54,054 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 135 proven. 9 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2023-12-02 15:38:54,054 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:38:54,453 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 78 proven. 44 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2023-12-02 15:38:54,454 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [711388666] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:38:54,454 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [612091346] [2023-12-02 15:38:54,457 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2023-12-02 15:38:54,457 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:38:54,457 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:38:54,458 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:38:54,458 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:38:55,942 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 18 for LOIs [2023-12-02 15:38:55,946 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 34 for LOIs [2023-12-02 15:38:56,427 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 52 for LOIs [2023-12-02 15:38:56,563 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 54 for LOIs [2023-12-02 15:38:56,653 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 66 for LOIs [2023-12-02 15:38:56,681 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 14 for LOIs [2023-12-02 15:38:56,684 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 41 for LOIs [2023-12-02 15:38:56,690 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 39 for LOIs [2023-12-02 15:38:56,696 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:39:01,294 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17860#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= ~methaneLevelCritical~0 1) (or (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_48| Int) (|v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_23| Int)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_48| 2147483648)) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_48| 2147483647) (or (and (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_48| 0) (<= |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_23| 2147483647) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_23| 2147483648))) (and (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_48| 0)) (= 1 ~systemActive~0))))) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (not (= 0 ~systemActive~0))) (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= 0 |timeShift_isMethaneLevelCritical_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 1) (<= |timeShift_isMethaneLevelCritical_#res#1| 1) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)))) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 (+ ~waterLevel~0 2147483648)) (<= 0 ~methaneLevelCritical~0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483648)) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483647) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 15:39:01,294 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:39:01,294 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:39:01,295 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2023-12-02 15:39:01,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [314253599] [2023-12-02 15:39:01,295 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:39:01,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2023-12-02 15:39:01,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:39:01,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2023-12-02 15:39:01,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=3430, Unknown=0, NotChecked=0, Total=3782 [2023-12-02 15:39:01,298 INFO L87 Difference]: Start difference. First operand 1381 states and 1536 transitions. Second operand has 18 states, 15 states have (on average 8.933333333333334) internal successors, (134), 15 states have internal predecessors, (134), 7 states have call successors, (37), 5 states have call predecessors, (37), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2023-12-02 15:39:01,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:39:01,906 INFO L93 Difference]: Finished difference Result 2522 states and 2836 transitions. [2023-12-02 15:39:01,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-12-02 15:39:01,907 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 15 states have (on average 8.933333333333334) internal successors, (134), 15 states have internal predecessors, (134), 7 states have call successors, (37), 5 states have call predecessors, (37), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) Word has length 143 [2023-12-02 15:39:01,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:39:01,916 INFO L225 Difference]: With dead ends: 2522 [2023-12-02 15:39:01,916 INFO L226 Difference]: Without dead ends: 1393 [2023-12-02 15:39:01,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 453 GetRequests, 380 SyntacticMatches, 1 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1865 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=485, Invalid=4917, Unknown=0, NotChecked=0, Total=5402 [2023-12-02 15:39:01,922 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 170 mSDsluCounter, 381 mSDsCounter, 0 mSdLazyCounter, 605 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 694 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 605 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 15:39:01,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 447 Invalid, 694 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 605 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 15:39:01,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1393 states. [2023-12-02 15:39:02,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1393 to 1381. [2023-12-02 15:39:02,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1381 states, 902 states have (on average 1.1086474501108647) internal successors, (1000), 967 states have internal predecessors, (1000), 233 states have call successors, (233), 218 states have call predecessors, (233), 245 states have return successors, (296), 245 states have call predecessors, (296), 233 states have call successors, (296) [2023-12-02 15:39:02,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1381 states to 1381 states and 1529 transitions. [2023-12-02 15:39:02,098 INFO L78 Accepts]: Start accepts. Automaton has 1381 states and 1529 transitions. Word has length 143 [2023-12-02 15:39:02,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:39:02,099 INFO L495 AbstractCegarLoop]: Abstraction has 1381 states and 1529 transitions. [2023-12-02 15:39:02,099 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 15 states have (on average 8.933333333333334) internal successors, (134), 15 states have internal predecessors, (134), 7 states have call successors, (37), 5 states have call predecessors, (37), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2023-12-02 15:39:02,099 INFO L276 IsEmpty]: Start isEmpty. Operand 1381 states and 1529 transitions. [2023-12-02 15:39:02,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2023-12-02 15:39:02,104 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 15:39:02,104 INFO L195 NwaCegarLoop]: trace histogram [7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:39:02,111 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-12-02 15:39:02,310 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:39:02,311 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 15:39:02,311 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 15:39:02,311 INFO L85 PathProgramCache]: Analyzing trace with hash -1963198772, now seen corresponding path program 1 times [2023-12-02 15:39:02,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 15:39:02,311 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026239916] [2023-12-02 15:39:02,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:39:02,311 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 15:39:02,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:39:03,678 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 13 proven. 110 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2023-12-02 15:39:03,678 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 15:39:03,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026239916] [2023-12-02 15:39:03,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026239916] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 15:39:03,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [874994136] [2023-12-02 15:39:03,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 15:39:03,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 15:39:03,679 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 15:39:03,680 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 15:39:03,683 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-12-02 15:39:03,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 15:39:03,813 INFO L262 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 12 conjunts are in the unsatisfiable core [2023-12-02 15:39:03,818 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 15:39:04,077 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 142 proven. 3 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2023-12-02 15:39:04,077 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 15:39:04,399 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 77 proven. 22 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2023-12-02 15:39:04,399 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [874994136] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 15:39:04,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1774412457] [2023-12-02 15:39:04,402 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2023-12-02 15:39:04,402 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 15:39:04,403 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 15:39:04,403 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 15:39:04,403 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 15:39:06,420 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 142 for LOIs [2023-12-02 15:39:06,479 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 34 for LOIs [2023-12-02 15:39:06,942 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 52 for LOIs [2023-12-02 15:39:07,084 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 54 for LOIs [2023-12-02 15:39:07,173 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 66 for LOIs [2023-12-02 15:39:07,200 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 3 for LOIs [2023-12-02 15:39:07,202 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 39 for LOIs [2023-12-02 15:39:07,209 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 39 for LOIs [2023-12-02 15:39:07,215 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 15:39:14,602 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24111#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= ~methaneLevelCritical~0 1) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= 0 ~methaneLevelCritical~0) (<= ~waterLevel~0 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483647) (or (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= 0 |timeShift_isMethaneLevelCritical_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 1) (<= |timeShift_isMethaneLevelCritical_#res#1| 1) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |old(~pumpRunning~0)| 0) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_60| Int) (|v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_28| Int)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_60| 2147483648)) (or (and (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_60| 0) (<= |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_28| 2147483647) (<= 0 (+ |v_ULTIMATE.start_test_~tmp___1~0#1_BEFORE_CALL_28| 2147483648))) (and (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_60| 0)) (= 1 ~systemActive~0))) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_60| 2147483647))) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (not (= 0 ~systemActive~0)))) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 15:39:14,602 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 15:39:14,602 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 15:39:14,602 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 10, 10] total 40 [2023-12-02 15:39:14,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616200618] [2023-12-02 15:39:14,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 15:39:14,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2023-12-02 15:39:14,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 15:39:14,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2023-12-02 15:39:14,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=605, Invalid=6367, Unknown=0, NotChecked=0, Total=6972 [2023-12-02 15:39:14,607 INFO L87 Difference]: Start difference. First operand 1381 states and 1529 transitions. Second operand has 40 states, 37 states have (on average 5.162162162162162) internal successors, (191), 38 states have internal predecessors, (191), 23 states have call successors, (50), 10 states have call predecessors, (50), 14 states have return successors, (51), 20 states have call predecessors, (51), 23 states have call successors, (51) [2023-12-02 15:39:15,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 15:39:15,766 INFO L93 Difference]: Finished difference Result 1835 states and 2032 transitions. [2023-12-02 15:39:15,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-12-02 15:39:15,767 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 37 states have (on average 5.162162162162162) internal successors, (191), 38 states have internal predecessors, (191), 23 states have call successors, (50), 10 states have call predecessors, (50), 14 states have return successors, (51), 20 states have call predecessors, (51), 23 states have call successors, (51) Word has length 144 [2023-12-02 15:39:15,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 15:39:15,768 INFO L225 Difference]: With dead ends: 1835 [2023-12-02 15:39:15,768 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 15:39:15,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 489 GetRequests, 390 SyntacticMatches, 1 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3986 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=961, Invalid=8939, Unknown=0, NotChecked=0, Total=9900 [2023-12-02 15:39:15,776 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 456 mSDsluCounter, 530 mSDsCounter, 0 mSdLazyCounter, 1464 mSolverCounterSat, 321 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 459 SdHoareTripleChecker+Valid, 582 SdHoareTripleChecker+Invalid, 1785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 321 IncrementalHoareTripleChecker+Valid, 1464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-12-02 15:39:15,776 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [459 Valid, 582 Invalid, 1785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [321 Valid, 1464 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-12-02 15:39:15,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 15:39:15,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 15:39:15,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 15:39:15,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 15:39:15,777 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 144 [2023-12-02 15:39:15,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 15:39:15,778 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 15:39:15,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 37 states have (on average 5.162162162162162) internal successors, (191), 38 states have internal predecessors, (191), 23 states have call successors, (50), 10 states have call predecessors, (50), 14 states have return successors, (51), 20 states have call predecessors, (51), 23 states have call successors, (51) [2023-12-02 15:39:15,778 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 15:39:15,778 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 15:39:15,781 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 15:39:15,786 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2023-12-02 15:39:15,981 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-12-02 15:39:15,983 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 15:39:20,064 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 450 457) no Hoare annotation was computed. [2023-12-02 15:39:20,065 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 450 457) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 1)) (= 0 ~systemActive~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)) (= ~pumpRunning~0 1)) [2023-12-02 15:39:20,065 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 357 363) no Hoare annotation was computed. [2023-12-02 15:39:20,065 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 357 363) the Hoare annotation is: true [2023-12-02 15:39:20,065 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 135 146) the Hoare annotation is: (let ((.cse2 (= |old(~methaneLevelCritical~0)| 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse6 (and .cse9 (not .cse4))) (.cse8 (not (= ~pumpRunning~0 1))) (.cse0 (not (= ~waterLevel~0 1))) (.cse3 (not .cse9)) (.cse5 (not .cse2)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse7 (not (= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse4) (or .cse1 .cse7 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse1 .cse4) (or .cse7 .cse2 .cse3 .cse8 .cse4) (or .cse0 .cse1 .cse2 (< ~switchedOnBeforeTS~0 1) .cse3 .cse4) (or .cse5 .cse1 .cse9 .cse7 .cse4)))) [2023-12-02 15:39:20,065 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 135 146) no Hoare annotation was computed. [2023-12-02 15:39:20,065 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-12-02 15:39:20,065 INFO L895 garLoopResultBuilder]: At program point L436(line 436) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~switchedOnBeforeTS~0 0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= 2 ~waterLevel~0) .cse2) .cse3 .cse4) (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2) (not (= |old(~waterLevel~0)| 1)) .cse4) (or (not (= |old(~pumpRunning~0)| 1)) .cse3 .cse4))) [2023-12-02 15:39:20,065 INFO L899 garLoopResultBuilder]: For program point L436-1(lines 417 441) no Hoare annotation was computed. [2023-12-02 15:39:20,065 INFO L899 garLoopResultBuilder]: For program point L337-2(lines 333 355) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 1)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1)) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 (= ~switchedOnBeforeTS~0 0) .cse3) .cse4) (or .cse0 .cse5 .cse4) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3) .cse5 .cse4))) [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 433) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L421(lines 421 438) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 330 356) the Hoare annotation is: (let ((.cse5 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~switchedOnBeforeTS~0 0)) (.cse8 (= 2 ~waterLevel~0)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse9 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse3 .cse7) (or .cse5 .cse0 .cse1 .cse3 .cse7) (or (not (= |old(~pumpRunning~0)| 1)) .cse6 .cse3 (and .cse8 (= ~pumpRunning~0 1))) (or .cse0 .cse2 .cse6 .cse3 .cse4 .cse7) (or .cse0 (and .cse9 .cse8) .cse6 .cse3) (or .cse0 .cse1 (and .cse9 (= ~waterLevel~0 1)) .cse3))) [2023-12-02 15:39:20,066 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse5 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~switchedOnBeforeTS~0 0)) (.cse8 (= 2 ~waterLevel~0)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse9 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse3 .cse7) (or .cse5 .cse0 .cse1 .cse3 .cse7) (or (not (= |old(~pumpRunning~0)| 1)) .cse6 .cse3 (and .cse8 (= ~pumpRunning~0 1))) (or .cse0 .cse2 .cse6 .cse3 .cse4 .cse7) (or .cse0 (and .cse9 .cse8) .cse6 .cse3) (or .cse0 .cse1 (and .cse9 (= ~waterLevel~0 1)) .cse3))) [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L216(line 216) no Hoare annotation was computed. [2023-12-02 15:39:20,066 INFO L899 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L895 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~switchedOnBeforeTS~0 1) (= |timeShift_processEnvironment_~tmp~4#1| 0) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 .cse1 .cse2) (or (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point L80-1(lines 72 100) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (not (= ~methaneLevelCritical~0 0)) .cse3 .cse1 .cse2) (or .cse3 .cse1 .cse2 (and (= ~switchedOnBeforeTS~0 1) (= ~waterLevel~0 1) (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0) (= ~pumpRunning~0 1))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 330 356) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 216) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 223 252) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point L248(lines 223 252) no Hoare annotation was computed. [2023-12-02 15:39:20,067 INFO L899 garLoopResultBuilder]: For program point L244(line 244) no Hoare annotation was computed. [2023-12-02 15:39:20,068 INFO L899 garLoopResultBuilder]: For program point L237(lines 237 241) no Hoare annotation was computed. [2023-12-02 15:39:20,068 INFO L902 garLoopResultBuilder]: At program point L237-1(lines 237 241) the Hoare annotation is: true [2023-12-02 15:39:20,068 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 223 252) the Hoare annotation is: true [2023-12-02 15:39:20,068 INFO L902 garLoopResultBuilder]: At program point L233-2(lines 233 247) the Hoare annotation is: true [2023-12-02 15:39:20,068 INFO L902 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: true [2023-12-02 15:39:20,068 INFO L899 garLoopResultBuilder]: For program point L229-1(line 229) no Hoare annotation was computed. [2023-12-02 15:39:20,068 INFO L895 garLoopResultBuilder]: At program point L609-2(lines 601 614) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-12-02 15:39:20,068 INFO L899 garLoopResultBuilder]: For program point L572(lines 571 618) no Hoare annotation was computed. [2023-12-02 15:39:20,068 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse2 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3) (and .cse0 .cse1 .cse2 (= ~switchedOnBeforeTS~0 0) .cse3) (and .cse0 .cse4 .cse1 .cse3) (and .cse4 .cse1 .cse3 (= ~pumpRunning~0 1)))) [2023-12-02 15:39:20,068 INFO L899 garLoopResultBuilder]: For program point L622(lines 561 626) no Hoare annotation was computed. [2023-12-02 15:39:20,068 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 587) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point L581-1(lines 581 587) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L895 garLoopResultBuilder]: At program point L619(lines 570 620) the Hoare annotation is: false [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 317) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point L310-2(lines 310 317) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point L591(lines 591 597) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point L591-1(lines 591 597) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 15:39:20,069 INFO L895 garLoopResultBuilder]: At program point L616(lines 571 618) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 1)) (.cse5 (= ~switchedOnBeforeTS~0 0)) (.cse4 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse5 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3) (and .cse0 .cse1 .cse2 .cse5 .cse3) (and .cse4 .cse1 .cse3 (= ~pumpRunning~0 1)))) [2023-12-02 15:39:20,069 INFO L895 garLoopResultBuilder]: At program point L583(line 583) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-12-02 15:39:20,069 INFO L895 garLoopResultBuilder]: At program point L384(line 384) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2))) [2023-12-02 15:39:20,070 INFO L899 garLoopResultBuilder]: For program point L384-1(lines 365 389) no Hoare annotation was computed. [2023-12-02 15:39:20,070 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 365 389) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2023-12-02 15:39:20,070 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 365 389) no Hoare annotation was computed. [2023-12-02 15:39:20,070 INFO L895 garLoopResultBuilder]: At program point L379(line 379) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)) (.cse4 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) (and .cse1 (or .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1))) .cse3 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse3 (and .cse1 .cse2) .cse4))) [2023-12-02 15:39:20,070 INFO L899 garLoopResultBuilder]: For program point L373(lines 373 381) no Hoare annotation was computed. [2023-12-02 15:39:20,070 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 386) no Hoare annotation was computed. [2023-12-02 15:39:20,070 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 123 134) no Hoare annotation was computed. [2023-12-02 15:39:20,070 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 123 134) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse5 (= 2 ~waterLevel~0)) (.cse6 (not .cse1)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= ~waterLevel~0 1)) (.cse4 (let ((.cse8 (not (= ~pumpRunning~0 0)))) (and (or .cse8 .cse7) (or .cse8 .cse0))))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 .cse4) (or .cse5 .cse1 .cse7 .cse2 .cse4) (or .cse5 (not (= ~pumpRunning~0 1)) .cse7 .cse2) (or .cse0 .cse6 .cse2 .cse3 .cse4)))) [2023-12-02 15:39:20,070 INFO L895 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or .cse0 .cse3 .cse1 .cse2) (or .cse3 (not (= 2 ~waterLevel~0)) .cse1 .cse2))) [2023-12-02 15:39:20,071 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 (and (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~3#1|) (= ~pumpRunning~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3))) [2023-12-02 15:39:20,071 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 407) no Hoare annotation was computed. [2023-12-02 15:39:20,071 INFO L899 garLoopResultBuilder]: For program point L395(lines 395 412) no Hoare annotation was computed. [2023-12-02 15:39:20,071 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 391 415) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3 (= ~pumpRunning~0 1)))) [2023-12-02 15:39:20,071 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 391 415) no Hoare annotation was computed. [2023-12-02 15:39:20,071 INFO L895 garLoopResultBuilder]: At program point L410(line 410) the Hoare annotation is: (let ((.cse4 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse4 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2023-12-02 15:39:20,071 INFO L899 garLoopResultBuilder]: For program point L410-1(lines 391 415) no Hoare annotation was computed. [2023-12-02 15:39:20,071 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 469 477) no Hoare annotation was computed. [2023-12-02 15:39:20,071 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 469 477) the Hoare annotation is: true [2023-12-02 15:39:20,073 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 15:39:20,075 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 15:39:20,084 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 03:39:20 BoogieIcfgContainer [2023-12-02 15:39:20,084 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 15:39:20,084 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 15:39:20,084 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 15:39:20,085 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 15:39:20,085 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:38:16" (3/4) ... [2023-12-02 15:39:20,087 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 15:39:20,089 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 15:39:20,089 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 15:39:20,089 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 15:39:20,089 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 15:39:20,089 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 15:39:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-12-02 15:39:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 15:39:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-12-02 15:39:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-12-02 15:39:20,097 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2023-12-02 15:39:20,098 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-12-02 15:39:20,099 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 15:39:20,100 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 15:39:20,100 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 15:39:20,219 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 15:39:20,219 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 15:39:20,220 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 15:39:20,220 INFO L158 Benchmark]: Toolchain (without parser) took 64356.32ms. Allocated memory was 134.2MB in the beginning and 679.5MB in the end (delta: 545.3MB). Free memory was 103.4MB in the beginning and 337.0MB in the end (delta: -233.6MB). Peak memory consumption was 313.7MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,221 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 134.2MB. Free memory is still 90.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 15:39:20,221 INFO L158 Benchmark]: CACSL2BoogieTranslator took 404.91ms. Allocated memory is still 134.2MB. Free memory was 102.9MB in the beginning and 83.2MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,221 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.13ms. Allocated memory is still 134.2MB. Free memory was 83.2MB in the beginning and 80.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,222 INFO L158 Benchmark]: Boogie Preprocessor took 31.58ms. Allocated memory is still 134.2MB. Free memory was 80.6MB in the beginning and 79.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,222 INFO L158 Benchmark]: RCFGBuilder took 510.01ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 79.0MB in the beginning and 122.2MB in the end (delta: -43.3MB). Peak memory consumption was 26.4MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,223 INFO L158 Benchmark]: TraceAbstraction took 63217.41ms. Allocated memory was 161.5MB in the beginning and 679.5MB in the end (delta: 518.0MB). Free memory was 121.3MB in the beginning and 345.4MB in the end (delta: -224.1MB). Peak memory consumption was 408.3MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,223 INFO L158 Benchmark]: Witness Printer took 135.39ms. Allocated memory is still 679.5MB. Free memory was 345.4MB in the beginning and 337.0MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 15:39:20,225 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 134.2MB. Free memory is still 90.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 404.91ms. Allocated memory is still 134.2MB. Free memory was 102.9MB in the beginning and 83.2MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.13ms. Allocated memory is still 134.2MB. Free memory was 83.2MB in the beginning and 80.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.58ms. Allocated memory is still 134.2MB. Free memory was 80.6MB in the beginning and 79.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 510.01ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 79.0MB in the beginning and 122.2MB in the end (delta: -43.3MB). Peak memory consumption was 26.4MB. Max. memory is 16.1GB. * TraceAbstraction took 63217.41ms. Allocated memory was 161.5MB in the beginning and 679.5MB in the end (delta: 518.0MB). Free memory was 121.3MB in the beginning and 345.4MB in the end (delta: -224.1MB). Peak memory consumption was 408.3MB. Max. memory is 16.1GB. * Witness Printer took 135.39ms. Allocated memory is still 679.5MB. Free memory was 345.4MB in the beginning and 337.0MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [101] - GenericResultAtLocation [Line: 211]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [211] - GenericResultAtLocation [Line: 220]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] - GenericResultAtLocation [Line: 323]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [323] - GenericResultAtLocation [Line: 560]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [560] - GenericResultAtLocation [Line: 627]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [627] - GenericResultAtLocation [Line: 662]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [662] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 216]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 63.2s, OverallIterations: 13, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2906 SdHoareTripleChecker+Valid, 4.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2869 mSDsluCounter, 4835 SdHoareTripleChecker+Invalid, 3.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3809 mSDsCounter, 1685 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7264 IncrementalHoareTripleChecker+Invalid, 8949 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1685 mSolverCounterUnsat, 1026 mSDtfsCounter, 7264 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2047 GetRequests, 1567 SyntacticMatches, 18 SemanticMatches, 462 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14677 ImplicationChecksByTransitivity, 28.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1381occurred in iteration=11, InterpolantAutomatonStates: 194, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 700 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1972 PreInvPairs, 2028 NumberOfFragments, 1454 HoareAnnotationTreeSize, 1972 FomulaSimplifications, 16148 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 27 FomulaSimplificationsInter, 16079 FormulaSimplificationTreeSizeReductionInter, 3.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 6.7s InterpolantComputationTime, 1563 NumberOfCodeBlocks, 1563 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 2097 ConstructedInterpolants, 0 QuantifiedInterpolants, 5758 SizeOfPredicates, 28 NumberOfNonLiveVariables, 2340 ConjunctsInSsa, 80 ConjunctsInUnsatCore, 24 InterpolantComputations, 8 PerfectInterpolantSequences, 1468/1774 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (switchedOnBeforeTS == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) && (switchedOnBeforeTS == 0)) && !((0 == systemActive)))) || ((((2 == waterLevel) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-12-02 15:39:20,247 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e9c788af-9ce9-484c-a6e4-0e24a356cc22/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE