./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4fc63b2a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-4fc63b2 [2024-11-02 12:32:44,495 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-02 12:32:44,576 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/config/svcomp-Reach-32bit-Taipan_Default.epf [2024-11-02 12:32:44,584 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-02 12:32:44,586 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-02 12:32:44,625 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-02 12:32:44,627 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-02 12:32:44,628 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-02 12:32:44,629 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-02 12:32:44,630 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-02 12:32:44,632 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-02 12:32:44,633 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-02 12:32:44,633 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-02 12:32:44,633 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2024-11-02 12:32:44,634 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-02 12:32:44,634 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-02 12:32:44,634 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2024-11-02 12:32:44,635 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2024-11-02 12:32:44,635 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-02 12:32:44,636 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2024-11-02 12:32:44,636 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2024-11-02 12:32:44,639 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2024-11-02 12:32:44,639 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-02 12:32:44,639 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-02 12:32:44,640 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-02 12:32:44,640 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-02 12:32:44,640 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-02 12:32:44,641 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-02 12:32:44,641 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-02 12:32:44,641 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-02 12:32:44,642 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-02 12:32:44,642 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-02 12:32:44,642 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-02 12:32:44,642 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-02 12:32:44,643 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-02 12:32:44,643 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-02 12:32:44,643 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-02 12:32:44,644 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-02 12:32:44,644 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-02 12:32:44,644 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-02 12:32:44,645 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-02 12:32:44,646 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-02 12:32:44,646 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2024-11-02 12:32:44,646 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-02 12:32:44,647 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-02 12:32:44,647 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-02 12:32:44,647 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-02 12:32:44,647 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 [2024-11-02 12:32:44,962 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-02 12:32:44,991 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-02 12:32:44,994 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-02 12:32:44,995 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-02 12:32:44,996 INFO L274 PluginConnector]: CDTParser initialized [2024-11-02 12:32:44,998 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c Unable to find full path for "g++" [2024-11-02 12:32:47,208 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-02 12:32:47,484 INFO L384 CDTParser]: Found 1 translation units. [2024-11-02 12:32:47,488 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2024-11-02 12:32:47,514 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/data/03755eacb/9ddb2719000b457ba08d0564f9cb900a/FLAGc7ce012f7 [2024-11-02 12:32:47,537 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/data/03755eacb/9ddb2719000b457ba08d0564f9cb900a [2024-11-02 12:32:47,539 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-02 12:32:47,542 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-02 12:32:47,543 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-02 12:32:47,543 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-02 12:32:47,551 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-02 12:32:47,551 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 12:32:47" (1/1) ... [2024-11-02 12:32:47,555 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18c3a405 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:47, skipping insertion in model container [2024-11-02 12:32:47,555 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 12:32:47" (1/1) ... [2024-11-02 12:32:47,611 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-02 12:32:47,886 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2024-11-02 12:32:48,078 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-02 12:32:48,095 INFO L200 MainTranslator]: Completed pre-run [2024-11-02 12:32:48,106 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2024-11-02 12:32:48,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2024-11-02 12:32:48,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] [2024-11-02 12:32:48,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] [2024-11-02 12:32:48,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] [2024-11-02 12:32:48,109 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] [2024-11-02 12:32:48,109 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] [2024-11-02 12:32:48,109 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] [2024-11-02 12:32:48,115 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2024-11-02 12:32:48,207 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-02 12:32:48,235 INFO L204 MainTranslator]: Completed translation [2024-11-02 12:32:48,235 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48 WrapperNode [2024-11-02 12:32:48,236 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-02 12:32:48,237 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-02 12:32:48,237 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-02 12:32:48,238 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-02 12:32:48,246 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,265 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,311 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 223 [2024-11-02 12:32:48,312 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-02 12:32:48,312 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-02 12:32:48,313 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-02 12:32:48,314 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-02 12:32:48,323 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,323 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,326 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,326 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,332 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,337 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,339 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,340 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,343 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-02 12:32:48,344 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-02 12:32:48,344 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-02 12:32:48,344 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-02 12:32:48,345 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (1/1) ... [2024-11-02 12:32:48,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-02 12:32:48,365 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/z3 [2024-11-02 12:32:48,385 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-02 12:32:48,389 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-02 12:32:48,420 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-02 12:32:48,421 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-02 12:32:48,421 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-02 12:32:48,421 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-02 12:32:48,421 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-02 12:32:48,421 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-02 12:32:48,422 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-02 12:32:48,422 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-11-02 12:32:48,422 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-11-02 12:32:48,422 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-11-02 12:32:48,423 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-11-02 12:32:48,423 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-02 12:32:48,423 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-02 12:32:48,423 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2024-11-02 12:32:48,423 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2024-11-02 12:32:48,423 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2024-11-02 12:32:48,424 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2024-11-02 12:32:48,424 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-11-02 12:32:48,424 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-11-02 12:32:48,424 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-11-02 12:32:48,424 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-02 12:32:48,425 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-02 12:32:48,425 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-02 12:32:48,425 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-02 12:32:48,520 INFO L238 CfgBuilder]: Building ICFG [2024-11-02 12:32:48,524 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-02 12:32:48,883 INFO L? ?]: Removed 50 outVars from TransFormulas that were not future-live. [2024-11-02 12:32:48,884 INFO L287 CfgBuilder]: Performing block encoding [2024-11-02 12:32:49,042 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-02 12:32:49,042 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-02 12:32:49,043 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 12:32:49 BoogieIcfgContainer [2024-11-02 12:32:49,043 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-02 12:32:49,048 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-02 12:32:49,048 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-02 12:32:49,052 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-02 12:32:49,052 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 12:32:47" (1/3) ... [2024-11-02 12:32:49,053 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@295ddc3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 12:32:49, skipping insertion in model container [2024-11-02 12:32:49,054 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 12:32:48" (2/3) ... [2024-11-02 12:32:49,054 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@295ddc3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 12:32:49, skipping insertion in model container [2024-11-02 12:32:49,054 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 12:32:49" (3/3) ... [2024-11-02 12:32:49,055 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product64.cil.c [2024-11-02 12:32:49,092 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-02 12:32:49,092 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-02 12:32:49,212 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-02 12:32:49,218 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@65fb6888, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-02 12:32:49,218 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-02 12:32:49,222 INFO L276 IsEmpty]: Start isEmpty. Operand has 79 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 59 states have internal predecessors, (68), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2024-11-02 12:32:49,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2024-11-02 12:32:49,230 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:49,231 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:49,231 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:49,236 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:49,236 INFO L85 PathProgramCache]: Analyzing trace with hash 80622041, now seen corresponding path program 1 times [2024-11-02 12:32:49,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:49,250 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131045979] [2024-11-02 12:32:49,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:49,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:49,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:49,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-02 12:32:49,484 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:49,484 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131045979] [2024-11-02 12:32:49,485 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2131045979] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:49,485 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:49,486 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-02 12:32:49,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493341661] [2024-11-02 12:32:49,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:49,493 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-02 12:32:49,494 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:49,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-02 12:32:49,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-02 12:32:49,526 INFO L87 Difference]: Start difference. First operand has 79 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 59 states have internal predecessors, (68), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:49,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:49,633 INFO L93 Difference]: Finished difference Result 156 states and 213 transitions. [2024-11-02 12:32:49,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-02 12:32:49,636 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2024-11-02 12:32:49,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:49,650 INFO L225 Difference]: With dead ends: 156 [2024-11-02 12:32:49,650 INFO L226 Difference]: Without dead ends: 74 [2024-11-02 12:32:49,655 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-02 12:32:49,662 INFO L432 NwaCegarLoop]: 84 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:49,664 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 84 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-02 12:32:49,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-11-02 12:32:49,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2024-11-02 12:32:49,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 45 states have (on average 1.3333333333333333) internal successors, (60), 55 states have internal predecessors, (60), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2024-11-02 12:32:49,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 97 transitions. [2024-11-02 12:32:49,733 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 97 transitions. Word has length 16 [2024-11-02 12:32:49,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:49,734 INFO L471 AbstractCegarLoop]: Abstraction has 74 states and 97 transitions. [2024-11-02 12:32:49,735 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:49,736 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 97 transitions. [2024-11-02 12:32:49,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-11-02 12:32:49,740 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:49,740 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:49,740 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-02 12:32:49,741 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:49,742 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:49,743 INFO L85 PathProgramCache]: Analyzing trace with hash -2142357586, now seen corresponding path program 1 times [2024-11-02 12:32:49,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:49,743 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1723007797] [2024-11-02 12:32:49,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:49,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:49,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:49,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-02 12:32:49,856 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:49,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1723007797] [2024-11-02 12:32:49,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1723007797] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:49,857 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:49,857 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-02 12:32:49,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965809588] [2024-11-02 12:32:49,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:49,859 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-02 12:32:49,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:49,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-02 12:32:49,860 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-02 12:32:49,861 INFO L87 Difference]: Start difference. First operand 74 states and 97 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:49,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:49,929 INFO L93 Difference]: Finished difference Result 120 states and 156 transitions. [2024-11-02 12:32:49,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-02 12:32:49,930 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-11-02 12:32:49,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:49,932 INFO L225 Difference]: With dead ends: 120 [2024-11-02 12:32:49,932 INFO L226 Difference]: Without dead ends: 66 [2024-11-02 12:32:49,933 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-02 12:32:49,935 INFO L432 NwaCegarLoop]: 70 mSDtfsCounter, 14 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:49,935 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 124 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-02 12:32:49,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-11-02 12:32:49,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2024-11-02 12:32:49,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 40 states have (on average 1.35) internal successors, (54), 50 states have internal predecessors, (54), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-11-02 12:32:49,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 86 transitions. [2024-11-02 12:32:49,948 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 86 transitions. Word has length 17 [2024-11-02 12:32:49,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:49,948 INFO L471 AbstractCegarLoop]: Abstraction has 66 states and 86 transitions. [2024-11-02 12:32:49,949 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:49,949 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 86 transitions. [2024-11-02 12:32:49,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-11-02 12:32:49,950 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:49,951 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:49,951 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-02 12:32:49,951 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:49,952 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:49,952 INFO L85 PathProgramCache]: Analyzing trace with hash -34404378, now seen corresponding path program 1 times [2024-11-02 12:32:49,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:49,953 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1039283774] [2024-11-02 12:32:49,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:49,953 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:49,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:50,085 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-02 12:32:50,085 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:50,086 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1039283774] [2024-11-02 12:32:50,086 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1039283774] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:50,086 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:50,086 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-02 12:32:50,086 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017063943] [2024-11-02 12:32:50,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:50,087 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-02 12:32:50,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:50,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-02 12:32:50,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-02 12:32:50,091 INFO L87 Difference]: Start difference. First operand 66 states and 86 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:50,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:50,228 INFO L93 Difference]: Finished difference Result 194 states and 255 transitions. [2024-11-02 12:32:50,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-02 12:32:50,229 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2024-11-02 12:32:50,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:50,231 INFO L225 Difference]: With dead ends: 194 [2024-11-02 12:32:50,232 INFO L226 Difference]: Without dead ends: 130 [2024-11-02 12:32:50,233 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-02 12:32:50,234 INFO L432 NwaCegarLoop]: 83 mSDtfsCounter, 80 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:50,234 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 151 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-02 12:32:50,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2024-11-02 12:32:50,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 127. [2024-11-02 12:32:50,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 76 states have (on average 1.355263157894737) internal successors, (103), 95 states have internal predecessors, (103), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2024-11-02 12:32:50,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 167 transitions. [2024-11-02 12:32:50,284 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 167 transitions. Word has length 20 [2024-11-02 12:32:50,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:50,285 INFO L471 AbstractCegarLoop]: Abstraction has 127 states and 167 transitions. [2024-11-02 12:32:50,285 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:50,285 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 167 transitions. [2024-11-02 12:32:50,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-11-02 12:32:50,289 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:50,289 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:50,290 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-02 12:32:50,290 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:50,291 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:50,291 INFO L85 PathProgramCache]: Analyzing trace with hash -321403456, now seen corresponding path program 1 times [2024-11-02 12:32:50,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:50,291 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735601398] [2024-11-02 12:32:50,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:50,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:50,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:50,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-02 12:32:50,424 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:50,424 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735601398] [2024-11-02 12:32:50,424 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735601398] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:50,425 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:50,426 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-02 12:32:50,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89432759] [2024-11-02 12:32:50,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:50,427 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-02 12:32:50,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:50,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-02 12:32:50,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-02 12:32:50,429 INFO L87 Difference]: Start difference. First operand 127 states and 167 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:50,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:50,604 INFO L93 Difference]: Finished difference Result 338 states and 455 transitions. [2024-11-02 12:32:50,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-02 12:32:50,605 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-11-02 12:32:50,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:50,608 INFO L225 Difference]: With dead ends: 338 [2024-11-02 12:32:50,608 INFO L226 Difference]: Without dead ends: 213 [2024-11-02 12:32:50,612 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-02 12:32:50,614 INFO L432 NwaCegarLoop]: 67 mSDtfsCounter, 47 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:50,618 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 185 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-02 12:32:50,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2024-11-02 12:32:50,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 212. [2024-11-02 12:32:50,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 135 states have (on average 1.2814814814814814) internal successors, (173), 152 states have internal predecessors, (173), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2024-11-02 12:32:50,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 269 transitions. [2024-11-02 12:32:50,681 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 269 transitions. Word has length 23 [2024-11-02 12:32:50,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:50,682 INFO L471 AbstractCegarLoop]: Abstraction has 212 states and 269 transitions. [2024-11-02 12:32:50,682 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-02 12:32:50,682 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 269 transitions. [2024-11-02 12:32:50,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2024-11-02 12:32:50,685 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:50,685 INFO L215 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:50,686 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-02 12:32:50,686 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:50,686 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:50,687 INFO L85 PathProgramCache]: Analyzing trace with hash 449857887, now seen corresponding path program 1 times [2024-11-02 12:32:50,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:50,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117901972] [2024-11-02 12:32:50,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:50,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:50,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:51,183 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-02 12:32:51,184 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:51,184 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [117901972] [2024-11-02 12:32:51,184 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [117901972] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:51,185 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:51,185 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-02 12:32:51,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [200680048] [2024-11-02 12:32:51,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:51,186 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-02 12:32:51,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:51,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-02 12:32:51,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-11-02 12:32:51,188 INFO L87 Difference]: Start difference. First operand 212 states and 269 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-11-02 12:32:51,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:51,475 INFO L93 Difference]: Finished difference Result 583 states and 737 transitions. [2024-11-02 12:32:51,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-02 12:32:51,476 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 41 [2024-11-02 12:32:51,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:51,484 INFO L225 Difference]: With dead ends: 583 [2024-11-02 12:32:51,484 INFO L226 Difference]: Without dead ends: 373 [2024-11-02 12:32:51,485 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2024-11-02 12:32:51,486 INFO L432 NwaCegarLoop]: 97 mSDtfsCounter, 138 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:51,487 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 228 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-02 12:32:51,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2024-11-02 12:32:51,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 356. [2024-11-02 12:32:51,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 233 states have (on average 1.2660944206008584) internal successors, (295), 255 states have internal predecessors, (295), 61 states have call successors, (61), 55 states have call predecessors, (61), 61 states have return successors, (79), 61 states have call predecessors, (79), 61 states have call successors, (79) [2024-11-02 12:32:51,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 435 transitions. [2024-11-02 12:32:51,553 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 435 transitions. Word has length 41 [2024-11-02 12:32:51,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:51,553 INFO L471 AbstractCegarLoop]: Abstraction has 356 states and 435 transitions. [2024-11-02 12:32:51,554 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-11-02 12:32:51,554 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 435 transitions. [2024-11-02 12:32:51,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-11-02 12:32:51,557 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:51,561 INFO L215 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:51,562 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-02 12:32:51,562 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:51,562 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:51,562 INFO L85 PathProgramCache]: Analyzing trace with hash 1682930197, now seen corresponding path program 1 times [2024-11-02 12:32:51,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:51,563 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820646244] [2024-11-02 12:32:51,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:51,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:51,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:51,685 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-11-02 12:32:51,685 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:51,685 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820646244] [2024-11-02 12:32:51,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820646244] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:51,686 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:51,686 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-02 12:32:51,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [171205840] [2024-11-02 12:32:51,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:51,687 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-02 12:32:51,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:51,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-02 12:32:51,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-02 12:32:51,688 INFO L87 Difference]: Start difference. First operand 356 states and 435 transitions. Second operand has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-11-02 12:32:51,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:51,964 INFO L93 Difference]: Finished difference Result 1046 states and 1300 transitions. [2024-11-02 12:32:51,967 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-02 12:32:51,968 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 44 [2024-11-02 12:32:51,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:51,973 INFO L225 Difference]: With dead ends: 1046 [2024-11-02 12:32:51,973 INFO L226 Difference]: Without dead ends: 692 [2024-11-02 12:32:51,975 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-11-02 12:32:51,978 INFO L432 NwaCegarLoop]: 68 mSDtfsCounter, 61 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:51,979 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 306 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-02 12:32:51,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 692 states. [2024-11-02 12:32:52,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 692 to 676. [2024-11-02 12:32:52,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 676 states, 447 states have (on average 1.250559284116331) internal successors, (559), 482 states have internal predecessors, (559), 114 states have call successors, (114), 102 states have call predecessors, (114), 114 states have return successors, (150), 114 states have call predecessors, (150), 114 states have call successors, (150) [2024-11-02 12:32:52,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 676 states to 676 states and 823 transitions. [2024-11-02 12:32:52,054 INFO L78 Accepts]: Start accepts. Automaton has 676 states and 823 transitions. Word has length 44 [2024-11-02 12:32:52,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:52,055 INFO L471 AbstractCegarLoop]: Abstraction has 676 states and 823 transitions. [2024-11-02 12:32:52,055 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-11-02 12:32:52,055 INFO L276 IsEmpty]: Start isEmpty. Operand 676 states and 823 transitions. [2024-11-02 12:32:52,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2024-11-02 12:32:52,058 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:52,058 INFO L215 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:52,059 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-02 12:32:52,059 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:52,059 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:52,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1018450965, now seen corresponding path program 1 times [2024-11-02 12:32:52,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:52,060 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605622450] [2024-11-02 12:32:52,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:52,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:52,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:52,414 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-02 12:32:52,414 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:52,415 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605622450] [2024-11-02 12:32:52,415 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605622450] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:52,415 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:52,415 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2024-11-02 12:32:52,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677468614] [2024-11-02 12:32:52,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:52,416 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-11-02 12:32:52,416 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:52,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-11-02 12:32:52,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2024-11-02 12:32:52,419 INFO L87 Difference]: Start difference. First operand 676 states and 823 transitions. Second operand has 13 states, 11 states have (on average 2.8181818181818183) internal successors, (31), 10 states have internal predecessors, (31), 4 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (7), 6 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-02 12:32:53,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:53,513 INFO L93 Difference]: Finished difference Result 1323 states and 1737 transitions. [2024-11-02 12:32:53,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-11-02 12:32:53,514 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 2.8181818181818183) internal successors, (31), 10 states have internal predecessors, (31), 4 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (7), 6 states have call predecessors, (7), 4 states have call successors, (7) Word has length 47 [2024-11-02 12:32:53,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:53,521 INFO L225 Difference]: With dead ends: 1323 [2024-11-02 12:32:53,521 INFO L226 Difference]: Without dead ends: 1049 [2024-11-02 12:32:53,523 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=249, Invalid=873, Unknown=0, NotChecked=0, Total=1122 [2024-11-02 12:32:53,523 INFO L432 NwaCegarLoop]: 44 mSDtfsCounter, 333 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 488 mSolverCounterSat, 246 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 734 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 246 IncrementalHoareTripleChecker+Valid, 488 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:53,524 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 338 Invalid, 734 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [246 Valid, 488 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-11-02 12:32:53,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1049 states. [2024-11-02 12:32:53,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1049 to 869. [2024-11-02 12:32:53,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 869 states, 575 states have (on average 1.2556521739130435) internal successors, (722), 619 states have internal predecessors, (722), 146 states have call successors, (146), 122 states have call predecessors, (146), 147 states have return successors, (213), 152 states have call predecessors, (213), 146 states have call successors, (213) [2024-11-02 12:32:53,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 869 states to 869 states and 1081 transitions. [2024-11-02 12:32:53,642 INFO L78 Accepts]: Start accepts. Automaton has 869 states and 1081 transitions. Word has length 47 [2024-11-02 12:32:53,643 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:53,643 INFO L471 AbstractCegarLoop]: Abstraction has 869 states and 1081 transitions. [2024-11-02 12:32:53,643 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 2.8181818181818183) internal successors, (31), 10 states have internal predecessors, (31), 4 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (7), 6 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-02 12:32:53,643 INFO L276 IsEmpty]: Start isEmpty. Operand 869 states and 1081 transitions. [2024-11-02 12:32:53,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2024-11-02 12:32:53,646 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:53,647 INFO L215 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:53,647 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-02 12:32:53,647 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:53,647 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:53,648 INFO L85 PathProgramCache]: Analyzing trace with hash 1394540303, now seen corresponding path program 1 times [2024-11-02 12:32:53,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:53,648 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658796726] [2024-11-02 12:32:53,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:53,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:53,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:53,696 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-11-02 12:32:53,696 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:53,696 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [658796726] [2024-11-02 12:32:53,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [658796726] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:53,696 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:53,696 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-02 12:32:53,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566606003] [2024-11-02 12:32:53,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:53,697 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-02 12:32:53,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:53,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-02 12:32:53,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-02 12:32:53,698 INFO L87 Difference]: Start difference. First operand 869 states and 1081 transitions. Second operand has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-02 12:32:53,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:53,879 INFO L93 Difference]: Finished difference Result 1395 states and 1733 transitions. [2024-11-02 12:32:53,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-02 12:32:53,880 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 69 [2024-11-02 12:32:53,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:53,884 INFO L225 Difference]: With dead ends: 1395 [2024-11-02 12:32:53,884 INFO L226 Difference]: Without dead ends: 528 [2024-11-02 12:32:53,886 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-02 12:32:53,887 INFO L432 NwaCegarLoop]: 91 mSDtfsCounter, 104 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:53,887 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 142 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-02 12:32:53,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 528 states. [2024-11-02 12:32:53,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 528 to 520. [2024-11-02 12:32:53,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 520 states, 351 states have (on average 1.245014245014245) internal successors, (437), 377 states have internal predecessors, (437), 84 states have call successors, (84), 72 states have call predecessors, (84), 84 states have return successors, (114), 87 states have call predecessors, (114), 84 states have call successors, (114) [2024-11-02 12:32:53,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 520 states to 520 states and 635 transitions. [2024-11-02 12:32:53,941 INFO L78 Accepts]: Start accepts. Automaton has 520 states and 635 transitions. Word has length 69 [2024-11-02 12:32:53,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:53,942 INFO L471 AbstractCegarLoop]: Abstraction has 520 states and 635 transitions. [2024-11-02 12:32:53,942 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-02 12:32:53,942 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 635 transitions. [2024-11-02 12:32:53,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2024-11-02 12:32:53,944 INFO L207 NwaCegarLoop]: Found error trace [2024-11-02 12:32:53,944 INFO L215 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:53,945 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-02 12:32:53,945 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-02 12:32:53,945 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-02 12:32:53,945 INFO L85 PathProgramCache]: Analyzing trace with hash -1101854173, now seen corresponding path program 1 times [2024-11-02 12:32:53,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-02 12:32:53,946 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802788371] [2024-11-02 12:32:53,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-02 12:32:53,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-02 12:32:53,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-02 12:32:54,186 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2024-11-02 12:32:54,186 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-02 12:32:54,187 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802788371] [2024-11-02 12:32:54,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [802788371] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-02 12:32:54,187 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-02 12:32:54,187 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2024-11-02 12:32:54,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1160278857] [2024-11-02 12:32:54,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-02 12:32:54,188 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-11-02 12:32:54,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-02 12:32:54,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-11-02 12:32:54,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2024-11-02 12:32:54,190 INFO L87 Difference]: Start difference. First operand 520 states and 635 transitions. Second operand has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2024-11-02 12:32:54,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-02 12:32:54,639 INFO L93 Difference]: Finished difference Result 1071 states and 1339 transitions. [2024-11-02 12:32:54,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2024-11-02 12:32:54,640 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 90 [2024-11-02 12:32:54,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-02 12:32:54,643 INFO L225 Difference]: With dead ends: 1071 [2024-11-02 12:32:54,644 INFO L226 Difference]: Without dead ends: 0 [2024-11-02 12:32:54,646 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2024-11-02 12:32:54,647 INFO L432 NwaCegarLoop]: 63 mSDtfsCounter, 69 mSDsluCounter, 339 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 336 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-11-02 12:32:54,648 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 402 Invalid, 336 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-11-02 12:32:54,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-02 12:32:54,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-02 12:32:54,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-02 12:32:54,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-02 12:32:54,651 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 90 [2024-11-02 12:32:54,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-02 12:32:54,651 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-02 12:32:54,651 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 5.875) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (13), 1 states have call predecessors, (13), 3 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2024-11-02 12:32:54,651 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-02 12:32:54,652 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-02 12:32:54,654 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-02 12:32:54,655 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-02 12:32:54,658 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-02 12:32:54,660 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-02 12:32:59,413 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-02 12:32:59,445 WARN L156 FloydHoareUtils]: Requires clause for deactivatePump contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (<= 2 ~waterLevel~0) (not (= 0 ~systemActive~0))) (= 1 ~systemActive~0))) Eliminated clause: (or (and (<= 2 ~waterLevel~0) (not (= 0 ~systemActive~0))) (= 1 ~systemActive~0)) [2024-11-02 12:32:59,462 WARN L156 FloydHoareUtils]: Requires clause for changeMethaneLevel contained old-variable. Original clause: (let ((.cse2 (= |old(~methaneLevelCritical~0)| 0))) (and (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1) (and .cse2 .cse1) (and .cse0 (= 0 ~systemActive~0)))) (or (not .cse2) (= ~methaneLevelCritical~0 0)))) Eliminated clause: (exists ((|old(~methaneLevelCritical~0)| Int)) (let ((.cse2 (= |old(~methaneLevelCritical~0)| 0))) (and (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1) (and .cse2 .cse1) (and .cse0 (= 0 ~systemActive~0)))) (or (not .cse2) (= ~methaneLevelCritical~0 0))))) [2024-11-02 12:32:59,465 WARN L976 BoogieBacktranslator]: Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression [2024-11-02 12:32:59,475 WARN L156 FloydHoareUtils]: Requires clause for timeShift contained old-variable. Original clause: (let ((.cse0 (= |old(~pumpRunning~0)| 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= 1 ~systemActive~0) (and .cse0 (= 0 ~systemActive~0))) (or (< 1 |old(~waterLevel~0)|) (not .cse0) (<= ~waterLevel~0 1)))) Eliminated clause: (or (= 1 ~systemActive~0) (and (= ~pumpRunning~0 0) (= 0 ~systemActive~0))) [2024-11-02 12:32:59,486 WARN L156 FloydHoareUtils]: Requires clause for processEnvironment__wrappee__highWaterSensor contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 1 ~systemActive~0) (or (= ~methaneLevelCritical~0 0) (= |old(~pumpRunning~0)| 0))) Eliminated clause: (and (= 1 ~systemActive~0) (or (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0))) [2024-11-02 12:32:59,494 WARN L156 FloydHoareUtils]: Requires clause for waterRise contained old-variable. Original clause: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (<= 2 ~waterLevel~0) (< |old(~waterLevel~0)| 2) .cse0) (let ((.cse1 (= ~pumpRunning~0 0))) (or (and (= 1 ~systemActive~0) (or .cse1 (= ~methaneLevelCritical~0 0))) (and .cse1 .cse0))))) Eliminated clause: (let ((.cse0 (= ~pumpRunning~0 0))) (or (and (= 1 ~systemActive~0) (or .cse0 (= ~methaneLevelCritical~0 0))) (and .cse0 (= 0 ~systemActive~0)))) [2024-11-02 12:32:59,500 WARN L156 FloydHoareUtils]: Requires clause for processEnvironment__wrappee__methaneQuery contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 1 ~systemActive~0) (or (= ~methaneLevelCritical~0 0) (= |old(~pumpRunning~0)| 0))) Eliminated clause: (and (= 1 ~systemActive~0) (or (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0))) [2024-11-02 12:32:59,511 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 12:32:59 BoogieIcfgContainer [2024-11-02 12:32:59,511 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-02 12:32:59,511 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-02 12:32:59,511 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-02 12:32:59,512 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-02 12:32:59,512 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 12:32:49" (3/4) ... [2024-11-02 12:32:59,515 INFO L142 WitnessPrinter]: Generating witness for correct program [2024-11-02 12:32:59,518 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-11-02 12:32:59,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-02 12:32:59,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-02 12:32:59,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-02 12:32:59,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-02 12:32:59,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-11-02 12:32:59,520 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-11-02 12:32:59,520 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-02 12:32:59,520 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2024-11-02 12:32:59,520 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2024-11-02 12:32:59,528 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 47 nodes and edges [2024-11-02 12:32:59,528 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2024-11-02 12:32:59,529 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-02 12:32:59,530 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-02 12:32:59,530 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-02 12:32:59,562 WARN L216 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning)) && ((1 == systemActive) || ((\old(pumpRunning) == 0) && (0 == systemActive)))) && (((1 < \old(waterLevel)) || (\old(pumpRunning) != 0)) || (waterLevel <= 1))) [2024-11-02 12:32:59,603 WARN L140 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning)) && ((1 == systemActive) || ((\old(pumpRunning) == 0) && (0 == systemActive)))) && (((1 < \old(waterLevel)) || (\old(pumpRunning) != 0)) || (waterLevel <= 1))) [2024-11-02 12:32:59,668 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/witness.graphml [2024-11-02 12:32:59,672 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/witness.yml [2024-11-02 12:32:59,672 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-02 12:32:59,673 INFO L158 Benchmark]: Toolchain (without parser) took 12131.34ms. Allocated memory was 130.0MB in the beginning and 205.5MB in the end (delta: 75.5MB). Free memory was 94.7MB in the beginning and 121.1MB in the end (delta: -26.3MB). Peak memory consumption was 49.1MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,673 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 130.0MB. Free memory is still 99.6MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-02 12:32:59,673 INFO L158 Benchmark]: CACSL2BoogieTranslator took 693.59ms. Allocated memory is still 130.0MB. Free memory was 94.3MB in the beginning and 88.8MB in the end (delta: 5.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,674 INFO L158 Benchmark]: Boogie Procedure Inliner took 74.83ms. Allocated memory is still 130.0MB. Free memory was 88.4MB in the beginning and 86.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,674 INFO L158 Benchmark]: Boogie Preprocessor took 30.90ms. Allocated memory is still 130.0MB. Free memory was 86.3MB in the beginning and 84.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,676 INFO L158 Benchmark]: RCFGBuilder took 698.83ms. Allocated memory is still 130.0MB. Free memory was 84.6MB in the beginning and 54.4MB in the end (delta: 30.2MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,677 INFO L158 Benchmark]: TraceAbstraction took 10463.17ms. Allocated memory was 130.0MB in the beginning and 205.5MB in the end (delta: 75.5MB). Free memory was 53.6MB in the beginning and 129.5MB in the end (delta: -75.9MB). Peak memory consumption was 76.0MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,677 INFO L158 Benchmark]: Witness Printer took 160.86ms. Allocated memory is still 205.5MB. Free memory was 129.5MB in the beginning and 121.1MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-02 12:32:59,679 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 130.0MB. Free memory is still 99.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 693.59ms. Allocated memory is still 130.0MB. Free memory was 94.3MB in the beginning and 88.8MB in the end (delta: 5.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 74.83ms. Allocated memory is still 130.0MB. Free memory was 88.4MB in the beginning and 86.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.90ms. Allocated memory is still 130.0MB. Free memory was 86.3MB in the beginning and 84.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 698.83ms. Allocated memory is still 130.0MB. Free memory was 84.6MB in the beginning and 54.4MB in the end (delta: 30.2MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. * TraceAbstraction took 10463.17ms. Allocated memory was 130.0MB in the beginning and 205.5MB in the end (delta: 75.5MB). Free memory was 53.6MB in the beginning and 129.5MB in the end (delta: -75.9MB). Peak memory consumption was 76.0MB. Max. memory is 16.1GB. * Witness Printer took 160.86ms. Allocated memory is still 205.5MB. Free memory was 129.5MB in the beginning and 121.1MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] - GenericResultAtLocation [Line: 490]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] - GenericResultAtLocation [Line: 591]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] - GenericResultAtLocation [Line: 862]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] - GenericResultAtLocation [Line: 966]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 79 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.5s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 862 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 846 mSDsluCounter, 1960 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1293 mSDsCounter, 295 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1283 IncrementalHoareTripleChecker+Invalid, 1578 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 295 mSolverCounterUnsat, 667 mSDtfsCounter, 1283 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 93 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=869occurred in iteration=7, InterpolantAutomatonStates: 70, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 9 MinimizatonAttempts, 225 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 367 NumberOfCodeBlocks, 367 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 358 ConstructedInterpolants, 0 QuantifiedInterpolants, 697 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 67/67 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 976]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 603]: Location Invariant Derived location invariant: (((pumpRunning == \old(pumpRunning)) && ((1 == systemActive) || ((\old(pumpRunning) == 0) && (0 == systemActive)))) && (((1 < \old(waterLevel)) || (\old(pumpRunning) != 0)) || (waterLevel <= 1))) - ProcedureContractResult [Line: 737]: Procedure Contract for deactivatePump Derived contract for procedure deactivatePump. Requires: (((2 <= waterLevel) && (0 != systemActive)) || (1 == systemActive)) Ensures: (((pumpRunning == 0) && (((2 <= waterLevel) && (0 != systemActive)) || (1 == systemActive))) && (((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 627]: Procedure Contract for processEnvironment__wrappee__base Derived contract for procedure processEnvironment__wrappee__base. Requires: (((methaneLevelCritical == 0) && (1 == systemActive)) || ((pumpRunning == 0) && (1 == systemActive))) Ensures: ((((methaneLevelCritical == 0) && (1 == systemActive)) || ((pumpRunning == 0) && (1 == systemActive))) && ((((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 890]: Procedure Contract for changeMethaneLevel Derived contract for procedure changeMethaneLevel. Ensures: (((((pumpRunning == 0) && (1 == systemActive)) || ((\old(methaneLevelCritical) == 0) && (1 == systemActive))) || ((pumpRunning == 0) && (0 == systemActive))) && (((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel)))) - ProcedureContractResult [Line: 603]: Procedure Contract for timeShift Derived contract for procedure timeShift. Requires: ((1 == systemActive) || ((pumpRunning == 0) && (0 == systemActive))) Ensures: ((((((1 == systemActive) || ((\old(pumpRunning) == 0) && (0 == systemActive))) && (((pumpRunning == 0) || ((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == 0))) || ((methaneLevelCritical == 0) && (2 <= waterLevel)))) && (((1 < \old(waterLevel)) || (\old(pumpRunning) != 0)) || (waterLevel < 2))) && ((pumpRunning == 0) || (0 != systemActive))) && ((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (systemActive == \old(systemActive))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 493]: Procedure Contract for cleanup Derived contract for procedure cleanup. Requires: 0 Ensures: (0 && ((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (systemActive == \old(systemActive))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 902]: Procedure Contract for isMethaneLevelCritical Derived contract for procedure isMethaneLevelCritical. Requires: ((1 == systemActive) || ((pumpRunning == 0) && (0 == systemActive))) Ensures: (((\result == methaneLevelCritical) && ((1 == systemActive) || ((pumpRunning == 0) && (0 == systemActive)))) && ((((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 635]: Procedure Contract for processEnvironment__wrappee__highWaterSensor Derived contract for procedure processEnvironment__wrappee__highWaterSensor. Requires: ((1 == systemActive) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) Ensures: ((((((1 == systemActive) && (\old(pumpRunning) == 0)) || ((methaneLevelCritical == 0) && (1 == systemActive))) && ((pumpRunning == \old(pumpRunning)) || (1 < waterLevel))) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) && (((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 878]: Procedure Contract for waterRise Derived contract for procedure waterRise. Requires: (((1 == systemActive) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) || ((pumpRunning == 0) && (0 == systemActive))) Ensures: (((((\old(waterLevel) < 2) || (1 < waterLevel)) || (0 == systemActive)) && (((1 == systemActive) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) || ((pumpRunning == 0) && (0 == systemActive)))) && (((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 661]: Procedure Contract for processEnvironment__wrappee__methaneQuery Derived contract for procedure processEnvironment__wrappee__methaneQuery. Requires: ((1 == systemActive) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) Ensures: ((((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || (1 < waterLevel)) && (((1 == systemActive) && (\old(pumpRunning) == 0)) || ((methaneLevelCritical == 0) && (1 == systemActive)))) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) && (((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) - ProcedureContractResult [Line: 745]: Procedure Contract for isMethaneAlarm Derived contract for procedure isMethaneAlarm. Requires: (1 == systemActive) Ensures: (((1 == systemActive) && (\result == methaneLevelCritical)) && ((((((head == \old(head)) && (cleanupTimeShifts == \old(cleanupTimeShifts))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical)))) RESULT: Ultimate proved your program to be correct! [2024-11-02 12:32:59,725 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3af1d07b-862c-4aca-98ea-a8cd301d8017/bin/utaipan-verify-DbMuA5NWw2/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE