./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:29:41,342 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:29:41,344 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:29:41,380 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:29:41,381 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:29:41,383 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:29:41,385 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:29:41,388 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:29:41,391 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:29:41,392 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:29:41,393 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:29:41,395 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:29:41,396 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:29:41,397 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:29:41,399 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:29:41,401 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:29:41,402 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:29:41,403 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:29:41,410 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:29:41,413 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:29:41,415 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:29:41,430 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:29:41,432 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:29:41,433 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:29:41,444 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:29:41,445 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:29:41,445 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:29:41,446 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:29:41,447 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:29:41,448 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:29:41,449 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:29:41,452 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:29:41,453 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:29:41,454 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:29:41,455 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:29:41,456 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:29:41,457 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:29:41,457 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:29:41,458 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:29:41,459 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:29:41,460 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:29:41,463 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:29:41,514 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:29:41,514 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:29:41,515 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:29:41,515 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:29:41,522 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:29:41,522 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:29:41,523 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:29:41,523 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:29:41,523 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:29:41,523 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:29:41,524 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:29:41,525 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:29:41,525 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:29:41,525 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:29:41,525 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:29:41,526 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:29:41,526 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:29:41,526 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:29:41,527 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:29:41,527 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:29:41,527 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:29:41,528 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:29:41,528 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:29:41,528 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:29:41,528 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:29:41,528 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:29:41,529 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:29:41,529 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:29:41,529 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:29:41,529 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:29:41,530 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:29:41,530 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:29:41,530 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:29:41,530 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:29:41,531 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:29:41,531 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:29:41,531 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:29:41,531 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:29:41,532 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:29:41,532 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:29:41,532 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:29:41,532 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d [2021-11-23 03:29:41,843 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:29:41,870 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:29:41,872 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:29:41,874 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:29:41,875 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:29:41,876 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2021-11-23 03:29:41,969 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/data/e37a17571/7cfb902c15cb4e36813e043680860079/FLAGf54219971 [2021-11-23 03:29:42,457 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:29:42,458 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2021-11-23 03:29:42,472 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/data/e37a17571/7cfb902c15cb4e36813e043680860079/FLAGf54219971 [2021-11-23 03:29:42,770 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/data/e37a17571/7cfb902c15cb4e36813e043680860079 [2021-11-23 03:29:42,773 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:29:42,775 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:29:42,777 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:29:42,777 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:29:42,781 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:29:42,782 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:29:42" (1/1) ... [2021-11-23 03:29:42,784 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1d212f45 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:42, skipping insertion in model container [2021-11-23 03:29:42,784 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:29:42" (1/1) ... [2021-11-23 03:29:42,798 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:29:42,854 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:29:43,190 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2021-11-23 03:29:43,307 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:29:43,325 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:29:43,383 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2021-11-23 03:29:43,407 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:29:43,427 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:29:43,428 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43 WrapperNode [2021-11-23 03:29:43,428 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:29:43,430 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:29:43,430 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:29:43,430 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:29:43,438 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,467 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,513 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 283 [2021-11-23 03:29:43,516 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:29:43,517 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:29:43,518 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:29:43,518 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:29:43,528 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,529 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,542 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,543 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,550 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,555 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,558 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,562 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:29:43,563 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:29:43,563 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:29:43,563 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:29:43,573 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (1/1) ... [2021-11-23 03:29:43,594 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:29:43,608 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:29:43,618 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:29:43,628 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:29:43,666 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:29:43,667 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:29:43,667 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:29:43,667 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:29:43,667 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:29:43,667 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:29:43,667 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:29:43,667 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:29:43,667 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:29:43,667 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:29:43,667 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:29:43,668 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:29:43,668 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:29:43,668 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:29:43,668 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:29:43,668 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:29:43,788 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:29:43,789 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:29:44,109 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:29:44,202 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:29:44,208 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:29:44,211 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:29:44 BoogieIcfgContainer [2021-11-23 03:29:44,211 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:29:44,213 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:29:44,214 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:29:44,217 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:29:44,217 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:29:42" (1/3) ... [2021-11-23 03:29:44,218 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d2ccc45 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:29:44, skipping insertion in model container [2021-11-23 03:29:44,219 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:29:43" (2/3) ... [2021-11-23 03:29:44,219 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d2ccc45 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:29:44, skipping insertion in model container [2021-11-23 03:29:44,219 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:29:44" (3/3) ... [2021-11-23 03:29:44,221 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product58.cil.c [2021-11-23 03:29:44,227 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:29:44,227 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:29:44,279 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:29:44,287 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:29:44,287 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:29:44,306 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-23 03:29:44,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-23 03:29:44,313 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:44,314 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:44,314 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:44,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:44,320 INFO L85 PathProgramCache]: Analyzing trace with hash -1497506587, now seen corresponding path program 1 times [2021-11-23 03:29:44,331 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:44,331 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972187826] [2021-11-23 03:29:44,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:44,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:44,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:44,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:44,573 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:44,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972187826] [2021-11-23 03:29:44,575 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972187826] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:44,575 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:29:44,575 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:29:44,577 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247884878] [2021-11-23 03:29:44,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:44,583 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:29:44,583 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:44,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:29:44,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:29:44,611 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:44,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:44,707 INFO L93 Difference]: Finished difference Result 100 states and 137 transitions. [2021-11-23 03:29:44,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:29:44,711 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-23 03:29:44,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:44,724 INFO L225 Difference]: With dead ends: 100 [2021-11-23 03:29:44,724 INFO L226 Difference]: Without dead ends: 46 [2021-11-23 03:29:44,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:29:44,734 INFO L933 BasicCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:44,735 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:29:44,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2021-11-23 03:29:44,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2021-11-23 03:29:44,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3333333333333333) internal successors, (40), 37 states have internal predecessors, (40), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:29:44,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 59 transitions. [2021-11-23 03:29:44,778 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 59 transitions. Word has length 12 [2021-11-23 03:29:44,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:44,779 INFO L470 AbstractCegarLoop]: Abstraction has 46 states and 59 transitions. [2021-11-23 03:29:44,779 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:44,779 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 59 transitions. [2021-11-23 03:29:44,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-23 03:29:44,781 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:44,781 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:44,782 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:29:44,782 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:44,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:44,783 INFO L85 PathProgramCache]: Analyzing trace with hash -903472037, now seen corresponding path program 1 times [2021-11-23 03:29:44,784 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:44,784 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1158881322] [2021-11-23 03:29:44,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:44,785 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:44,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:44,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:44,910 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:44,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1158881322] [2021-11-23 03:29:44,912 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1158881322] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:44,912 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:29:44,913 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:29:44,913 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1096640898] [2021-11-23 03:29:44,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:44,914 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:29:44,916 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:44,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:29:44,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:29:44,918 INFO L87 Difference]: Start difference. First operand 46 states and 59 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:44,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:44,987 INFO L93 Difference]: Finished difference Result 69 states and 89 transitions. [2021-11-23 03:29:44,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:29:44,992 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-23 03:29:44,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:44,995 INFO L225 Difference]: With dead ends: 69 [2021-11-23 03:29:44,995 INFO L226 Difference]: Without dead ends: 38 [2021-11-23 03:29:45,001 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:29:45,004 INFO L933 BasicCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:45,004 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:29:45,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2021-11-23 03:29:45,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2021-11-23 03:29:45,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.36) internal successors, (34), 32 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 03:29:45,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 48 transitions. [2021-11-23 03:29:45,026 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 48 transitions. Word has length 13 [2021-11-23 03:29:45,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:45,027 INFO L470 AbstractCegarLoop]: Abstraction has 38 states and 48 transitions. [2021-11-23 03:29:45,027 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:45,028 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 48 transitions. [2021-11-23 03:29:45,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2021-11-23 03:29:45,029 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:45,029 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:45,029 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:29:45,029 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:45,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:45,030 INFO L85 PathProgramCache]: Analyzing trace with hash -1673097531, now seen corresponding path program 1 times [2021-11-23 03:29:45,030 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:45,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587989618] [2021-11-23 03:29:45,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:45,031 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:45,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:45,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:45,172 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:45,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587989618] [2021-11-23 03:29:45,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587989618] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:45,172 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:29:45,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 03:29:45,173 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [292579608] [2021-11-23 03:29:45,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:45,173 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 03:29:45,173 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:45,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 03:29:45,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-23 03:29:45,174 INFO L87 Difference]: Start difference. First operand 38 states and 48 transitions. Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:45,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:45,317 INFO L93 Difference]: Finished difference Result 124 states and 158 transitions. [2021-11-23 03:29:45,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 03:29:45,318 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2021-11-23 03:29:45,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:45,320 INFO L225 Difference]: With dead ends: 124 [2021-11-23 03:29:45,320 INFO L226 Difference]: Without dead ends: 88 [2021-11-23 03:29:45,321 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:29:45,322 INFO L933 BasicCegarLoop]: 43 mSDtfsCounter, 54 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:45,323 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 156 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:29:45,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-11-23 03:29:45,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 72. [2021-11-23 03:29:45,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 49 states have (on average 1.2653061224489797) internal successors, (62), 58 states have internal predecessors, (62), 11 states have call successors, (11), 9 states have call predecessors, (11), 11 states have return successors, (13), 10 states have call predecessors, (13), 11 states have call successors, (13) [2021-11-23 03:29:45,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 86 transitions. [2021-11-23 03:29:45,341 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 86 transitions. Word has length 15 [2021-11-23 03:29:45,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:45,342 INFO L470 AbstractCegarLoop]: Abstraction has 72 states and 86 transitions. [2021-11-23 03:29:45,342 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:29:45,342 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 86 transitions. [2021-11-23 03:29:45,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-11-23 03:29:45,343 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:45,343 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:45,344 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:29:45,344 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:45,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:45,345 INFO L85 PathProgramCache]: Analyzing trace with hash -1600810338, now seen corresponding path program 1 times [2021-11-23 03:29:45,345 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:45,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120785358] [2021-11-23 03:29:45,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:45,346 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:45,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:45,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:45,516 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:45,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120785358] [2021-11-23 03:29:45,516 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120785358] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:45,516 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:29:45,517 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:29:45,517 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1263402592] [2021-11-23 03:29:45,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:45,518 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:29:45,518 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:45,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:29:45,519 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:29:45,520 INFO L87 Difference]: Start difference. First operand 72 states and 86 transitions. Second operand has 8 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 03:29:46,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:46,025 INFO L93 Difference]: Finished difference Result 189 states and 239 transitions. [2021-11-23 03:29:46,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 03:29:46,026 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2021-11-23 03:29:46,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:46,032 INFO L225 Difference]: With dead ends: 189 [2021-11-23 03:29:46,033 INFO L226 Difference]: Without dead ends: 153 [2021-11-23 03:29:46,038 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-23 03:29:46,047 INFO L933 BasicCegarLoop]: 64 mSDtfsCounter, 168 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 269 mSolverCounterSat, 78 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:46,049 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [176 Valid, 209 Invalid, 347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 269 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:29:46,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2021-11-23 03:29:46,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 75. [2021-11-23 03:29:46,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.26) internal successors, (63), 60 states have internal predecessors, (63), 12 states have call successors, (12), 10 states have call predecessors, (12), 12 states have return successors, (14), 11 states have call predecessors, (14), 12 states have call successors, (14) [2021-11-23 03:29:46,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 89 transitions. [2021-11-23 03:29:46,083 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 89 transitions. Word has length 18 [2021-11-23 03:29:46,084 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:46,084 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 89 transitions. [2021-11-23 03:29:46,085 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 03:29:46,085 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 89 transitions. [2021-11-23 03:29:46,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-11-23 03:29:46,092 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:46,092 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:46,093 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:29:46,093 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:46,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:46,095 INFO L85 PathProgramCache]: Analyzing trace with hash -459195640, now seen corresponding path program 1 times [2021-11-23 03:29:46,095 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:46,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773751318] [2021-11-23 03:29:46,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:46,095 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:46,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:46,210 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:46,210 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:46,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773751318] [2021-11-23 03:29:46,210 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773751318] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:46,210 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:29:46,210 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:29:46,210 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576948968] [2021-11-23 03:29:46,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:46,211 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:29:46,211 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:46,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:29:46,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:29:46,212 INFO L87 Difference]: Start difference. First operand 75 states and 89 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:29:46,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:46,247 INFO L93 Difference]: Finished difference Result 148 states and 178 transitions. [2021-11-23 03:29:46,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:29:46,252 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 36 [2021-11-23 03:29:46,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:46,254 INFO L225 Difference]: With dead ends: 148 [2021-11-23 03:29:46,254 INFO L226 Difference]: Without dead ends: 75 [2021-11-23 03:29:46,256 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:29:46,262 INFO L933 BasicCegarLoop]: 32 mSDtfsCounter, 30 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:46,263 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [30 Valid, 32 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:29:46,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2021-11-23 03:29:46,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2021-11-23 03:29:46,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.22) internal successors, (61), 60 states have internal predecessors, (61), 12 states have call successors, (12), 10 states have call predecessors, (12), 12 states have return successors, (14), 11 states have call predecessors, (14), 12 states have call successors, (14) [2021-11-23 03:29:46,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 87 transitions. [2021-11-23 03:29:46,288 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 87 transitions. Word has length 36 [2021-11-23 03:29:46,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:46,288 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 87 transitions. [2021-11-23 03:29:46,288 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:29:46,289 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 87 transitions. [2021-11-23 03:29:46,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-11-23 03:29:46,290 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:46,290 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:46,290 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:29:46,291 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:46,293 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:46,293 INFO L85 PathProgramCache]: Analyzing trace with hash -1379183030, now seen corresponding path program 1 times [2021-11-23 03:29:46,293 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:46,293 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345073477] [2021-11-23 03:29:46,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:46,294 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:46,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:46,501 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:46,502 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:46,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345073477] [2021-11-23 03:29:46,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1345073477] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:29:46,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2032650385] [2021-11-23 03:29:46,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:46,503 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:29:46,503 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:29:46,508 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:29:46,516 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:29:46,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:46,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-23 03:29:46,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:29:46,947 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:46,947 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:29:46,947 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2032650385] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:29:46,948 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:29:46,948 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 15 [2021-11-23 03:29:46,948 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89485104] [2021-11-23 03:29:46,948 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:29:46,949 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:29:46,949 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:46,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:29:46,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=161, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:29:46,950 INFO L87 Difference]: Start difference. First operand 75 states and 87 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:29:47,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:29:47,385 INFO L93 Difference]: Finished difference Result 210 states and 260 transitions. [2021-11-23 03:29:47,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-23 03:29:47,385 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 39 [2021-11-23 03:29:47,386 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:29:47,388 INFO L225 Difference]: With dead ends: 210 [2021-11-23 03:29:47,388 INFO L226 Difference]: Without dead ends: 167 [2021-11-23 03:29:47,389 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=89, Invalid=291, Unknown=0, NotChecked=0, Total=380 [2021-11-23 03:29:47,390 INFO L933 BasicCegarLoop]: 51 mSDtfsCounter, 106 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 268 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 326 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 268 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:29:47,390 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [109 Valid, 169 Invalid, 326 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 268 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:29:47,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-11-23 03:29:47,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 129. [2021-11-23 03:29:47,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 88 states have (on average 1.2386363636363635) internal successors, (109), 101 states have internal predecessors, (109), 20 states have call successors, (20), 18 states have call predecessors, (20), 20 states have return successors, (28), 18 states have call predecessors, (28), 20 states have call successors, (28) [2021-11-23 03:29:47,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 157 transitions. [2021-11-23 03:29:47,421 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 157 transitions. Word has length 39 [2021-11-23 03:29:47,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:29:47,421 INFO L470 AbstractCegarLoop]: Abstraction has 129 states and 157 transitions. [2021-11-23 03:29:47,421 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:29:47,421 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 157 transitions. [2021-11-23 03:29:47,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-11-23 03:29:47,423 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:29:47,423 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:29:47,463 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:29:47,648 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:29:47,648 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:29:47,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:29:47,649 INFO L85 PathProgramCache]: Analyzing trace with hash 317890339, now seen corresponding path program 1 times [2021-11-23 03:29:47,649 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:29:47,649 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [784517516] [2021-11-23 03:29:47,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:47,649 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:29:47,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:47,899 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:29:47,899 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:29:47,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [784517516] [2021-11-23 03:29:47,900 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [784517516] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:29:47,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2013289616] [2021-11-23 03:29:47,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:29:47,900 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:29:47,900 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:29:47,901 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:29:47,924 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:29:48,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:29:48,022 INFO L263 TraceCheckSpWp]: Trace formula consists of 398 conjuncts, 28 conjunts are in the unsatisfiable core [2021-11-23 03:29:48,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:29:48,403 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 03:29:48,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:29:49,075 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 03:29:49,075 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2013289616] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:29:49,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1035046213] [2021-11-23 03:29:49,098 INFO L159 IcfgInterpreter]: Started Sifa with 30 locations of interest [2021-11-23 03:29:49,099 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:29:49,104 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:29:49,111 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:29:49,112 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:29:55,581 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 50 for LOIs [2021-11-23 03:29:55,593 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2021-11-23 03:29:55,785 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 03:29:55,822 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:29:59,456 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:29:59,456 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:29:59,456 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:29:59,459 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 11] total 28 [2021-11-23 03:29:59,460 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608546428] [2021-11-23 03:29:59,460 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:29:59,461 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-11-23 03:29:59,461 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:29:59,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-11-23 03:29:59,463 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2175, Unknown=0, NotChecked=0, Total=2450 [2021-11-23 03:29:59,463 INFO L87 Difference]: Start difference. First operand 129 states and 157 transitions. Second operand has 28 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 10 states have call successors, (12), 9 states have call predecessors, (12), 7 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:30:01,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:30:01,785 INFO L93 Difference]: Finished difference Result 519 states and 685 transitions. [2021-11-23 03:30:01,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2021-11-23 03:30:01,786 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 10 states have call successors, (12), 9 states have call predecessors, (12), 7 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Word has length 42 [2021-11-23 03:30:01,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:30:01,791 INFO L225 Difference]: With dead ends: 519 [2021-11-23 03:30:01,791 INFO L226 Difference]: Without dead ends: 443 [2021-11-23 03:30:01,796 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2728 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=1048, Invalid=6784, Unknown=0, NotChecked=0, Total=7832 [2021-11-23 03:30:01,797 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 753 mSDsluCounter, 504 mSDsCounter, 0 mSdLazyCounter, 1075 mSolverCounterSat, 516 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 758 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 1591 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 516 IncrementalHoareTripleChecker+Valid, 1075 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-23 03:30:01,797 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [758 Valid, 450 Invalid, 1591 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [516 Valid, 1075 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-23 03:30:01,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 443 states. [2021-11-23 03:30:01,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 443 to 332. [2021-11-23 03:30:01,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 332 states, 233 states have (on average 1.1888412017167382) internal successors, (277), 256 states have internal predecessors, (277), 48 states have call successors, (48), 46 states have call predecessors, (48), 50 states have return successors, (69), 46 states have call predecessors, (69), 48 states have call successors, (69) [2021-11-23 03:30:01,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 332 states to 332 states and 394 transitions. [2021-11-23 03:30:01,855 INFO L78 Accepts]: Start accepts. Automaton has 332 states and 394 transitions. Word has length 42 [2021-11-23 03:30:01,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:30:01,856 INFO L470 AbstractCegarLoop]: Abstraction has 332 states and 394 transitions. [2021-11-23 03:30:01,856 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 10 states have call successors, (12), 9 states have call predecessors, (12), 7 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:30:01,856 INFO L276 IsEmpty]: Start isEmpty. Operand 332 states and 394 transitions. [2021-11-23 03:30:01,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-11-23 03:30:01,859 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:30:01,860 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:30:01,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:30:02,078 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2021-11-23 03:30:02,078 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:30:02,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:30:02,079 INFO L85 PathProgramCache]: Analyzing trace with hash -1478018293, now seen corresponding path program 1 times [2021-11-23 03:30:02,079 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:30:02,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775943148] [2021-11-23 03:30:02,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:30:02,079 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:30:02,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:30:02,406 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 10 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:30:02,407 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:30:02,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775943148] [2021-11-23 03:30:02,407 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775943148] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:30:02,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1126088587] [2021-11-23 03:30:02,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:30:02,407 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:02,408 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:30:02,408 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:30:02,424 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 03:30:02,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:30:02,510 INFO L263 TraceCheckSpWp]: Trace formula consists of 474 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-23 03:30:02,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:30:02,680 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 03:30:02,680 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:30:02,680 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1126088587] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:30:02,680 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:30:02,681 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [16] total 18 [2021-11-23 03:30:02,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524782914] [2021-11-23 03:30:02,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:30:02,681 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 03:30:02,682 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:30:02,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 03:30:02,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=259, Unknown=0, NotChecked=0, Total=306 [2021-11-23 03:30:02,682 INFO L87 Difference]: Start difference. First operand 332 states and 394 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-23 03:30:02,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:30:02,908 INFO L93 Difference]: Finished difference Result 706 states and 868 transitions. [2021-11-23 03:30:02,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 03:30:02,909 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2021-11-23 03:30:02,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:30:02,913 INFO L225 Difference]: With dead ends: 706 [2021-11-23 03:30:02,913 INFO L226 Difference]: Without dead ends: 421 [2021-11-23 03:30:02,915 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 124 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=395, Unknown=0, NotChecked=0, Total=462 [2021-11-23 03:30:02,915 INFO L933 BasicCegarLoop]: 62 mSDtfsCounter, 54 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:30:02,916 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 189 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:30:02,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 421 states. [2021-11-23 03:30:02,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 421 to 401. [2021-11-23 03:30:02,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 401 states, 289 states have (on average 1.2006920415224913) internal successors, (347), 314 states have internal predecessors, (347), 53 states have call successors, (53), 51 states have call predecessors, (53), 58 states have return successors, (85), 53 states have call predecessors, (85), 53 states have call successors, (85) [2021-11-23 03:30:02,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 401 states to 401 states and 485 transitions. [2021-11-23 03:30:02,969 INFO L78 Accepts]: Start accepts. Automaton has 401 states and 485 transitions. Word has length 66 [2021-11-23 03:30:02,969 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:30:02,969 INFO L470 AbstractCegarLoop]: Abstraction has 401 states and 485 transitions. [2021-11-23 03:30:02,970 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-23 03:30:02,970 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states and 485 transitions. [2021-11-23 03:30:02,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2021-11-23 03:30:02,972 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:30:02,972 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:30:03,005 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 03:30:03,192 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2021-11-23 03:30:03,192 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:30:03,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:30:03,193 INFO L85 PathProgramCache]: Analyzing trace with hash -189931057, now seen corresponding path program 2 times [2021-11-23 03:30:03,193 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:30:03,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [880191888] [2021-11-23 03:30:03,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:30:03,193 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:30:03,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:30:03,694 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 46 proven. 40 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 03:30:03,694 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:30:03,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [880191888] [2021-11-23 03:30:03,695 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [880191888] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:30:03,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [778020958] [2021-11-23 03:30:03,695 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 03:30:03,695 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:03,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:30:03,696 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:30:03,697 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 03:30:03,779 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2021-11-23 03:30:03,779 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:30:03,781 INFO L263 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 03:30:03,785 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:30:03,939 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2021-11-23 03:30:03,939 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:30:03,940 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [778020958] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:30:03,940 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:30:03,940 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [19] total 21 [2021-11-23 03:30:03,940 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1539059830] [2021-11-23 03:30:03,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:30:03,941 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:30:03,941 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:30:03,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:30:03,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=347, Unknown=0, NotChecked=0, Total=420 [2021-11-23 03:30:03,943 INFO L87 Difference]: Start difference. First operand 401 states and 485 transitions. Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-23 03:30:04,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:30:04,049 INFO L93 Difference]: Finished difference Result 583 states and 727 transitions. [2021-11-23 03:30:04,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 03:30:04,049 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 79 [2021-11-23 03:30:04,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:30:04,054 INFO L225 Difference]: With dead ends: 583 [2021-11-23 03:30:04,054 INFO L226 Difference]: Without dead ends: 422 [2021-11-23 03:30:04,055 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 134 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=78, Invalid=384, Unknown=0, NotChecked=0, Total=462 [2021-11-23 03:30:04,056 INFO L933 BasicCegarLoop]: 38 mSDtfsCounter, 38 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:30:04,057 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 105 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:30:04,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2021-11-23 03:30:04,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 414. [2021-11-23 03:30:04,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 299 states have (on average 1.1638795986622072) internal successors, (348), 322 states have internal predecessors, (348), 56 states have call successors, (56), 54 states have call predecessors, (56), 58 states have return successors, (85), 56 states have call predecessors, (85), 56 states have call successors, (85) [2021-11-23 03:30:04,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 489 transitions. [2021-11-23 03:30:04,115 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 489 transitions. Word has length 79 [2021-11-23 03:30:04,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:30:04,116 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 489 transitions. [2021-11-23 03:30:04,116 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-23 03:30:04,116 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 489 transitions. [2021-11-23 03:30:04,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2021-11-23 03:30:04,118 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:30:04,119 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:30:04,164 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 03:30:04,344 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:04,344 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:30:04,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:30:04,344 INFO L85 PathProgramCache]: Analyzing trace with hash 912202115, now seen corresponding path program 3 times [2021-11-23 03:30:04,345 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:30:04,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [71947625] [2021-11-23 03:30:04,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:30:04,345 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:30:04,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:30:04,527 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 27 proven. 48 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-11-23 03:30:04,527 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:30:04,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [71947625] [2021-11-23 03:30:04,527 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [71947625] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:30:04,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1782731330] [2021-11-23 03:30:04,528 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2021-11-23 03:30:04,528 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:04,528 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:30:04,529 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:30:04,552 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-23 03:30:04,669 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2021-11-23 03:30:04,669 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:30:04,673 INFO L263 TraceCheckSpWp]: Trace formula consists of 566 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-23 03:30:04,678 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:30:05,009 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 67 proven. 11 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 03:30:05,009 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:30:05,333 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 63 proven. 5 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-23 03:30:05,334 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1782731330] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:30:05,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1890909386] [2021-11-23 03:30:05,338 INFO L159 IcfgInterpreter]: Started Sifa with 30 locations of interest [2021-11-23 03:30:05,339 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:30:05,339 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:30:05,339 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:30:05,340 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:30:13,559 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 319 for LOIs [2021-11-23 03:30:13,621 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2021-11-23 03:30:13,818 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 03:30:13,852 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:30:19,988 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8516#(and (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (= ~methaneLevelCritical~0 0) (<= |old(~pumpRunning~0)| 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:30:19,988 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:30:19,988 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:30:19,988 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 17 [2021-11-23 03:30:19,988 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959258360] [2021-11-23 03:30:19,989 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:30:19,989 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-11-23 03:30:19,989 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:30:19,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-11-23 03:30:19,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=1281, Unknown=0, NotChecked=0, Total=1482 [2021-11-23 03:30:19,991 INFO L87 Difference]: Start difference. First operand 414 states and 489 transitions. Second operand has 17 states, 17 states have (on average 5.9411764705882355) internal successors, (101), 17 states have internal predecessors, (101), 8 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (16), 9 states have call predecessors, (16), 7 states have call successors, (16) [2021-11-23 03:30:22,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:30:22,751 INFO L93 Difference]: Finished difference Result 1808 states and 2267 transitions. [2021-11-23 03:30:22,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2021-11-23 03:30:22,754 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 5.9411764705882355) internal successors, (101), 17 states have internal predecessors, (101), 8 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (16), 9 states have call predecessors, (16), 7 states have call successors, (16) Word has length 84 [2021-11-23 03:30:22,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:30:22,765 INFO L225 Difference]: With dead ends: 1808 [2021-11-23 03:30:22,766 INFO L226 Difference]: Without dead ends: 1474 [2021-11-23 03:30:22,772 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 356 GetRequests, 259 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3356 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=1121, Invalid=8581, Unknown=0, NotChecked=0, Total=9702 [2021-11-23 03:30:22,773 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 991 mSDsluCounter, 441 mSDsCounter, 0 mSdLazyCounter, 1068 mSolverCounterSat, 629 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1000 SdHoareTripleChecker+Valid, 412 SdHoareTripleChecker+Invalid, 1697 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 629 IncrementalHoareTripleChecker+Valid, 1068 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:30:22,773 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1000 Valid, 412 Invalid, 1697 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [629 Valid, 1068 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-11-23 03:30:22,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1474 states. [2021-11-23 03:30:22,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1474 to 1167. [2021-11-23 03:30:22,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1167 states, 847 states have (on average 1.1617473435655254) internal successors, (984), 896 states have internal predecessors, (984), 160 states have call successors, (160), 156 states have call predecessors, (160), 159 states have return successors, (252), 143 states have call predecessors, (252), 160 states have call successors, (252) [2021-11-23 03:30:22,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1167 states to 1167 states and 1396 transitions. [2021-11-23 03:30:22,936 INFO L78 Accepts]: Start accepts. Automaton has 1167 states and 1396 transitions. Word has length 84 [2021-11-23 03:30:22,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:30:22,938 INFO L470 AbstractCegarLoop]: Abstraction has 1167 states and 1396 transitions. [2021-11-23 03:30:22,939 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 5.9411764705882355) internal successors, (101), 17 states have internal predecessors, (101), 8 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (16), 9 states have call predecessors, (16), 7 states have call successors, (16) [2021-11-23 03:30:22,939 INFO L276 IsEmpty]: Start isEmpty. Operand 1167 states and 1396 transitions. [2021-11-23 03:30:22,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2021-11-23 03:30:22,943 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:30:22,944 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:30:22,992 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-23 03:30:23,168 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 03:30:23,168 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:30:23,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:30:23,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1539431954, now seen corresponding path program 2 times [2021-11-23 03:30:23,169 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:30:23,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [614785720] [2021-11-23 03:30:23,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:30:23,169 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:30:23,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:30:23,592 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 46 proven. 44 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-23 03:30:23,592 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:30:23,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [614785720] [2021-11-23 03:30:23,593 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [614785720] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:30:23,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1471011997] [2021-11-23 03:30:23,593 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 03:30:23,593 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:23,593 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:30:23,594 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:30:23,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2021-11-23 03:30:23,699 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2021-11-23 03:30:23,700 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:30:23,702 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 19 conjunts are in the unsatisfiable core [2021-11-23 03:30:23,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:30:23,951 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 56 proven. 5 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2021-11-23 03:30:23,952 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:30:24,332 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 50 proven. 5 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2021-11-23 03:30:24,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1471011997] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:30:24,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2072794238] [2021-11-23 03:30:24,335 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2021-11-23 03:30:24,335 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:30:24,335 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:30:24,336 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:30:24,336 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:30:33,213 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 317 for LOIs [2021-11-23 03:30:33,271 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 42 for LOIs [2021-11-23 03:30:33,504 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2021-11-23 03:30:33,706 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2021-11-23 03:30:33,710 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:30:41,144 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14100#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:30:41,144 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:30:41,144 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:30:41,144 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 7, 7] total 24 [2021-11-23 03:30:41,145 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2094869397] [2021-11-23 03:30:41,145 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:30:41,146 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-23 03:30:41,146 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:30:41,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-23 03:30:41,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=2021, Unknown=0, NotChecked=0, Total=2256 [2021-11-23 03:30:41,148 INFO L87 Difference]: Start difference. First operand 1167 states and 1396 transitions. Second operand has 24 states, 23 states have (on average 4.956521739130435) internal successors, (114), 22 states have internal predecessors, (114), 10 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (16), 9 states have call predecessors, (16), 9 states have call successors, (16) [2021-11-23 03:30:45,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:30:45,842 INFO L93 Difference]: Finished difference Result 2779 states and 3644 transitions. [2021-11-23 03:30:45,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 83 states. [2021-11-23 03:30:45,842 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 4.956521739130435) internal successors, (114), 22 states have internal predecessors, (114), 10 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (16), 9 states have call predecessors, (16), 9 states have call successors, (16) Word has length 87 [2021-11-23 03:30:45,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:30:45,845 INFO L225 Difference]: With dead ends: 2779 [2021-11-23 03:30:45,845 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:30:45,860 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 399 GetRequests, 266 SyntacticMatches, 11 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5913 ImplicationChecksByTransitivity, 10.5s TimeCoverageRelationStatistics Valid=1820, Invalid=13432, Unknown=0, NotChecked=0, Total=15252 [2021-11-23 03:30:45,861 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 1218 mSDsluCounter, 883 mSDsCounter, 0 mSdLazyCounter, 2030 mSolverCounterSat, 1001 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1221 SdHoareTripleChecker+Valid, 763 SdHoareTripleChecker+Invalid, 3031 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1001 IncrementalHoareTripleChecker+Valid, 2030 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-11-23 03:30:45,862 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1221 Valid, 763 Invalid, 3031 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1001 Valid, 2030 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-11-23 03:30:45,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:30:45,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:30:45,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:30:45,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:30:45,864 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2021-11-23 03:30:45,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:30:45,864 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:30:45,864 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 4.956521739130435) internal successors, (114), 22 states have internal predecessors, (114), 10 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (16), 9 states have call predecessors, (16), 9 states have call successors, (16) [2021-11-23 03:30:45,865 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:30:45,865 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:30:45,868 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:30:45,907 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2021-11-23 03:30:46,084 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:30:46,086 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:31:07,639 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2021-11-23 03:31:07,639 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2021-11-23 03:31:07,640 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: (let ((.cse6 (= |old(~methaneLevelCritical~0)| 0)) (.cse4 (= ~pumpRunning~0 1)) (.cse8 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse8)) (.cse0 (and .cse6 (not .cse4))) (.cse1 (not (<= 2 ~waterLevel~0))) (.cse7 (not .cse6)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= ~waterLevel~0 1)) .cse5 .cse6 .cse2 .cse3) (or .cse0 .cse7 .cse8 .cse1 .cse3) (or .cse7 .cse5 .cse8 .cse3)))) [2021-11-23 03:31:07,640 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2021-11-23 03:31:07,640 INFO L854 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:31:07,640 INFO L854 garLoopResultBuilder]: At program point L449(line 449) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:31:07,640 INFO L854 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:31:07,640 INFO L854 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse9 (= |old(~pumpRunning~0)| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 1)) (.cse6 (and .cse10 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) (not .cse2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and .cse10 .cse5)) (.cse0 (not .cse9)) (.cse8 (and .cse4 (not (= |old(~pumpRunning~0)| 1))))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and (or (not .cse4) .cse3) .cse5) .cse6 .cse2 .cse7) (or .cse8 .cse9 .cse6 .cse2 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse0 .cse10 .cse8 .cse2)))) [2021-11-23 03:31:07,641 INFO L854 garLoopResultBuilder]: At program point L718-1(lines 718 724) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse9 (= |old(~pumpRunning~0)| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 1)) (.cse6 (and .cse10 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) (not .cse2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and .cse10 .cse5)) (.cse0 (not .cse9)) (.cse8 (and .cse4 (not (= |old(~pumpRunning~0)| 1))))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and (or (not .cse4) .cse3) .cse5) .cse6 .cse2 .cse7) (or .cse8 .cse9 .cse6 .cse2 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse0 .cse10 .cse8 .cse2)))) [2021-11-23 03:31:07,641 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2021-11-23 03:31:07,641 INFO L854 garLoopResultBuilder]: At program point L773(lines 773 781) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2021-11-23 03:31:07,641 INFO L854 garLoopResultBuilder]: At program point L769(lines 769 786) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or .cse0 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:31:07,641 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-11-23 03:31:07,642 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2021-11-23 03:31:07,642 INFO L854 garLoopResultBuilder]: At program point L427(lines 427 440) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0))) (let ((.cse6 (and .cse1 .cse0 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0))) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse3) .cse4) (or (and .cse5 (not (= |old(~pumpRunning~0)| 1))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse6 .cse4 .cse7) (or .cse6 (and .cse1 (or (not .cse5) (= ~pumpRunning~0 1)) .cse3) .cse4 .cse7)))) [2021-11-23 03:31:07,642 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2021-11-23 03:31:07,642 INFO L854 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| ~waterLevel~0)) (.cse0 (not .cse9)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (and .cse1 .cse0 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) (not .cse4))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (and .cse6 (not (= |old(~pumpRunning~0)| 1))))) (and (or .cse0 (and .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse3) .cse4) (or .cse5 (and .cse1 (or (not .cse6) (= ~pumpRunning~0 1)) .cse3) .cse4 .cse7) (or .cse5 .cse8 .cse9 .cse4 .cse7) (or .cse0 .cse2 .cse8 .cse4))))) [2021-11-23 03:31:07,642 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 449) no Hoare annotation was computed. [2021-11-23 03:31:07,642 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 566 595) no Hoare annotation was computed. [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point L576-2(lines 576 590) the Hoare annotation is: true [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 566 595) the Hoare annotation is: true [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point L572(line 572) the Hoare annotation is: true [2021-11-23 03:31:07,643 INFO L858 garLoopResultBuilder]: For program point L572-1(line 572) no Hoare annotation was computed. [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point L591(lines 566 595) the Hoare annotation is: true [2021-11-23 03:31:07,643 INFO L858 garLoopResultBuilder]: For program point L587(line 587) no Hoare annotation was computed. [2021-11-23 03:31:07,643 INFO L858 garLoopResultBuilder]: For program point L580(lines 580 584) no Hoare annotation was computed. [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point L580-1(lines 580 584) the Hoare annotation is: true [2021-11-23 03:31:07,643 INFO L854 garLoopResultBuilder]: At program point L985(lines 936 986) the Hoare annotation is: false [2021-11-23 03:31:07,643 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:31:07,644 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2021-11-23 03:31:07,644 INFO L854 garLoopResultBuilder]: At program point L957-1(lines 957 963) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1))) [2021-11-23 03:31:07,644 INFO L854 garLoopResultBuilder]: At program point L982(lines 937 984) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) (<= 2 ~waterLevel~0) .cse0 .cse1))) [2021-11-23 03:31:07,644 INFO L854 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) (<= 2 ~waterLevel~0) .cse0 .cse1))) [2021-11-23 03:31:07,644 INFO L854 garLoopResultBuilder]: At program point L652(lines 652 659) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-23 03:31:07,644 INFO L861 garLoopResultBuilder]: At program point L652-2(lines 652 659) the Hoare annotation is: true [2021-11-23 03:31:07,645 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:31:07,645 INFO L854 garLoopResultBuilder]: At program point L975-2(lines 967 980) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1))) [2021-11-23 03:31:07,645 INFO L858 garLoopResultBuilder]: For program point L938(lines 937 984) no Hoare annotation was computed. [2021-11-23 03:31:07,645 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (or (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 1)) (<= 2 ~waterLevel~0) .cse0 .cse1))) [2021-11-23 03:31:07,645 INFO L861 garLoopResultBuilder]: At program point L988(lines 927 992) the Hoare annotation is: true [2021-11-23 03:31:07,645 INFO L858 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2021-11-23 03:31:07,646 INFO L858 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2021-11-23 03:31:07,646 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2021-11-23 03:31:07,646 INFO L854 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2021-11-23 03:31:07,646 INFO L858 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2021-11-23 03:31:07,646 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2021-11-23 03:31:07,646 INFO L854 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (<= ~waterLevel~0 1)) (= 0 ~systemActive~0)) [2021-11-23 03:31:07,647 INFO L854 garLoopResultBuilder]: At program point L747(lines 747 755) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (not (<= ~waterLevel~0 1)) .cse1) (or .cse0 (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1) (< ~waterLevel~0 2))) .cse1))) [2021-11-23 03:31:07,647 INFO L854 garLoopResultBuilder]: At program point L743(lines 743 760) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2021-11-23 03:31:07,647 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2021-11-23 03:31:07,647 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~methaneLevelCritical~0 0) (not (= ~pumpRunning~0 1))) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2021-11-23 03:31:07,650 INFO L732 BasicCegarLoop]: Path program histogram: [3, 2, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:07,651 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:31:07,696 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:31:07 BoogieIcfgContainer [2021-11-23 03:31:07,696 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:31:07,697 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:31:07,697 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:31:07,697 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:31:07,698 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:29:44" (3/4) ... [2021-11-23 03:31:07,701 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:31:07,713 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:31:07,713 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:31:07,713 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:31:07,713 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:31:07,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:31:07,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:31:07,740 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 80 nodes and edges [2021-11-23 03:31:07,741 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2021-11-23 03:31:07,742 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 03:31:07,743 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:31:07,743 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:31:07,744 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:31:07,745 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:31:07,782 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2021-11-23 03:31:07,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || pumpRunning == 1) && (((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || \old(pumpRunning) == 0) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) [2021-11-23 03:31:07,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || \old(waterLevel) == waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-11-23 03:31:07,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || pumpRunning == 1) && (((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || \old(pumpRunning) == 0) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) [2021-11-23 03:31:07,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive [2021-11-23 03:31:07,786 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((tmp == waterLevel && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) || ((tmp == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-11-23 03:31:07,786 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || ((tmp == waterLevel && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive)) || ((tmp == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive)) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || \old(pumpRunning) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) [2021-11-23 03:31:07,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || 0 == systemActive) && (0 == systemActive || !(2 <= \old(waterLevel))) [2021-11-23 03:31:07,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 1 <= tmp) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (!(\old(pumpRunning) == 0) || 0 == systemActive) [2021-11-23 03:31:07,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || tmp == 0) || !(waterLevel <= 1)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (tmp == 1 || waterLevel < 2))) || 0 == systemActive) [2021-11-23 03:31:07,822 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:31:07,822 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:31:07,823 INFO L158 Benchmark]: Toolchain (without parser) took 85047.68ms. Allocated memory was 109.1MB in the beginning and 847.2MB in the end (delta: 738.2MB). Free memory was 68.7MB in the beginning and 703.4MB in the end (delta: -634.7MB). Peak memory consumption was 102.5MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,823 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 109.1MB. Free memory is still 85.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:31:07,823 INFO L158 Benchmark]: CACSL2BoogieTranslator took 651.83ms. Allocated memory is still 109.1MB. Free memory was 68.5MB in the beginning and 76.0MB in the end (delta: -7.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,829 INFO L158 Benchmark]: Boogie Procedure Inliner took 86.75ms. Allocated memory is still 109.1MB. Free memory was 76.0MB in the beginning and 73.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,829 INFO L158 Benchmark]: Boogie Preprocessor took 44.79ms. Allocated memory is still 109.1MB. Free memory was 73.6MB in the beginning and 71.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,830 INFO L158 Benchmark]: RCFGBuilder took 648.60ms. Allocated memory is still 109.1MB. Free memory was 71.9MB in the beginning and 49.4MB in the end (delta: 22.4MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,830 INFO L158 Benchmark]: TraceAbstraction took 83482.98ms. Allocated memory was 109.1MB in the beginning and 847.2MB in the end (delta: 738.2MB). Free memory was 48.8MB in the beginning and 709.7MB in the end (delta: -660.9MB). Peak memory consumption was 494.9MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,831 INFO L158 Benchmark]: Witness Printer took 125.11ms. Allocated memory is still 847.2MB. Free memory was 709.7MB in the beginning and 703.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 03:31:07,834 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 109.1MB. Free memory is still 85.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 651.83ms. Allocated memory is still 109.1MB. Free memory was 68.5MB in the beginning and 76.0MB in the end (delta: -7.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 86.75ms. Allocated memory is still 109.1MB. Free memory was 76.0MB in the beginning and 73.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.79ms. Allocated memory is still 109.1MB. Free memory was 73.6MB in the beginning and 71.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 648.60ms. Allocated memory is still 109.1MB. Free memory was 71.9MB in the beginning and 49.4MB in the end (delta: 22.4MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 83482.98ms. Allocated memory was 109.1MB in the beginning and 847.2MB in the end (delta: 738.2MB). Free memory was 48.8MB in the beginning and 709.7MB in the end (delta: -660.9MB). Peak memory consumption was 494.9MB. Max. memory is 16.1GB. * Witness Printer took 125.11ms. Allocated memory is still 847.2MB. Free memory was 709.7MB in the beginning and 703.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 449]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 83.4s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.0s, AutomataDifference: 11.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 21.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3450 SdHoareTripleChecker+Valid, 4.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3419 mSDsluCounter, 2592 SdHoareTripleChecker+Invalid, 3.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2584 mSDsCounter, 2306 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5005 IncrementalHoareTripleChecker+Invalid, 7311 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2306 mSolverCounterUnsat, 625 mSDtfsCounter, 5005 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1212 GetRequests, 820 SyntacticMatches, 11 SemanticMatches, 381 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12332 ImplicationChecksByTransitivity, 24.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1167occurred in iteration=10, InterpolantAutomatonStates: 252, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 578 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 33 LocationsWithAnnotation, 3108 PreInvPairs, 4539 NumberOfFragments, 1047 HoareAnnotationTreeSize, 3108 FomulaSimplifications, 237541 FormulaSimplificationTreeSizeReduction, 11.0s HoareSimplificationTime, 33 FomulaSimplificationsInter, 178063 FormulaSimplificationTreeSizeReductionInter, 10.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 5.1s InterpolantComputationTime, 888 NumberOfCodeBlocks, 787 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 1081 ConstructedInterpolants, 0 QuantifiedInterpolants, 4664 SizeOfPredicates, 53 NumberOfNonLiveVariables, 2543 ConjunctsInSsa, 120 ConjunctsInUnsatCore, 20 InterpolantComputations, 8 PerfectInterpolantSequences, 719/953 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || ((tmp == waterLevel && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive)) || ((tmp == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive)) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || \old(pumpRunning) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 1 <= tmp) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (!(\old(pumpRunning) == 0) || 0 == systemActive) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || pumpRunning == 1) && (((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || \old(pumpRunning) == 0) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 743]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((2 <= waterLevel && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 652]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || pumpRunning == 1) && (((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || \old(pumpRunning) == 0) || ((((pumpRunning == 0 && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (methaneLevelCritical == 0 && !(\old(pumpRunning) == 1))) || 0 == systemActive) - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || \old(waterLevel) == waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || 0 == systemActive) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 652]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || tmp == 0) || !(waterLevel <= 1)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (tmp == 1 || waterLevel < 2))) || 0 == systemActive) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((tmp == waterLevel && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((methaneLevelCritical == 0 && !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((tmp == waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) || ((tmp == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-11-23 03:31:07,928 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ad0a1bf-2345-42f2-9185-c11e4984a7d9/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE