./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68cd47586ea836a40d34f69dc7bca714ffc0af5c5bf2f7fbd8cfbbd6f1019685 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:33:05,199 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:33:05,201 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:33:05,250 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:33:05,251 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:33:05,255 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:33:05,257 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:33:05,262 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:33:05,264 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:33:05,272 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:33:05,273 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:33:05,275 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:33:05,275 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:33:05,279 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:33:05,282 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:33:05,290 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:33:05,293 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:33:05,294 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:33:05,297 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:33:05,305 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:33:05,308 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:33:05,309 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:33:05,313 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:33:05,315 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:33:05,322 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:33:05,323 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:33:05,323 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:33:05,326 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:33:05,326 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:33:05,328 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:33:05,329 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:33:05,330 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:33:05,332 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:33:05,334 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:33:05,336 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:33:05,336 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:33:05,337 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:33:05,337 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:33:05,337 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:33:05,339 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:33:05,339 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:33:05,340 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:33:05,386 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:33:05,387 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:33:05,387 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:33:05,387 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:33:05,388 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:33:05,388 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:33:05,389 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:33:05,389 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:33:05,389 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:33:05,389 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:33:05,390 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:33:05,390 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:33:05,390 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:33:05,390 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:33:05,391 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:33:05,391 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:33:05,391 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:33:05,391 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:33:05,392 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:33:05,393 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:33:05,393 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:33:05,393 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:33:05,393 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:33:05,394 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:33:05,394 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:33:05,394 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:33:05,394 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:33:05,395 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:33:05,395 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:33:05,395 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:33:05,395 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:33:05,396 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:33:05,396 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:33:05,396 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:33:05,396 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:33:05,397 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:33:05,397 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:33:05,397 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:33:05,397 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:33:05,398 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:33:05,398 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:33:05,398 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68cd47586ea836a40d34f69dc7bca714ffc0af5c5bf2f7fbd8cfbbd6f1019685 [2021-11-23 03:33:05,654 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:33:05,680 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:33:05,683 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:33:05,684 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:33:05,686 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:33:05,688 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c [2021-11-23 03:33:05,767 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/data/64149cf65/56394400f9a7452c969fc2d41643e9ef/FLAGa59eed326 [2021-11-23 03:33:06,346 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:33:06,347 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c [2021-11-23 03:33:06,363 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/data/64149cf65/56394400f9a7452c969fc2d41643e9ef/FLAGa59eed326 [2021-11-23 03:33:06,630 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/data/64149cf65/56394400f9a7452c969fc2d41643e9ef [2021-11-23 03:33:06,633 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:33:06,636 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:33:06,639 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:33:06,639 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:33:06,644 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:33:06,645 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:33:06" (1/1) ... [2021-11-23 03:33:06,646 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@705bf4bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:06, skipping insertion in model container [2021-11-23 03:33:06,649 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:33:06" (1/1) ... [2021-11-23 03:33:06,657 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:33:06,732 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:33:07,015 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c[9171,9184] [2021-11-23 03:33:07,079 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:33:07,091 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:33:07,145 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c[9171,9184] [2021-11-23 03:33:07,184 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:33:07,207 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:33:07,208 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07 WrapperNode [2021-11-23 03:33:07,208 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:33:07,209 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:33:07,210 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:33:07,210 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:33:07,219 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,236 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,270 INFO L137 Inliner]: procedures = 57, calls = 158, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 283 [2021-11-23 03:33:07,271 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:33:07,271 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:33:07,272 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:33:07,272 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:33:07,281 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,285 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,288 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,296 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,320 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,326 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,328 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,331 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:33:07,340 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:33:07,340 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:33:07,341 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:33:07,342 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (1/1) ... [2021-11-23 03:33:07,354 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:33:07,367 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:07,386 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:33:07,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:33:07,439 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:33:07,440 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:33:07,440 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:33:07,440 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:33:07,441 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:33:07,441 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:33:07,441 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:33:07,441 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:33:07,441 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:33:07,442 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:33:07,442 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:33:07,442 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-23 03:33:07,442 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-23 03:33:07,442 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:33:07,442 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:33:07,443 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:33:07,443 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:33:07,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:33:07,566 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:33:07,568 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:33:07,973 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:33:08,080 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:33:08,080 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:33:08,083 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:08 BoogieIcfgContainer [2021-11-23 03:33:08,084 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:33:08,085 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:33:08,086 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:33:08,089 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:33:08,090 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:33:06" (1/3) ... [2021-11-23 03:33:08,091 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44f73f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:33:08, skipping insertion in model container [2021-11-23 03:33:08,091 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:07" (2/3) ... [2021-11-23 03:33:08,091 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44f73f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:33:08, skipping insertion in model container [2021-11-23 03:33:08,092 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:08" (3/3) ... [2021-11-23 03:33:08,093 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product59.cil.c [2021-11-23 03:33:08,099 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:33:08,099 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:33:08,151 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:33:08,159 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:33:08,160 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:33:08,179 INFO L276 IsEmpty]: Start isEmpty. Operand has 59 states, 38 states have (on average 1.4736842105263157) internal successors, (56), 47 states have internal predecessors, (56), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-23 03:33:08,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-23 03:33:08,186 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:08,186 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:08,187 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:08,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:08,193 INFO L85 PathProgramCache]: Analyzing trace with hash 1369029533, now seen corresponding path program 1 times [2021-11-23 03:33:08,203 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:08,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [817779254] [2021-11-23 03:33:08,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:08,205 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:08,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:08,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:08,432 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:08,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [817779254] [2021-11-23 03:33:08,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [817779254] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:08,433 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:08,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:33:08,435 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1509644460] [2021-11-23 03:33:08,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:08,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:33:08,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:08,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:33:08,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:33:08,500 INFO L87 Difference]: Start difference. First operand has 59 states, 38 states have (on average 1.4736842105263157) internal successors, (56), 47 states have internal predecessors, (56), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:08,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:08,628 INFO L93 Difference]: Finished difference Result 116 states and 161 transitions. [2021-11-23 03:33:08,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:33:08,631 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-23 03:33:08,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:08,644 INFO L225 Difference]: With dead ends: 116 [2021-11-23 03:33:08,644 INFO L226 Difference]: Without dead ends: 54 [2021-11-23 03:33:08,650 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:33:08,656 INFO L933 BasicCegarLoop]: 60 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:08,658 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 60 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:33:08,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2021-11-23 03:33:08,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2021-11-23 03:33:08,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 35 states have (on average 1.3714285714285714) internal successors, (48), 43 states have internal predecessors, (48), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-23 03:33:08,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2021-11-23 03:33:08,718 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 12 [2021-11-23 03:33:08,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:08,719 INFO L470 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2021-11-23 03:33:08,719 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:08,719 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2021-11-23 03:33:08,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-23 03:33:08,721 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:08,722 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:08,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:33:08,722 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:08,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:08,724 INFO L85 PathProgramCache]: Analyzing trace with hash -410986028, now seen corresponding path program 1 times [2021-11-23 03:33:08,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:08,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1300097467] [2021-11-23 03:33:08,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:08,725 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:08,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:08,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:08,839 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:08,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1300097467] [2021-11-23 03:33:08,839 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1300097467] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:08,839 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:08,840 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:33:08,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388579529] [2021-11-23 03:33:08,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:08,842 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:33:08,842 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:08,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:33:08,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:33:08,844 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:08,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:08,924 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2021-11-23 03:33:08,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:33:08,925 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-23 03:33:08,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:08,927 INFO L225 Difference]: With dead ends: 80 [2021-11-23 03:33:08,927 INFO L226 Difference]: Without dead ends: 46 [2021-11-23 03:33:08,931 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:33:08,933 INFO L933 BasicCegarLoop]: 46 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:08,934 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [18 Valid, 75 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:33:08,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2021-11-23 03:33:08,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2021-11-23 03:33:08,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.4) internal successors, (42), 38 states have internal predecessors, (42), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:33:08,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 60 transitions. [2021-11-23 03:33:08,945 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 60 transitions. Word has length 13 [2021-11-23 03:33:08,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:08,945 INFO L470 AbstractCegarLoop]: Abstraction has 46 states and 60 transitions. [2021-11-23 03:33:08,946 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:08,946 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 60 transitions. [2021-11-23 03:33:08,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2021-11-23 03:33:08,950 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:08,951 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:08,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:33:08,951 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:08,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:08,952 INFO L85 PathProgramCache]: Analyzing trace with hash -1528647160, now seen corresponding path program 1 times [2021-11-23 03:33:08,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:08,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687400360] [2021-11-23 03:33:08,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:08,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:09,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:09,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:09,081 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:09,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687400360] [2021-11-23 03:33:09,082 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687400360] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:09,082 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:09,082 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:33:09,083 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634556136] [2021-11-23 03:33:09,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:09,083 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:33:09,084 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:09,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:33:09,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:33:09,085 INFO L87 Difference]: Start difference. First operand 46 states and 60 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:09,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:09,308 INFO L93 Difference]: Finished difference Result 133 states and 180 transitions. [2021-11-23 03:33:09,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 03:33:09,308 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2021-11-23 03:33:09,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:09,311 INFO L225 Difference]: With dead ends: 133 [2021-11-23 03:33:09,311 INFO L226 Difference]: Without dead ends: 89 [2021-11-23 03:33:09,312 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 03:33:09,314 INFO L933 BasicCegarLoop]: 54 mSDtfsCounter, 74 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:09,315 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 126 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:33:09,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-11-23 03:33:09,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 72. [2021-11-23 03:33:09,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 48 states have (on average 1.3958333333333333) internal successors, (67), 59 states have internal predecessors, (67), 13 states have call successors, (13), 10 states have call predecessors, (13), 10 states have return successors, (14), 9 states have call predecessors, (14), 13 states have call successors, (14) [2021-11-23 03:33:09,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 94 transitions. [2021-11-23 03:33:09,335 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 94 transitions. Word has length 16 [2021-11-23 03:33:09,335 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:09,336 INFO L470 AbstractCegarLoop]: Abstraction has 72 states and 94 transitions. [2021-11-23 03:33:09,336 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:09,336 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 94 transitions. [2021-11-23 03:33:09,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-11-23 03:33:09,338 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:09,338 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:09,338 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:33:09,338 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:09,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:09,339 INFO L85 PathProgramCache]: Analyzing trace with hash 1293336084, now seen corresponding path program 1 times [2021-11-23 03:33:09,339 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:09,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502075161] [2021-11-23 03:33:09,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:09,340 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:09,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:09,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:09,463 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:09,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502075161] [2021-11-23 03:33:09,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502075161] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:09,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:09,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 03:33:09,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [589940391] [2021-11-23 03:33:09,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:09,465 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 03:33:09,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:09,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 03:33:09,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-23 03:33:09,467 INFO L87 Difference]: Start difference. First operand 72 states and 94 transitions. Second operand has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:09,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:09,702 INFO L93 Difference]: Finished difference Result 239 states and 319 transitions. [2021-11-23 03:33:09,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 03:33:09,703 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-11-23 03:33:09,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:09,715 INFO L225 Difference]: With dead ends: 239 [2021-11-23 03:33:09,715 INFO L226 Difference]: Without dead ends: 169 [2021-11-23 03:33:09,718 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:33:09,720 INFO L933 BasicCegarLoop]: 54 mSDtfsCounter, 70 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:09,721 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 198 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:33:09,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2021-11-23 03:33:09,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 142. [2021-11-23 03:33:09,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 100 states have (on average 1.33) internal successors, (133), 115 states have internal predecessors, (133), 21 states have call successors, (21), 18 states have call predecessors, (21), 20 states have return successors, (26), 19 states have call predecessors, (26), 21 states have call successors, (26) [2021-11-23 03:33:09,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 180 transitions. [2021-11-23 03:33:09,780 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 180 transitions. Word has length 19 [2021-11-23 03:33:09,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:09,781 INFO L470 AbstractCegarLoop]: Abstraction has 142 states and 180 transitions. [2021-11-23 03:33:09,781 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:09,781 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 180 transitions. [2021-11-23 03:33:09,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2021-11-23 03:33:09,783 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:09,783 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:09,784 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:33:09,784 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:09,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:09,790 INFO L85 PathProgramCache]: Analyzing trace with hash -1362301905, now seen corresponding path program 1 times [2021-11-23 03:33:09,790 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:09,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [500273932] [2021-11-23 03:33:09,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:09,791 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:09,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:09,965 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:09,965 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:09,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [500273932] [2021-11-23 03:33:09,965 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [500273932] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:09,966 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:09,966 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:33:09,966 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765486177] [2021-11-23 03:33:09,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:09,969 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:33:09,969 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:09,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:33:09,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:33:09,973 INFO L87 Difference]: Start difference. First operand 142 states and 180 transitions. Second operand has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 03:33:10,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:10,524 INFO L93 Difference]: Finished difference Result 339 states and 450 transitions. [2021-11-23 03:33:10,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 03:33:10,526 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 22 [2021-11-23 03:33:10,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:10,530 INFO L225 Difference]: With dead ends: 339 [2021-11-23 03:33:10,531 INFO L226 Difference]: Without dead ends: 269 [2021-11-23 03:33:10,532 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-23 03:33:10,534 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 214 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 380 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:10,534 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [225 Valid, 283 Invalid, 380 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:33:10,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2021-11-23 03:33:10,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 236. [2021-11-23 03:33:10,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 165 states have (on average 1.3151515151515152) internal successors, (217), 190 states have internal predecessors, (217), 36 states have call successors, (36), 30 states have call predecessors, (36), 34 states have return successors, (45), 33 states have call predecessors, (45), 36 states have call successors, (45) [2021-11-23 03:33:10,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 298 transitions. [2021-11-23 03:33:10,596 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 298 transitions. Word has length 22 [2021-11-23 03:33:10,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:10,597 INFO L470 AbstractCegarLoop]: Abstraction has 236 states and 298 transitions. [2021-11-23 03:33:10,597 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 03:33:10,597 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 298 transitions. [2021-11-23 03:33:10,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-23 03:33:10,602 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:10,602 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:10,602 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:33:10,608 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:10,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:10,609 INFO L85 PathProgramCache]: Analyzing trace with hash -1233148096, now seen corresponding path program 1 times [2021-11-23 03:33:10,609 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:10,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2054601815] [2021-11-23 03:33:10,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:10,610 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:10,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:10,777 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:10,777 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:10,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2054601815] [2021-11-23 03:33:10,777 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2054601815] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:10,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1441075627] [2021-11-23 03:33:10,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:10,779 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:10,779 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:10,787 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:10,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:33:10,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:10,936 INFO L263 TraceCheckSpWp]: Trace formula consists of 381 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-23 03:33:10,942 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:11,366 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:11,366 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:33:11,367 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1441075627] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:11,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:33:11,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 14 [2021-11-23 03:33:11,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [568887051] [2021-11-23 03:33:11,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:11,369 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:33:11,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:11,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:33:11,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2021-11-23 03:33:11,371 INFO L87 Difference]: Start difference. First operand 236 states and 298 transitions. Second operand has 8 states, 8 states have (on average 4.5) internal successors, (36), 8 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:33:11,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:11,925 INFO L93 Difference]: Finished difference Result 579 states and 768 transitions. [2021-11-23 03:33:11,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 03:33:11,926 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 8 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2021-11-23 03:33:11,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:11,938 INFO L225 Difference]: With dead ends: 579 [2021-11-23 03:33:11,938 INFO L226 Difference]: Without dead ends: 394 [2021-11-23 03:33:11,946 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 66 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2021-11-23 03:33:11,952 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 142 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 414 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:11,955 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [147 Valid, 276 Invalid, 414 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:33:11,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2021-11-23 03:33:12,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 356. [2021-11-23 03:33:12,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 254 states have (on average 1.3346456692913387) internal successors, (339), 285 states have internal predecessors, (339), 51 states have call successors, (51), 44 states have call predecessors, (51), 50 states have return successors, (77), 47 states have call predecessors, (77), 51 states have call successors, (77) [2021-11-23 03:33:12,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 467 transitions. [2021-11-23 03:33:12,041 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 467 transitions. Word has length 41 [2021-11-23 03:33:12,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:12,043 INFO L470 AbstractCegarLoop]: Abstraction has 356 states and 467 transitions. [2021-11-23 03:33:12,045 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 8 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:33:12,045 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 467 transitions. [2021-11-23 03:33:12,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-11-23 03:33:12,058 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:12,058 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:12,098 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:12,274 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:12,275 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:12,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:12,275 INFO L85 PathProgramCache]: Analyzing trace with hash 1205444078, now seen corresponding path program 1 times [2021-11-23 03:33:12,275 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:12,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967597341] [2021-11-23 03:33:12,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:12,276 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:12,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:12,321 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:12,321 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:12,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967597341] [2021-11-23 03:33:12,322 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967597341] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:12,322 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:12,322 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 03:33:12,322 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433546861] [2021-11-23 03:33:12,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:12,323 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:33:12,323 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:12,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:33:12,324 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:33:12,324 INFO L87 Difference]: Start difference. First operand 356 states and 467 transitions. Second operand has 4 states, 3 states have (on average 13.666666666666666) internal successors, (41), 4 states have internal predecessors, (41), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:33:12,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:12,450 INFO L93 Difference]: Finished difference Result 724 states and 946 transitions. [2021-11-23 03:33:12,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 03:33:12,451 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 13.666666666666666) internal successors, (41), 4 states have internal predecessors, (41), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 50 [2021-11-23 03:33:12,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:12,456 INFO L225 Difference]: With dead ends: 724 [2021-11-23 03:33:12,456 INFO L226 Difference]: Without dead ends: 297 [2021-11-23 03:33:12,458 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:33:12,460 INFO L933 BasicCegarLoop]: 69 mSDtfsCounter, 84 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:12,461 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 112 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:33:12,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2021-11-23 03:33:12,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 265. [2021-11-23 03:33:12,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 185 states have (on average 1.3027027027027027) internal successors, (241), 209 states have internal predecessors, (241), 40 states have call successors, (40), 33 states have call predecessors, (40), 39 states have return successors, (57), 36 states have call predecessors, (57), 40 states have call successors, (57) [2021-11-23 03:33:12,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 338 transitions. [2021-11-23 03:33:12,505 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 338 transitions. Word has length 50 [2021-11-23 03:33:12,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:12,507 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 338 transitions. [2021-11-23 03:33:12,507 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 13.666666666666666) internal successors, (41), 4 states have internal predecessors, (41), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:33:12,507 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 338 transitions. [2021-11-23 03:33:12,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-23 03:33:12,509 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:12,509 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:12,510 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 03:33:12,513 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:12,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:12,513 INFO L85 PathProgramCache]: Analyzing trace with hash -1847334260, now seen corresponding path program 1 times [2021-11-23 03:33:12,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:12,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60297082] [2021-11-23 03:33:12,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:12,514 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:12,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:12,759 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:33:12,759 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:12,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60297082] [2021-11-23 03:33:12,761 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60297082] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:12,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1948670836] [2021-11-23 03:33:12,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:12,762 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:12,763 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:12,767 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:12,790 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:33:12,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:12,875 INFO L263 TraceCheckSpWp]: Trace formula consists of 404 conjuncts, 28 conjunts are in the unsatisfiable core [2021-11-23 03:33:12,878 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:13,174 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 03:33:13,174 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:33:13,749 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 03:33:13,749 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1948670836] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:33:13,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1663290344] [2021-11-23 03:33:13,771 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2021-11-23 03:33:13,772 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:33:13,781 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:33:13,786 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:33:13,786 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:33:19,546 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 45 for LOIs [2021-11-23 03:33:19,552 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2021-11-23 03:33:19,803 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 03:33:19,844 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 30 for LOIs [2021-11-23 03:33:19,848 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:33:23,523 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5731#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (<= 0 |old(~pumpRunning~0)|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:33:23,524 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:33:23,524 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:33:23,524 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 11] total 28 [2021-11-23 03:33:23,524 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [921288185] [2021-11-23 03:33:23,524 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:33:23,525 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-11-23 03:33:23,525 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:23,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-11-23 03:33:23,527 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=2558, Unknown=0, NotChecked=0, Total=2862 [2021-11-23 03:33:23,528 INFO L87 Difference]: Start difference. First operand 265 states and 338 transitions. Second operand has 28 states, 25 states have (on average 3.72) internal successors, (93), 25 states have internal predecessors, (93), 12 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (12), 10 states have call predecessors, (12), 11 states have call successors, (12) [2021-11-23 03:33:26,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:26,267 INFO L93 Difference]: Finished difference Result 813 states and 1098 transitions. [2021-11-23 03:33:26,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2021-11-23 03:33:26,268 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 25 states have (on average 3.72) internal successors, (93), 25 states have internal predecessors, (93), 12 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (12), 10 states have call predecessors, (12), 11 states have call successors, (12) Word has length 47 [2021-11-23 03:33:26,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:26,274 INFO L225 Difference]: With dead ends: 813 [2021-11-23 03:33:26,275 INFO L226 Difference]: Without dead ends: 592 [2021-11-23 03:33:26,280 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3342 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=1193, Invalid=8119, Unknown=0, NotChecked=0, Total=9312 [2021-11-23 03:33:26,281 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 929 mSDsluCounter, 844 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 544 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 935 SdHoareTripleChecker+Valid, 820 SdHoareTripleChecker+Invalid, 1893 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 544 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:26,282 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [935 Valid, 820 Invalid, 1893 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [544 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-23 03:33:26,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2021-11-23 03:33:26,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 480. [2021-11-23 03:33:26,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 343 states have (on average 1.2478134110787171) internal successors, (428), 376 states have internal predecessors, (428), 67 states have call successors, (67), 59 states have call predecessors, (67), 69 states have return successors, (95), 66 states have call predecessors, (95), 67 states have call successors, (95) [2021-11-23 03:33:26,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 590 transitions. [2021-11-23 03:33:26,355 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 590 transitions. Word has length 47 [2021-11-23 03:33:26,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:26,356 INFO L470 AbstractCegarLoop]: Abstraction has 480 states and 590 transitions. [2021-11-23 03:33:26,356 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 25 states have (on average 3.72) internal successors, (93), 25 states have internal predecessors, (93), 12 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (12), 10 states have call predecessors, (12), 11 states have call successors, (12) [2021-11-23 03:33:26,356 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 590 transitions. [2021-11-23 03:33:26,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2021-11-23 03:33:26,359 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:26,360 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:26,407 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:26,574 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2021-11-23 03:33:26,575 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:26,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:26,575 INFO L85 PathProgramCache]: Analyzing trace with hash 1675977768, now seen corresponding path program 1 times [2021-11-23 03:33:26,575 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:26,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697886311] [2021-11-23 03:33:26,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:26,576 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:26,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:27,045 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 8 proven. 38 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-23 03:33:27,046 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:27,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697886311] [2021-11-23 03:33:27,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697886311] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:27,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [23835400] [2021-11-23 03:33:27,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:27,046 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:27,046 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:27,047 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:27,048 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 03:33:27,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:27,139 INFO L263 TraceCheckSpWp]: Trace formula consists of 480 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-23 03:33:27,151 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:27,362 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-23 03:33:27,362 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:33:27,362 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [23835400] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:27,362 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:33:27,362 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [18] total 20 [2021-11-23 03:33:27,362 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1520875970] [2021-11-23 03:33:27,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:27,363 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 03:33:27,363 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:27,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 03:33:27,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=323, Unknown=0, NotChecked=0, Total=380 [2021-11-23 03:33:27,364 INFO L87 Difference]: Start difference. First operand 480 states and 590 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-23 03:33:27,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:27,655 INFO L93 Difference]: Finished difference Result 1004 states and 1274 transitions. [2021-11-23 03:33:27,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 03:33:27,655 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 72 [2021-11-23 03:33:27,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:27,660 INFO L225 Difference]: With dead ends: 1004 [2021-11-23 03:33:27,660 INFO L226 Difference]: Without dead ends: 611 [2021-11-23 03:33:27,662 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 79 SyntacticMatches, 1 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 155 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=78, Invalid=474, Unknown=0, NotChecked=0, Total=552 [2021-11-23 03:33:27,663 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 66 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:27,663 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 265 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:33:27,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 611 states. [2021-11-23 03:33:27,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 611 to 587. [2021-11-23 03:33:27,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 426 states have (on average 1.255868544600939) internal successors, (535), 463 states have internal predecessors, (535), 78 states have call successors, (78), 70 states have call predecessors, (78), 82 states have return successors, (117), 79 states have call predecessors, (117), 78 states have call successors, (117) [2021-11-23 03:33:27,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 730 transitions. [2021-11-23 03:33:27,728 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 730 transitions. Word has length 72 [2021-11-23 03:33:27,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:27,729 INFO L470 AbstractCegarLoop]: Abstraction has 587 states and 730 transitions. [2021-11-23 03:33:27,729 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-23 03:33:27,729 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 730 transitions. [2021-11-23 03:33:27,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-11-23 03:33:27,731 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:27,732 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:27,772 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:27,954 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:27,955 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:27,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:27,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1673814336, now seen corresponding path program 2 times [2021-11-23 03:33:27,955 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:27,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9096599] [2021-11-23 03:33:27,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:27,956 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:27,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:28,311 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 48 proven. 48 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 03:33:28,311 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:28,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9096599] [2021-11-23 03:33:28,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9096599] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:28,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1840258121] [2021-11-23 03:33:28,312 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 03:33:28,312 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:28,312 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:28,313 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:28,314 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 03:33:28,402 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2021-11-23 03:33:28,402 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:33:28,404 INFO L263 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 03:33:28,417 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:28,573 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-11-23 03:33:28,573 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 03:33:28,573 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1840258121] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:28,573 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 03:33:28,573 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [20] total 21 [2021-11-23 03:33:28,574 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587376850] [2021-11-23 03:33:28,574 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:28,575 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:33:28,575 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:28,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:33:28,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=347, Unknown=0, NotChecked=0, Total=420 [2021-11-23 03:33:28,576 INFO L87 Difference]: Start difference. First operand 587 states and 730 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-23 03:33:28,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:28,677 INFO L93 Difference]: Finished difference Result 874 states and 1120 transitions. [2021-11-23 03:33:28,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 03:33:28,677 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 89 [2021-11-23 03:33:28,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:28,682 INFO L225 Difference]: With dead ends: 874 [2021-11-23 03:33:28,682 INFO L226 Difference]: Without dead ends: 532 [2021-11-23 03:33:28,684 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=78, Invalid=384, Unknown=0, NotChecked=0, Total=462 [2021-11-23 03:33:28,684 INFO L933 BasicCegarLoop]: 49 mSDtfsCounter, 46 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:28,685 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [46 Valid, 135 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:33:28,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2021-11-23 03:33:28,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 490. [2021-11-23 03:33:28,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 490 states, 358 states have (on average 1.1899441340782122) internal successors, (426), 384 states have internal predecessors, (426), 65 states have call successors, (65), 60 states have call predecessors, (65), 66 states have return successors, (97), 66 states have call predecessors, (97), 65 states have call successors, (97) [2021-11-23 03:33:28,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 490 states to 490 states and 588 transitions. [2021-11-23 03:33:28,735 INFO L78 Accepts]: Start accepts. Automaton has 490 states and 588 transitions. Word has length 89 [2021-11-23 03:33:28,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:28,735 INFO L470 AbstractCegarLoop]: Abstraction has 490 states and 588 transitions. [2021-11-23 03:33:28,736 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-23 03:33:28,736 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 588 transitions. [2021-11-23 03:33:28,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2021-11-23 03:33:28,738 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:28,738 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:28,776 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:28,958 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 03:33:28,958 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:28,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:28,959 INFO L85 PathProgramCache]: Analyzing trace with hash 1410569396, now seen corresponding path program 3 times [2021-11-23 03:33:28,959 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:28,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053183697] [2021-11-23 03:33:28,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:28,959 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:28,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:29,179 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 1 proven. 83 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 03:33:29,180 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:29,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053183697] [2021-11-23 03:33:29,180 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053183697] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:29,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [238755940] [2021-11-23 03:33:29,180 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2021-11-23 03:33:29,180 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:29,180 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:29,181 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:29,183 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-23 03:33:29,270 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2021-11-23 03:33:29,270 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:33:29,276 INFO L263 TraceCheckSpWp]: Trace formula consists of 572 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-23 03:33:29,282 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:29,585 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 71 proven. 11 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-11-23 03:33:29,586 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:33:29,884 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 67 proven. 5 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2021-11-23 03:33:29,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [238755940] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:33:29,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [548648904] [2021-11-23 03:33:29,888 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2021-11-23 03:33:29,888 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:33:29,889 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:33:29,889 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:33:29,889 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:33:34,425 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 45 for LOIs [2021-11-23 03:33:34,430 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2021-11-23 03:33:34,700 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 03:33:34,742 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 30 for LOIs [2021-11-23 03:33:34,746 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:33:38,416 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13504#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (<= 0 |old(~pumpRunning~0)|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:33:38,416 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:33:38,417 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:33:38,417 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 8] total 26 [2021-11-23 03:33:38,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1762112836] [2021-11-23 03:33:38,417 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:33:38,418 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-23 03:33:38,418 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:38,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-23 03:33:38,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=2334, Unknown=0, NotChecked=0, Total=2652 [2021-11-23 03:33:38,420 INFO L87 Difference]: Start difference. First operand 490 states and 588 transitions. Second operand has 26 states, 24 states have (on average 4.833333333333333) internal successors, (116), 24 states have internal predecessors, (116), 11 states have call successors, (19), 7 states have call predecessors, (19), 8 states have return successors, (18), 10 states have call predecessors, (18), 11 states have call successors, (18) [2021-11-23 03:33:41,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:41,189 INFO L93 Difference]: Finished difference Result 1199 states and 1503 transitions. [2021-11-23 03:33:41,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2021-11-23 03:33:41,190 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 24 states have (on average 4.833333333333333) internal successors, (116), 24 states have internal predecessors, (116), 11 states have call successors, (19), 7 states have call predecessors, (19), 8 states have return successors, (18), 10 states have call predecessors, (18), 11 states have call successors, (18) Word has length 91 [2021-11-23 03:33:41,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:41,196 INFO L225 Difference]: With dead ends: 1199 [2021-11-23 03:33:41,196 INFO L226 Difference]: Without dead ends: 788 [2021-11-23 03:33:41,202 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 367 GetRequests, 264 SyntacticMatches, 0 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3755 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=1590, Invalid=9330, Unknown=0, NotChecked=0, Total=10920 [2021-11-23 03:33:41,203 INFO L933 BasicCegarLoop]: 72 mSDtfsCounter, 1035 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 1190 mSolverCounterSat, 719 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1044 SdHoareTripleChecker+Valid, 496 SdHoareTripleChecker+Invalid, 1909 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 719 IncrementalHoareTripleChecker+Valid, 1190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:41,203 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1044 Valid, 496 Invalid, 1909 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [719 Valid, 1190 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-11-23 03:33:41,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 788 states. [2021-11-23 03:33:41,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 788 to 766. [2021-11-23 03:33:41,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 766 states, 557 states have (on average 1.1885098743267504) internal successors, (662), 602 states have internal predecessors, (662), 105 states have call successors, (105), 94 states have call predecessors, (105), 103 states have return successors, (163), 102 states have call predecessors, (163), 105 states have call successors, (163) [2021-11-23 03:33:41,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 766 states to 766 states and 930 transitions. [2021-11-23 03:33:41,294 INFO L78 Accepts]: Start accepts. Automaton has 766 states and 930 transitions. Word has length 91 [2021-11-23 03:33:41,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:41,296 INFO L470 AbstractCegarLoop]: Abstraction has 766 states and 930 transitions. [2021-11-23 03:33:41,296 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 24 states have (on average 4.833333333333333) internal successors, (116), 24 states have internal predecessors, (116), 11 states have call successors, (19), 7 states have call predecessors, (19), 8 states have return successors, (18), 10 states have call predecessors, (18), 11 states have call successors, (18) [2021-11-23 03:33:41,297 INFO L276 IsEmpty]: Start isEmpty. Operand 766 states and 930 transitions. [2021-11-23 03:33:41,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2021-11-23 03:33:41,305 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:41,305 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:41,342 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:41,522 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:41,523 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:41,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:41,523 INFO L85 PathProgramCache]: Analyzing trace with hash 1695781844, now seen corresponding path program 2 times [2021-11-23 03:33:41,523 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:41,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639245018] [2021-11-23 03:33:41,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:41,523 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:41,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:41,766 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 47 proven. 49 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-23 03:33:41,766 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:41,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639245018] [2021-11-23 03:33:41,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639245018] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:41,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [154089145] [2021-11-23 03:33:41,766 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 03:33:41,767 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:41,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:41,777 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:41,778 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2021-11-23 03:33:41,857 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2021-11-23 03:33:41,857 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 03:33:41,859 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 32 conjunts are in the unsatisfiable core [2021-11-23 03:33:41,862 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:42,164 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 59 proven. 5 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2021-11-23 03:33:42,164 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:33:42,685 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 5 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2021-11-23 03:33:42,686 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [154089145] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:33:42,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1507172255] [2021-11-23 03:33:42,689 INFO L159 IcfgInterpreter]: Started Sifa with 38 locations of interest [2021-11-23 03:33:42,689 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:33:42,689 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:33:42,690 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:33:42,690 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:33:50,168 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 305 for LOIs [2021-11-23 03:33:50,237 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2021-11-23 03:33:50,532 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2021-11-23 03:33:50,778 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2021-11-23 03:33:50,781 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 29 for LOIs [2021-11-23 03:33:50,784 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:34:01,038 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17302#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:34:01,038 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:34:01,039 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:34:01,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 8, 9] total 32 [2021-11-23 03:34:01,039 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1207674852] [2021-11-23 03:34:01,039 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:34:01,040 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2021-11-23 03:34:01,040 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:34:01,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2021-11-23 03:34:01,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=383, Invalid=3277, Unknown=0, NotChecked=0, Total=3660 [2021-11-23 03:34:01,043 INFO L87 Difference]: Start difference. First operand 766 states and 930 transitions. Second operand has 32 states, 30 states have (on average 4.6) internal successors, (138), 29 states have internal predecessors, (138), 13 states have call successors, (19), 8 states have call predecessors, (19), 10 states have return successors, (20), 13 states have call predecessors, (20), 11 states have call successors, (20) [2021-11-23 03:34:02,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:34:02,222 INFO L93 Difference]: Finished difference Result 935 states and 1135 transitions. [2021-11-23 03:34:02,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-11-23 03:34:02,223 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 4.6) internal successors, (138), 29 states have internal predecessors, (138), 13 states have call successors, (19), 8 states have call predecessors, (19), 10 states have return successors, (20), 13 states have call predecessors, (20), 11 states have call successors, (20) Word has length 94 [2021-11-23 03:34:02,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:34:02,225 INFO L225 Difference]: With dead ends: 935 [2021-11-23 03:34:02,225 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:34:02,231 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 326 GetRequests, 238 SyntacticMatches, 8 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3025 ImplicationChecksByTransitivity, 11.3s TimeCoverageRelationStatistics Valid=813, Invalid=5829, Unknown=0, NotChecked=0, Total=6642 [2021-11-23 03:34:02,232 INFO L933 BasicCegarLoop]: 41 mSDtfsCounter, 500 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 568 mSolverCounterSat, 282 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 504 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 850 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 282 IncrementalHoareTripleChecker+Valid, 568 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:34:02,232 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [504 Valid, 339 Invalid, 850 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [282 Valid, 568 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:34:02,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:34:02,233 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:34:02,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:34:02,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:34:02,234 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2021-11-23 03:34:02,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:34:02,235 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:34:02,235 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 4.6) internal successors, (138), 29 states have internal predecessors, (138), 13 states have call successors, (19), 8 states have call predecessors, (19), 10 states have return successors, (20), 13 states have call predecessors, (20), 11 states have call successors, (20) [2021-11-23 03:34:02,235 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:34:02,235 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:34:02,239 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:34:02,282 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2021-11-23 03:34:02,462 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:34:02,465 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:34:06,405 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 309 316) the Hoare annotation is: (= ~pumpRunning~0 |old(~pumpRunning~0)|) [2021-11-23 03:34:06,406 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 309 316) no Hoare annotation was computed. [2021-11-23 03:34:06,406 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 224 230) no Hoare annotation was computed. [2021-11-23 03:34:06,406 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 224 230) the Hoare annotation is: true [2021-11-23 03:34:06,406 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 549 560) the Hoare annotation is: true [2021-11-23 03:34:06,406 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 549 560) no Hoare annotation was computed. [2021-11-23 03:34:06,406 INFO L858 garLoopResultBuilder]: For program point L449(line 449) no Hoare annotation was computed. [2021-11-23 03:34:06,407 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 428 457) no Hoare annotation was computed. [2021-11-23 03:34:06,407 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 428 457) the Hoare annotation is: true [2021-11-23 03:34:06,407 INFO L858 garLoopResultBuilder]: For program point L442(lines 442 446) no Hoare annotation was computed. [2021-11-23 03:34:06,407 INFO L861 garLoopResultBuilder]: At program point L442-1(lines 442 446) the Hoare annotation is: true [2021-11-23 03:34:06,407 INFO L861 garLoopResultBuilder]: At program point L438-2(lines 438 452) the Hoare annotation is: true [2021-11-23 03:34:06,407 INFO L861 garLoopResultBuilder]: At program point L434(line 434) the Hoare annotation is: true [2021-11-23 03:34:06,407 INFO L858 garLoopResultBuilder]: For program point L434-1(line 434) no Hoare annotation was computed. [2021-11-23 03:34:06,407 INFO L861 garLoopResultBuilder]: At program point L453(lines 428 457) the Hoare annotation is: true [2021-11-23 03:34:06,407 INFO L854 garLoopResultBuilder]: At program point L630(line 630) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 (not (= |old(~waterLevel~0)| 1))) (or .cse1 (not .cse0)))) [2021-11-23 03:34:06,408 INFO L854 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 (not (= |old(~waterLevel~0)| 1))) (or .cse1 (not .cse0)))) [2021-11-23 03:34:06,408 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and .cse0 (not (= ~pumpRunning~0 0)) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (= ~waterLevel~0 1)) .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (not .cse1)))) [2021-11-23 03:34:06,408 INFO L858 garLoopResultBuilder]: For program point L103(lines 103 109) no Hoare annotation was computed. [2021-11-23 03:34:06,408 INFO L854 garLoopResultBuilder]: At program point L99(lines 99 112) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| ~waterLevel~0)) (.cse10 (not .cse4))) (let ((.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse0 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= ~waterLevel~0 1)) (.cse3 (and (= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 .cse10)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1)) (or .cse7 (and .cse0 .cse9 (<= |old(~waterLevel~0)| ~waterLevel~0)) .cse10) (or .cse7 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1|) .cse10 .cse6) (or .cse7 .cse8 (and .cse0 .cse9 .cse2)) (or .cse7 .cse3 .cse4 .cse5 .cse6) (or .cse7 (not (< 0 (+ |old(~waterLevel~0)| 1))) (and (< 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1)) (<= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0)) (not (<= |old(~waterLevel~0)| 0)) .cse10))))) [2021-11-23 03:34:06,409 INFO L854 garLoopResultBuilder]: At program point L99-1(lines 91 115) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| ~waterLevel~0)) (.cse10 (not .cse4))) (let ((.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse0 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 .cse10)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1)) (or .cse7 (and .cse0 .cse9 (<= |old(~waterLevel~0)| ~waterLevel~0)) .cse10) (or .cse7 (not (< 0 (+ |old(~waterLevel~0)| 1))) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0) (< 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1)) (<= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0)) (not (<= |old(~waterLevel~0)| 0)) .cse10) (or .cse7 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1|) .cse10 .cse6) (or .cse7 .cse8 (and .cse0 .cse9 .cse2)) (or .cse7 .cse3 .cse4 .cse5 .cse6))))) [2021-11-23 03:34:06,409 INFO L854 garLoopResultBuilder]: At program point L277(line 277) the Hoare annotation is: (let ((.cse0 (or (= ~pumpRunning~0 0) (<= ~waterLevel~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse0) .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 (and (= ~waterLevel~0 1) .cse0) (not (= |old(~waterLevel~0)| 1))) (or .cse2 (not .cse1)))) [2021-11-23 03:34:06,409 INFO L854 garLoopResultBuilder]: At program point L277-1(lines 258 282) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2)) (or .cse0 (not .cse3)) (or (= |old(~waterLevel~0)| ~waterLevel~0) (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse2) .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:34:06,409 INFO L854 garLoopResultBuilder]: At program point L211-1(lines 211 217) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 (<= |old(~waterLevel~0)| ~waterLevel~0)) (not .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 .cse4)) (or (= |old(~waterLevel~0)| ~waterLevel~0) (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse4) .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:34:06,410 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 200 223) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))) (or .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:34:06,410 INFO L858 garLoopResultBuilder]: For program point L204-1(lines 203 222) no Hoare annotation was computed. [2021-11-23 03:34:06,410 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 200 223) no Hoare annotation was computed. [2021-11-23 03:34:06,410 INFO L858 garLoopResultBuilder]: For program point L266(lines 266 274) no Hoare annotation was computed. [2021-11-23 03:34:06,410 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 630) no Hoare annotation was computed. [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L262(lines 262 279) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~waterLevel~0 1)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse4 .cse5 .cse6)) (or .cse7 .cse2 (and (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and .cse4 .cse5)) (or (not .cse4) .cse1) (or .cse1 .cse6)) .cse3) (or .cse0 (not .cse7)))) [2021-11-23 03:34:06,411 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L415-1(lines 415 421) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L180(lines 131 181) the Hoare annotation is: false [2021-11-23 03:34:06,411 INFO L858 garLoopResultBuilder]: For program point L168(lines 168 174) no Hoare annotation was computed. [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L168-2(lines 162 175) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 0 ~systemActive~0))) (or (and (= 2 ~waterLevel~0) .cse0 (not .cse1)) (and .cse2 .cse0 (= ~waterLevel~0 1)) (and .cse2 .cse0 .cse1))) [2021-11-23 03:34:06,411 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:34:06,411 INFO L858 garLoopResultBuilder]: For program point L152(lines 152 158) no Hoare annotation was computed. [2021-11-23 03:34:06,411 INFO L858 garLoopResultBuilder]: For program point L152-1(lines 152 158) no Hoare annotation was computed. [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L177(lines 132 179) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 0 ~systemActive~0))) (or (and (= 2 ~waterLevel~0) .cse0 (not .cse1)) (and .cse2 .cse0 (= ~waterLevel~0 1)) (and .cse2 .cse0 .cse1))) [2021-11-23 03:34:06,411 INFO L854 garLoopResultBuilder]: At program point L144(line 144) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 0 ~systemActive~0))) (or (and (= 2 ~waterLevel~0) .cse0 (not .cse1)) (and .cse2 .cse0 (= ~waterLevel~0 1)) (and .cse2 .cse0 .cse1))) [2021-11-23 03:34:06,412 INFO L854 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: (and (or (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| 1) (and (not (= ~waterLevel~0 1)) (not (= ~waterLevel~0 0))) (= |old(~waterLevel~0)| 0)) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-11-23 03:34:06,412 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:34:06,412 INFO L858 garLoopResultBuilder]: For program point L133(lines 132 179) no Hoare annotation was computed. [2021-11-23 03:34:06,412 INFO L858 garLoopResultBuilder]: For program point L162(lines 162 175) no Hoare annotation was computed. [2021-11-23 03:34:06,412 INFO L854 garLoopResultBuilder]: At program point L509(lines 509 516) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2021-11-23 03:34:06,412 INFO L861 garLoopResultBuilder]: At program point L509-2(lines 509 516) the Hoare annotation is: true [2021-11-23 03:34:06,412 INFO L854 garLoopResultBuilder]: At program point L154(line 154) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 0 ~systemActive~0))) (or (and (= 2 ~waterLevel~0) .cse0 (not .cse1)) (and .cse2 .cse0 (= ~waterLevel~0 1)) (and .cse2 .cse0 .cse1))) [2021-11-23 03:34:06,412 INFO L861 garLoopResultBuilder]: At program point L183(lines 122 187) the Hoare annotation is: true [2021-11-23 03:34:06,412 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 148) no Hoare annotation was computed. [2021-11-23 03:34:06,412 INFO L858 garLoopResultBuilder]: For program point L142-1(lines 142 148) no Hoare annotation was computed. [2021-11-23 03:34:06,413 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 232 256) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (not .cse2)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse2)))) [2021-11-23 03:34:06,413 INFO L854 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2021-11-23 03:34:06,413 INFO L854 garLoopResultBuilder]: At program point L240(lines 240 248) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (or (= ~pumpRunning~0 0) (<= ~waterLevel~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1) .cse1) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse1) .cse2))) [2021-11-23 03:34:06,413 INFO L854 garLoopResultBuilder]: At program point L236(lines 236 253) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (not .cse2)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse2)))) [2021-11-23 03:34:06,413 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 232 256) no Hoare annotation was computed. [2021-11-23 03:34:06,413 INFO L854 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2021-11-23 03:34:06,413 INFO L858 garLoopResultBuilder]: For program point L251-1(lines 232 256) no Hoare annotation was computed. [2021-11-23 03:34:06,413 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 537 548) no Hoare annotation was computed. [2021-11-23 03:34:06,414 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 537 548) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2021-11-23 03:34:06,416 INFO L732 BasicCegarLoop]: Path program histogram: [3, 2, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:34:06,417 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:34:06,443 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:34:06 BoogieIcfgContainer [2021-11-23 03:34:06,443 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:34:06,444 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:34:06,444 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:34:06,445 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:34:06,445 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:08" (3/4) ... [2021-11-23 03:34:06,448 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:34:06,453 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-23 03:34:06,454 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:34:06,454 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:34:06,454 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:34:06,454 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:34:06,454 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:34:06,455 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:34:06,465 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 77 nodes and edges [2021-11-23 03:34:06,466 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 29 nodes and edges [2021-11-23 03:34:06,467 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 03:34:06,468 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:34:06,469 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:34:06,470 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:34:06,470 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:34:06,497 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:34:06,498 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((\old(waterLevel) == waterLevel || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:34:06,499 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || (((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && (!(pumpRunning == 0) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 03:34:06,499 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((\old(waterLevel) == waterLevel || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:34:06,499 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-23 03:34:06,500 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && 1 <= tmp) && tmp == waterLevel) && waterLevel == 1) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || tmp == 1)) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || 2 <= tmp) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(0 < \old(waterLevel) + 1)) || (0 < tmp + 1 && tmp <= 0)) || !(\old(waterLevel) <= 0)) || !(0 == systemActive)) [2021-11-23 03:34:06,501 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && 1 <= tmp) && tmp == waterLevel) && waterLevel == 1) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || tmp == 1)) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(0 < \old(waterLevel) + 1)) || ((tmp___0 == 0 && 0 < tmp + 1) && tmp <= 0)) || !(\old(waterLevel) <= 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || 2 <= tmp) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:34:06,502 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 03:34:06,502 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || (tmp == 1 && (pumpRunning == 0 || waterLevel <= 0))) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (tmp == 0 && (pumpRunning == 0 || waterLevel <= 0))) || 0 == systemActive) [2021-11-23 03:34:06,549 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:34:06,549 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:34:06,550 INFO L158 Benchmark]: Toolchain (without parser) took 59913.42ms. Allocated memory was 90.2MB in the beginning and 721.4MB in the end (delta: 631.2MB). Free memory was 53.1MB in the beginning and 517.0MB in the end (delta: -463.9MB). Peak memory consumption was 166.5MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,550 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 90.2MB. Free memory is still 70.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:34:06,551 INFO L158 Benchmark]: CACSL2BoogieTranslator took 569.52ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 52.9MB in the beginning and 77.5MB in the end (delta: -24.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,551 INFO L158 Benchmark]: Boogie Procedure Inliner took 61.44ms. Allocated memory is still 109.1MB. Free memory was 77.5MB in the beginning and 74.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,552 INFO L158 Benchmark]: Boogie Preprocessor took 67.58ms. Allocated memory is still 109.1MB. Free memory was 74.9MB in the beginning and 73.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,552 INFO L158 Benchmark]: RCFGBuilder took 743.73ms. Allocated memory is still 109.1MB. Free memory was 73.2MB in the beginning and 50.8MB in the end (delta: 22.4MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,553 INFO L158 Benchmark]: TraceAbstraction took 58358.15ms. Allocated memory was 109.1MB in the beginning and 721.4MB in the end (delta: 612.4MB). Free memory was 50.3MB in the beginning and 524.3MB in the end (delta: -474.1MB). Peak memory consumption was 411.3MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,553 INFO L158 Benchmark]: Witness Printer took 105.15ms. Allocated memory is still 721.4MB. Free memory was 524.3MB in the beginning and 517.0MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 03:34:06,556 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 90.2MB. Free memory is still 70.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 569.52ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 52.9MB in the beginning and 77.5MB in the end (delta: -24.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 61.44ms. Allocated memory is still 109.1MB. Free memory was 77.5MB in the beginning and 74.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 67.58ms. Allocated memory is still 109.1MB. Free memory was 74.9MB in the beginning and 73.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 743.73ms. Allocated memory is still 109.1MB. Free memory was 73.2MB in the beginning and 50.8MB in the end (delta: 22.4MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 58358.15ms. Allocated memory was 109.1MB in the beginning and 721.4MB in the end (delta: 612.4MB). Free memory was 50.3MB in the beginning and 524.3MB in the end (delta: -474.1MB). Peak memory consumption was 411.3MB. Max. memory is 16.1GB. * Witness Printer took 105.15ms. Allocated memory is still 721.4MB. Free memory was 524.3MB in the beginning and 517.0MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 630]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 59 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 58.3s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.1s, AutomataDifference: 9.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3214 SdHoareTripleChecker+Valid, 3.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3174 mSDsluCounter, 3185 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2835 mSDsCounter, 1739 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4194 IncrementalHoareTripleChecker+Invalid, 5933 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1739 mSolverCounterUnsat, 790 mSDtfsCounter, 4194 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1198 GetRequests, 830 SyntacticMatches, 9 SemanticMatches, 359 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10513 ImplicationChecksByTransitivity, 23.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=766occurred in iteration=11, InterpolantAutomatonStates: 204, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 347 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 1724 PreInvPairs, 1928 NumberOfFragments, 1193 HoareAnnotationTreeSize, 1724 FomulaSimplifications, 15570 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 35 FomulaSimplificationsInter, 18296 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 5.1s InterpolantComputationTime, 1000 NumberOfCodeBlocks, 888 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 1211 ConstructedInterpolants, 0 QuantifiedInterpolants, 5100 SizeOfPredicates, 57 NumberOfNonLiveVariables, 2556 ConjunctsInSsa, 133 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 732/1017 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 131]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((\old(waterLevel) == waterLevel || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 415]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= tmp) && tmp == waterLevel) && waterLevel == 1) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || tmp == 1)) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || 2 <= tmp) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(0 < \old(waterLevel) + 1)) || (0 < tmp + 1 && tmp <= 0)) || !(\old(waterLevel) <= 0)) || !(0 == systemActive)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: (((2 == waterLevel && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel == 1)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((\old(waterLevel) == waterLevel || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || (((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && (!(pumpRunning == 0) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 91]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= tmp) && tmp == waterLevel) && waterLevel == 1) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || tmp == 1)) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(0 < \old(waterLevel) + 1)) || ((tmp___0 == 0 && 0 < tmp + 1) && tmp <= 0)) || !(\old(waterLevel) <= 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || 2 <= tmp) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: ((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || (tmp == 1 && (pumpRunning == 0 || waterLevel <= 0))) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (tmp == 0 && (pumpRunning == 0 || waterLevel <= 0))) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-11-23 03:34:06,650 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2589ce19-4bba-45df-beff-af6ed4d2c8aa/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE