./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 45ba8c3ee5105630bc9146965d68439e6204903aca4c5a31cd4f017e456c8589 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:31:47,065 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:31:47,068 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:31:47,108 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:31:47,109 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:31:47,110 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:31:47,112 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:31:47,115 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:31:47,118 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:31:47,119 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:31:47,121 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:31:47,123 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:31:47,123 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:31:47,125 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:31:47,127 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:31:47,129 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:31:47,130 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:31:47,131 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:31:47,133 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:31:47,136 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:31:47,138 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:31:47,140 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:31:47,142 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:31:47,143 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:31:47,147 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:31:47,148 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:31:47,148 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:31:47,149 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:31:47,150 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:31:47,151 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:31:47,152 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:31:47,153 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:31:47,165 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:31:47,166 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:31:47,167 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:31:47,168 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:31:47,169 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:31:47,169 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:31:47,170 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:31:47,171 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:31:47,172 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:31:47,173 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:31:47,220 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:31:47,222 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:31:47,223 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:31:47,223 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:31:47,224 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:31:47,231 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:31:47,231 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:31:47,232 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:31:47,232 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:31:47,232 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:31:47,233 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:31:47,233 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:31:47,234 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:31:47,234 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:31:47,234 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:31:47,234 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:31:47,235 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:31:47,235 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:31:47,236 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:31:47,237 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:31:47,237 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:31:47,237 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:31:47,237 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:31:47,237 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:31:47,238 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:31:47,238 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:31:47,239 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:31:47,240 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:31:47,240 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:31:47,240 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:31:47,240 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:31:47,241 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:31:47,241 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:31:47,241 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:31:47,241 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:31:47,242 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:31:47,242 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:31:47,242 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:31:47,242 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:31:47,243 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:31:47,243 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:31:47,243 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 45ba8c3ee5105630bc9146965d68439e6204903aca4c5a31cd4f017e456c8589 [2021-11-23 03:31:47,561 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:31:47,587 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:31:47,589 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:31:47,591 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:31:47,592 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:31:47,593 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c [2021-11-23 03:31:47,677 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/data/e9b61cd2d/73081f35f3fe4d41a5397a6ed7b199a0/FLAG6c0a01344 [2021-11-23 03:31:48,338 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:31:48,338 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c [2021-11-23 03:31:48,353 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/data/e9b61cd2d/73081f35f3fe4d41a5397a6ed7b199a0/FLAG6c0a01344 [2021-11-23 03:31:48,567 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/data/e9b61cd2d/73081f35f3fe4d41a5397a6ed7b199a0 [2021-11-23 03:31:48,569 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:31:48,571 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:31:48,583 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:31:48,583 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:31:48,587 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:31:48,588 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:31:48" (1/1) ... [2021-11-23 03:31:48,590 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b7ddefd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:48, skipping insertion in model container [2021-11-23 03:31:48,590 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:31:48" (1/1) ... [2021-11-23 03:31:48,599 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:31:48,646 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:31:48,859 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c[1605,1618] [2021-11-23 03:31:48,991 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:31:49,002 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:31:49,017 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c[1605,1618] [2021-11-23 03:31:49,083 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:31:49,115 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:31:49,116 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49 WrapperNode [2021-11-23 03:31:49,116 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:31:49,119 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:31:49,119 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:31:49,119 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:31:49,128 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,162 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,217 INFO L137 Inliner]: procedures = 55, calls = 154, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 235 [2021-11-23 03:31:49,217 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:31:49,218 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:31:49,218 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:31:49,218 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:31:49,229 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,229 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,244 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,245 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,261 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,266 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,268 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,288 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:31:49,289 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:31:49,289 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:31:49,289 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:31:49,295 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (1/1) ... [2021-11-23 03:31:49,304 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:31:49,317 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:31:49,336 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:31:49,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:31:49,402 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:31:49,403 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:31:49,403 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:31:49,403 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:31:49,403 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:31:49,404 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:31:49,404 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:31:49,404 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:31:49,404 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:31:49,404 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-23 03:31:49,404 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-23 03:31:49,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:31:49,405 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:31:49,405 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:31:49,405 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:31:49,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:31:49,518 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:31:49,519 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:31:49,935 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:31:50,080 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:31:50,081 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:31:50,084 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:31:50 BoogieIcfgContainer [2021-11-23 03:31:50,084 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:31:50,089 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:31:50,089 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:31:50,094 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:31:50,094 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:31:48" (1/3) ... [2021-11-23 03:31:50,096 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c5f7e74 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:31:50, skipping insertion in model container [2021-11-23 03:31:50,096 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:31:49" (2/3) ... [2021-11-23 03:31:50,097 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c5f7e74 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:31:50, skipping insertion in model container [2021-11-23 03:31:50,097 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:31:50" (3/3) ... [2021-11-23 03:31:50,098 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product35.cil.c [2021-11-23 03:31:50,109 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:31:50,109 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:31:50,183 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:31:50,195 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:31:50,196 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:31:50,235 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-23 03:31:50,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 03:31:50,243 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:50,244 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:50,245 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:50,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:50,252 INFO L85 PathProgramCache]: Analyzing trace with hash -1867634907, now seen corresponding path program 1 times [2021-11-23 03:31:50,263 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:50,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429163241] [2021-11-23 03:31:50,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:50,266 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:50,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:50,554 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:31:50,555 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:50,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429163241] [2021-11-23 03:31:50,557 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429163241] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:50,557 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:50,558 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:31:50,560 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461886921] [2021-11-23 03:31:50,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:50,566 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:31:50,566 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:50,649 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:31:50,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:31:50,663 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:31:50,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:50,794 INFO L93 Difference]: Finished difference Result 100 states and 135 transitions. [2021-11-23 03:31:50,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:31:50,797 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2021-11-23 03:31:50,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:50,817 INFO L225 Difference]: With dead ends: 100 [2021-11-23 03:31:50,817 INFO L226 Difference]: Without dead ends: 46 [2021-11-23 03:31:50,823 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:31:50,830 INFO L933 BasicCegarLoop]: 49 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:50,831 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 49 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:31:50,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2021-11-23 03:31:50,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2021-11-23 03:31:50,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3) internal successors, (39), 35 states have internal predecessors, (39), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:31:50,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2021-11-23 03:31:50,909 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 21 [2021-11-23 03:31:50,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:50,909 INFO L470 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2021-11-23 03:31:50,909 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:31:50,910 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2021-11-23 03:31:50,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2021-11-23 03:31:50,915 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:50,915 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:50,915 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:31:50,916 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:50,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:50,921 INFO L85 PathProgramCache]: Analyzing trace with hash 333823414, now seen corresponding path program 1 times [2021-11-23 03:31:50,921 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:50,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025423410] [2021-11-23 03:31:50,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:50,922 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:50,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:51,022 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:31:51,023 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:51,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025423410] [2021-11-23 03:31:51,023 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025423410] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:51,024 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:51,024 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:31:51,024 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468520263] [2021-11-23 03:31:51,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:51,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:31:51,026 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:51,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:31:51,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:31:51,028 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:31:51,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:51,094 INFO L93 Difference]: Finished difference Result 69 states and 87 transitions. [2021-11-23 03:31:51,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:31:51,098 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2021-11-23 03:31:51,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:51,102 INFO L225 Difference]: With dead ends: 69 [2021-11-23 03:31:51,102 INFO L226 Difference]: Without dead ends: 38 [2021-11-23 03:31:51,107 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:31:51,111 INFO L933 BasicCegarLoop]: 35 mSDtfsCounter, 7 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:51,112 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10 Valid, 61 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:31:51,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2021-11-23 03:31:51,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2021-11-23 03:31:51,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 30 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 03:31:51,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2021-11-23 03:31:51,135 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 22 [2021-11-23 03:31:51,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:51,137 INFO L470 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2021-11-23 03:31:51,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:31:51,138 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2021-11-23 03:31:51,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-23 03:31:51,140 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:51,141 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:51,142 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:31:51,142 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:51,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:51,143 INFO L85 PathProgramCache]: Analyzing trace with hash -1844053297, now seen corresponding path program 1 times [2021-11-23 03:31:51,143 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:51,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087502978] [2021-11-23 03:31:51,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:51,145 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:51,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:51,363 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:31:51,363 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:51,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087502978] [2021-11-23 03:31:51,364 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087502978] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:51,364 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:51,364 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:31:51,373 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696023398] [2021-11-23 03:31:51,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:51,374 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:31:51,374 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:51,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:31:51,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:31:51,375 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:31:51,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:51,881 INFO L93 Difference]: Finished difference Result 145 states and 181 transitions. [2021-11-23 03:31:51,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 03:31:51,883 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2021-11-23 03:31:51,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:51,889 INFO L225 Difference]: With dead ends: 145 [2021-11-23 03:31:51,889 INFO L226 Difference]: Without dead ends: 109 [2021-11-23 03:31:51,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=213, Unknown=0, NotChecked=0, Total=272 [2021-11-23 03:31:51,901 INFO L933 BasicCegarLoop]: 69 mSDtfsCounter, 74 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:51,904 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 289 Invalid, 361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:31:51,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2021-11-23 03:31:51,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 76. [2021-11-23 03:31:51,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 50 states have (on average 1.26) internal successors, (63), 56 states have internal predecessors, (63), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (15), 12 states have call predecessors, (15), 13 states have call successors, (15) [2021-11-23 03:31:51,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 91 transitions. [2021-11-23 03:31:51,946 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 91 transitions. Word has length 24 [2021-11-23 03:31:51,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:51,947 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 91 transitions. [2021-11-23 03:31:51,948 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:31:51,948 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 91 transitions. [2021-11-23 03:31:51,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-23 03:31:51,950 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:51,950 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:51,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:31:51,951 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:51,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:51,953 INFO L85 PathProgramCache]: Analyzing trace with hash 1738114571, now seen corresponding path program 1 times [2021-11-23 03:31:51,953 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:51,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15755682] [2021-11-23 03:31:51,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:51,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:52,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:52,157 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:31:52,158 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:52,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15755682] [2021-11-23 03:31:52,158 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15755682] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:52,159 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:52,159 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 03:31:52,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1217321257] [2021-11-23 03:31:52,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:52,160 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 03:31:52,161 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:52,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 03:31:52,162 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-23 03:31:52,162 INFO L87 Difference]: Start difference. First operand 76 states and 91 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:31:52,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:52,312 INFO L93 Difference]: Finished difference Result 248 states and 313 transitions. [2021-11-23 03:31:52,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-23 03:31:52,313 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 27 [2021-11-23 03:31:52,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:52,317 INFO L225 Difference]: With dead ends: 248 [2021-11-23 03:31:52,317 INFO L226 Difference]: Without dead ends: 174 [2021-11-23 03:31:52,319 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:31:52,320 INFO L933 BasicCegarLoop]: 52 mSDtfsCounter, 80 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:52,321 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [83 Valid, 188 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:31:52,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2021-11-23 03:31:52,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 101. [2021-11-23 03:31:52,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 69 states have (on average 1.2753623188405796) internal successors, (88), 74 states have internal predecessors, (88), 15 states have call successors, (15), 15 states have call predecessors, (15), 16 states have return successors, (17), 15 states have call predecessors, (17), 15 states have call successors, (17) [2021-11-23 03:31:52,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 120 transitions. [2021-11-23 03:31:52,348 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 120 transitions. Word has length 27 [2021-11-23 03:31:52,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:52,349 INFO L470 AbstractCegarLoop]: Abstraction has 101 states and 120 transitions. [2021-11-23 03:31:52,349 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:31:52,349 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 120 transitions. [2021-11-23 03:31:52,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-11-23 03:31:52,352 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:52,352 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:52,352 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:31:52,353 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:52,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:52,353 INFO L85 PathProgramCache]: Analyzing trace with hash 1514925428, now seen corresponding path program 1 times [2021-11-23 03:31:52,354 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:52,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580347704] [2021-11-23 03:31:52,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:52,354 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:52,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:52,478 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:31:52,478 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:52,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580347704] [2021-11-23 03:31:52,479 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580347704] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:52,479 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:52,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:31:52,479 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600169454] [2021-11-23 03:31:52,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:52,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:31:52,481 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:52,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:31:52,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:31:52,482 INFO L87 Difference]: Start difference. First operand 101 states and 120 transitions. Second operand has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-23 03:31:52,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:52,943 INFO L93 Difference]: Finished difference Result 260 states and 314 transitions. [2021-11-23 03:31:52,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 03:31:52,944 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2021-11-23 03:31:52,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:52,950 INFO L225 Difference]: With dead ends: 260 [2021-11-23 03:31:52,951 INFO L226 Difference]: Without dead ends: 200 [2021-11-23 03:31:52,954 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=68, Invalid=142, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:31:52,960 INFO L933 BasicCegarLoop]: 68 mSDtfsCounter, 130 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 251 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 251 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:52,961 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [135 Valid, 271 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 251 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:31:52,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2021-11-23 03:31:53,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 153. [2021-11-23 03:31:53,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 105 states have (on average 1.2666666666666666) internal successors, (133), 114 states have internal predecessors, (133), 23 states have call successors, (23), 21 states have call predecessors, (23), 24 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) [2021-11-23 03:31:53,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 183 transitions. [2021-11-23 03:31:53,019 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 183 transitions. Word has length 30 [2021-11-23 03:31:53,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:53,020 INFO L470 AbstractCegarLoop]: Abstraction has 153 states and 183 transitions. [2021-11-23 03:31:53,021 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-23 03:31:53,021 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 183 transitions. [2021-11-23 03:31:53,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-23 03:31:53,030 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:53,031 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:53,031 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:31:53,032 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:53,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:53,033 INFO L85 PathProgramCache]: Analyzing trace with hash 1138650889, now seen corresponding path program 1 times [2021-11-23 03:31:53,033 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:53,033 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [854044067] [2021-11-23 03:31:53,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:53,034 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:53,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:53,291 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:31:53,291 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:53,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [854044067] [2021-11-23 03:31:53,291 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [854044067] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:53,292 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:53,292 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-23 03:31:53,292 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1806664043] [2021-11-23 03:31:53,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:53,293 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-23 03:31:53,293 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:53,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-23 03:31:53,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2021-11-23 03:31:53,294 INFO L87 Difference]: Start difference. First operand 153 states and 183 transitions. Second operand has 10 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 10 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 03:31:53,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:53,805 INFO L93 Difference]: Finished difference Result 289 states and 343 transitions. [2021-11-23 03:31:53,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-23 03:31:53,811 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 10 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2021-11-23 03:31:53,811 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:53,813 INFO L225 Difference]: With dead ends: 289 [2021-11-23 03:31:53,813 INFO L226 Difference]: Without dead ends: 227 [2021-11-23 03:31:53,814 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=99, Invalid=321, Unknown=0, NotChecked=0, Total=420 [2021-11-23 03:31:53,815 INFO L933 BasicCegarLoop]: 28 mSDtfsCounter, 144 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 146 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 281 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:53,815 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [146 Valid, 134 Invalid, 281 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:31:53,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-11-23 03:31:53,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 176. [2021-11-23 03:31:53,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 120 states have (on average 1.2583333333333333) internal successors, (151), 131 states have internal predecessors, (151), 27 states have call successors, (27), 25 states have call predecessors, (27), 28 states have return successors, (33), 26 states have call predecessors, (33), 27 states have call successors, (33) [2021-11-23 03:31:53,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 211 transitions. [2021-11-23 03:31:53,910 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 211 transitions. Word has length 44 [2021-11-23 03:31:53,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:53,910 INFO L470 AbstractCegarLoop]: Abstraction has 176 states and 211 transitions. [2021-11-23 03:31:53,911 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 10 states have internal predecessors, (33), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 03:31:53,911 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 211 transitions. [2021-11-23 03:31:53,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-23 03:31:53,912 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:53,913 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:53,913 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 03:31:53,926 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:53,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:53,927 INFO L85 PathProgramCache]: Analyzing trace with hash 490514112, now seen corresponding path program 1 times [2021-11-23 03:31:53,927 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:53,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [365568657] [2021-11-23 03:31:53,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:53,927 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:53,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:53,999 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:31:54,000 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:54,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [365568657] [2021-11-23 03:31:54,000 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [365568657] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:54,001 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:54,001 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:31:54,001 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [932696301] [2021-11-23 03:31:54,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:54,002 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:31:54,002 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:54,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:31:54,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:31:54,003 INFO L87 Difference]: Start difference. First operand 176 states and 211 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 03:31:54,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:54,076 INFO L93 Difference]: Finished difference Result 268 states and 321 transitions. [2021-11-23 03:31:54,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:31:54,077 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 47 [2021-11-23 03:31:54,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:54,080 INFO L225 Difference]: With dead ends: 268 [2021-11-23 03:31:54,081 INFO L226 Difference]: Without dead ends: 149 [2021-11-23 03:31:54,082 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:31:54,084 INFO L933 BasicCegarLoop]: 51 mSDtfsCounter, 17 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:54,084 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [17 Valid, 84 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:31:54,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2021-11-23 03:31:54,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 136. [2021-11-23 03:31:54,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 93 states have (on average 1.2258064516129032) internal successors, (114), 101 states have internal predecessors, (114), 21 states have call successors, (21), 19 states have call predecessors, (21), 21 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) [2021-11-23 03:31:54,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 159 transitions. [2021-11-23 03:31:54,125 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 159 transitions. Word has length 47 [2021-11-23 03:31:54,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:54,125 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 159 transitions. [2021-11-23 03:31:54,125 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 03:31:54,126 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 159 transitions. [2021-11-23 03:31:54,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-23 03:31:54,128 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:54,128 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:54,128 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 03:31:54,129 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:54,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:54,130 INFO L85 PathProgramCache]: Analyzing trace with hash -1042267128, now seen corresponding path program 1 times [2021-11-23 03:31:54,130 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:54,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309745559] [2021-11-23 03:31:54,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:54,131 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:54,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:54,256 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:31:54,257 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:54,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309745559] [2021-11-23 03:31:54,257 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309745559] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:54,257 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:54,258 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:31:54,258 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1992205809] [2021-11-23 03:31:54,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:54,261 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-23 03:31:54,261 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:54,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 03:31:54,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:31:54,262 INFO L87 Difference]: Start difference. First operand 136 states and 159 transitions. Second operand has 7 states, 6 states have (on average 6.0) internal successors, (36), 7 states have internal predecessors, (36), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-23 03:31:54,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:54,442 INFO L93 Difference]: Finished difference Result 253 states and 299 transitions. [2021-11-23 03:31:54,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 03:31:54,444 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 6.0) internal successors, (36), 7 states have internal predecessors, (36), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 49 [2021-11-23 03:31:54,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:54,448 INFO L225 Difference]: With dead ends: 253 [2021-11-23 03:31:54,448 INFO L226 Difference]: Without dead ends: 183 [2021-11-23 03:31:54,449 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2021-11-23 03:31:54,450 INFO L933 BasicCegarLoop]: 39 mSDtfsCounter, 68 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:54,451 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 135 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:31:54,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2021-11-23 03:31:54,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 183. [2021-11-23 03:31:54,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 124 states have (on average 1.1935483870967742) internal successors, (148), 135 states have internal predecessors, (148), 29 states have call successors, (29), 27 states have call predecessors, (29), 29 states have return successors, (35), 29 states have call predecessors, (35), 29 states have call successors, (35) [2021-11-23 03:31:54,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 212 transitions. [2021-11-23 03:31:54,491 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 212 transitions. Word has length 49 [2021-11-23 03:31:54,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:54,493 INFO L470 AbstractCegarLoop]: Abstraction has 183 states and 212 transitions. [2021-11-23 03:31:54,496 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 6.0) internal successors, (36), 7 states have internal predecessors, (36), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-23 03:31:54,496 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 212 transitions. [2021-11-23 03:31:54,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-11-23 03:31:54,499 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:54,499 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:54,499 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-23 03:31:54,500 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:54,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:54,501 INFO L85 PathProgramCache]: Analyzing trace with hash 490448025, now seen corresponding path program 1 times [2021-11-23 03:31:54,501 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:54,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36809780] [2021-11-23 03:31:54,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:54,501 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:54,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:54,616 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:31:54,616 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:54,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36809780] [2021-11-23 03:31:54,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36809780] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:31:54,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:31:54,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:31:54,618 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [279138228] [2021-11-23 03:31:54,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:31:54,619 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-23 03:31:54,619 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:31:54,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 03:31:54,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:31:54,620 INFO L87 Difference]: Start difference. First operand 183 states and 212 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-23 03:31:54,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:31:54,825 INFO L93 Difference]: Finished difference Result 311 states and 361 transitions. [2021-11-23 03:31:54,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 03:31:54,827 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 3 states have call successors, (6) Word has length 53 [2021-11-23 03:31:54,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:31:54,830 INFO L225 Difference]: With dead ends: 311 [2021-11-23 03:31:54,830 INFO L226 Difference]: Without dead ends: 195 [2021-11-23 03:31:54,831 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2021-11-23 03:31:54,833 INFO L933 BasicCegarLoop]: 28 mSDtfsCounter, 53 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:31:54,834 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [55 Valid, 107 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:31:54,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2021-11-23 03:31:54,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 183. [2021-11-23 03:31:54,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 124 states have (on average 1.185483870967742) internal successors, (147), 135 states have internal predecessors, (147), 29 states have call successors, (29), 27 states have call predecessors, (29), 29 states have return successors, (35), 29 states have call predecessors, (35), 29 states have call successors, (35) [2021-11-23 03:31:54,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 211 transitions. [2021-11-23 03:31:54,866 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 211 transitions. Word has length 53 [2021-11-23 03:31:54,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:31:54,870 INFO L470 AbstractCegarLoop]: Abstraction has 183 states and 211 transitions. [2021-11-23 03:31:54,871 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-23 03:31:54,871 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 211 transitions. [2021-11-23 03:31:54,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-23 03:31:54,872 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:31:54,872 INFO L514 BasicCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:31:54,873 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-23 03:31:54,873 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:31:54,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:31:54,874 INFO L85 PathProgramCache]: Analyzing trace with hash 74301078, now seen corresponding path program 1 times [2021-11-23 03:31:54,874 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:31:54,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1264879818] [2021-11-23 03:31:54,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:54,875 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:31:54,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:55,052 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 03:31:55,053 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:31:55,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1264879818] [2021-11-23 03:31:55,053 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1264879818] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:31:55,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [305756805] [2021-11-23 03:31:55,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:31:55,054 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:31:55,054 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:31:55,056 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:31:55,078 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:31:55,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:31:55,191 INFO L263 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 28 conjunts are in the unsatisfiable core [2021-11-23 03:31:55,199 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:31:55,621 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 13 proven. 13 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 03:31:55,622 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:31:56,824 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 03:31:56,825 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [305756805] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:31:56,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [535607671] [2021-11-23 03:31:56,847 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2021-11-23 03:31:56,847 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:31:56,852 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:31:56,859 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:31:56,859 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:32:14,884 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 330 for LOIs [2021-11-23 03:32:15,084 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 33 for LOIs [2021-11-23 03:32:15,819 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 26 for LOIs [2021-11-23 03:32:15,823 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2021-11-23 03:32:15,828 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:32:28,833 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5268#(and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= 0 |old(~pumpRunning~0)|) (<= 0 ~systemActive~0) (<= 0 |old(~switchedOnBeforeTS~0)|) (<= |timeShift_isHighWaterLevel_~retValue_acc~11#1| 1) (= ~head~0.offset 0) (<= 2 ~waterLevel~0) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |old(~switchedOnBeforeTS~0)| 0) (<= |timeShift_isHighWaterLevel_~tmp~6#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~8#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 1) (<= |old(~pumpRunning~0)| 0) (<= 0 |timeShift_isHighWaterLevel_~tmp~6#1|) (<= 2 |old(~waterLevel~0)|) (<= ~methaneLevelCritical~0 0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (<= |timeShift_isHighWaterSensorDry_~retValue_acc~8#1| 0) (<= 0 ~head~0.base) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~11#1|) (<= |timeShift_processEnvironment_~tmp~5#1| 1) (<= ~head~0.base 0) (= |#NULL.offset| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483647) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (<= 0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:32:28,833 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:32:28,833 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:32:28,833 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 9] total 17 [2021-11-23 03:32:28,834 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604961088] [2021-11-23 03:32:28,834 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:32:28,835 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-11-23 03:32:28,835 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:28,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-11-23 03:32:28,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=1662, Unknown=0, NotChecked=0, Total=1892 [2021-11-23 03:32:28,837 INFO L87 Difference]: Start difference. First operand 183 states and 211 transitions. Second operand has 17 states, 14 states have (on average 4.857142857142857) internal successors, (68), 16 states have internal predecessors, (68), 6 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2021-11-23 03:32:30,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:30,135 INFO L93 Difference]: Finished difference Result 422 states and 508 transitions. [2021-11-23 03:32:30,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-11-23 03:32:30,136 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 14 states have (on average 4.857142857142857) internal successors, (68), 16 states have internal predecessors, (68), 6 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) Word has length 58 [2021-11-23 03:32:30,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:30,139 INFO L225 Difference]: With dead ends: 422 [2021-11-23 03:32:30,139 INFO L226 Difference]: Without dead ends: 340 [2021-11-23 03:32:30,142 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 149 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1443 ImplicationChecksByTransitivity, 13.9s TimeCoverageRelationStatistics Valid=530, Invalid=3760, Unknown=0, NotChecked=0, Total=4290 [2021-11-23 03:32:30,143 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 390 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 552 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 418 SdHoareTripleChecker+Invalid, 803 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 552 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:30,143 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [393 Valid, 418 Invalid, 803 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 552 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-23 03:32:30,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340 states. [2021-11-23 03:32:30,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340 to 204. [2021-11-23 03:32:30,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 137 states have (on average 1.1897810218978102) internal successors, (163), 151 states have internal predecessors, (163), 33 states have call successors, (33), 31 states have call predecessors, (33), 33 states have return successors, (42), 33 states have call predecessors, (42), 33 states have call successors, (42) [2021-11-23 03:32:30,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 238 transitions. [2021-11-23 03:32:30,172 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 238 transitions. Word has length 58 [2021-11-23 03:32:30,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:30,172 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 238 transitions. [2021-11-23 03:32:30,173 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 14 states have (on average 4.857142857142857) internal successors, (68), 16 states have internal predecessors, (68), 6 states have call successors, (16), 6 states have call predecessors, (16), 8 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2021-11-23 03:32:30,173 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 238 transitions. [2021-11-23 03:32:30,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2021-11-23 03:32:30,174 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:30,175 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:30,211 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:32:30,390 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 03:32:30,391 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:30,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:30,391 INFO L85 PathProgramCache]: Analyzing trace with hash 923864811, now seen corresponding path program 1 times [2021-11-23 03:32:30,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:30,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653096762] [2021-11-23 03:32:30,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:30,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:30,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:30,484 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 33 proven. 1 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-11-23 03:32:30,484 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:30,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653096762] [2021-11-23 03:32:30,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653096762] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:32:30,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1806548149] [2021-11-23 03:32:30,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:30,485 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:32:30,486 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:32:30,486 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:32:30,498 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:32:30,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:30,613 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-23 03:32:30,618 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:32:30,967 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 53 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 03:32:30,968 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:32:31,379 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 45 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-23 03:32:31,380 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1806548149] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:32:31,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [865409536] [2021-11-23 03:32:31,383 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2021-11-23 03:32:31,383 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:32:31,384 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:32:31,384 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:32:31,384 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:32:36,620 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 53 for LOIs [2021-11-23 03:32:36,633 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2021-11-23 03:32:37,037 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 21 for LOIs [2021-11-23 03:32:37,040 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2021-11-23 03:32:37,043 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:32:41,163 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6772#(and (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= 0 ~systemActive~0) (= ~methaneLevelCritical~0 0) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (<= |old(~pumpRunning~0)| 2147483647) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2147483647) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483647) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |timeShift_getWaterLevel_~retValue_acc~7#1| 2147483648)) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:32:41,164 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:32:41,164 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:32:41,164 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 9, 9] total 18 [2021-11-23 03:32:41,164 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [658493015] [2021-11-23 03:32:41,164 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:32:41,165 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2021-11-23 03:32:41,165 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:41,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2021-11-23 03:32:41,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=247, Invalid=1733, Unknown=0, NotChecked=0, Total=1980 [2021-11-23 03:32:41,167 INFO L87 Difference]: Start difference. First operand 204 states and 238 transitions. Second operand has 18 states, 18 states have (on average 4.611111111111111) internal successors, (83), 18 states have internal predecessors, (83), 8 states have call successors, (17), 5 states have call predecessors, (17), 6 states have return successors, (17), 8 states have call predecessors, (17), 8 states have call successors, (17) [2021-11-23 03:32:42,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:42,537 INFO L93 Difference]: Finished difference Result 588 states and 794 transitions. [2021-11-23 03:32:42,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-23 03:32:42,538 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 4.611111111111111) internal successors, (83), 18 states have internal predecessors, (83), 8 states have call successors, (17), 5 states have call predecessors, (17), 6 states have return successors, (17), 8 states have call predecessors, (17), 8 states have call successors, (17) Word has length 72 [2021-11-23 03:32:42,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:42,546 INFO L225 Difference]: With dead ends: 588 [2021-11-23 03:32:42,547 INFO L226 Difference]: Without dead ends: 414 [2021-11-23 03:32:42,550 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 196 SyntacticMatches, 0 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1468 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=582, Invalid=4248, Unknown=0, NotChecked=0, Total=4830 [2021-11-23 03:32:42,551 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 328 mSDsluCounter, 434 mSDsCounter, 0 mSdLazyCounter, 729 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 330 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 966 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 729 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:42,551 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [330 Valid, 433 Invalid, 966 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [237 Valid, 729 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-23 03:32:42,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2021-11-23 03:32:42,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 278. [2021-11-23 03:32:42,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 187 states have (on average 1.1818181818181819) internal successors, (221), 207 states have internal predecessors, (221), 46 states have call successors, (46), 42 states have call predecessors, (46), 44 states have return successors, (69), 46 states have call predecessors, (69), 46 states have call successors, (69) [2021-11-23 03:32:42,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 336 transitions. [2021-11-23 03:32:42,610 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 336 transitions. Word has length 72 [2021-11-23 03:32:42,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:42,611 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 336 transitions. [2021-11-23 03:32:42,611 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 4.611111111111111) internal successors, (83), 18 states have internal predecessors, (83), 8 states have call successors, (17), 5 states have call predecessors, (17), 6 states have return successors, (17), 8 states have call predecessors, (17), 8 states have call successors, (17) [2021-11-23 03:32:42,612 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 336 transitions. [2021-11-23 03:32:42,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2021-11-23 03:32:42,613 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:42,614 INFO L514 BasicCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:42,652 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:32:42,828 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-11-23 03:32:42,828 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:42,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:42,829 INFO L85 PathProgramCache]: Analyzing trace with hash 1021388440, now seen corresponding path program 1 times [2021-11-23 03:32:42,829 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:42,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [19762433] [2021-11-23 03:32:42,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:42,829 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:42,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:42,902 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-11-23 03:32:42,903 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:42,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [19762433] [2021-11-23 03:32:42,903 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [19762433] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:42,903 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:42,904 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 03:32:42,904 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183183877] [2021-11-23 03:32:42,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:42,905 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:32:42,905 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:42,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:32:42,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:32:42,906 INFO L87 Difference]: Start difference. First operand 278 states and 336 transitions. Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-23 03:32:42,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:42,985 INFO L93 Difference]: Finished difference Result 390 states and 470 transitions. [2021-11-23 03:32:42,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 03:32:42,986 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) Word has length 78 [2021-11-23 03:32:42,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:42,987 INFO L225 Difference]: With dead ends: 390 [2021-11-23 03:32:42,987 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:32:42,988 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:32:42,990 INFO L933 BasicCegarLoop]: 54 mSDtfsCounter, 35 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:42,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 83 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:32:42,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:32:42,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:32:42,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:32:42,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:32:42,993 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 78 [2021-11-23 03:32:42,993 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:42,994 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:32:42,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-23 03:32:42,994 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:32:42,994 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:32:42,997 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:32:42,998 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-23 03:32:43,000 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:32:49,466 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 768 774) no Hoare annotation was computed. [2021-11-23 03:32:49,467 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 768 774) the Hoare annotation is: true [2021-11-23 03:32:49,467 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 665 676) the Hoare annotation is: true [2021-11-23 03:32:49,467 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 665 676) no Hoare annotation was computed. [2021-11-23 03:32:49,467 INFO L854 garLoopResultBuilder]: At program point L795(line 795) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse1))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse1 (not (< |old(~waterLevel~0)| 3))) (or .cse0 (not (= |old(~waterLevel~0)| 1))) (not (= 0 ~systemActive~0))))) [2021-11-23 03:32:49,468 INFO L854 garLoopResultBuilder]: At program point L795-1(lines 776 800) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not .cse6)) (.cse0 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse1 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) .cse4 (not (= |old(~waterLevel~0)| 1))) (let ((.cse5 (= 2 ~waterLevel~0))) (or .cse4 (and .cse0 .cse1 .cse5 .cse3) (and (not .cse2) .cse5) (not (= |old(~waterLevel~0)| 2)))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) .cse3) .cse6 (not (< |old(~waterLevel~0)| 3))) (not (= 0 ~systemActive~0))))) [2021-11-23 03:32:49,468 INFO L858 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2021-11-23 03:32:49,468 INFO L854 garLoopResultBuilder]: At program point L755-1(lines 755 761) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse7 (not .cse6)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse1 (or .cse7 .cse3))) (let ((.cse4 (and .cse5 .cse0 .cse1)) (.cse2 (= ~pumpRunning~0 0))) (and (or (not (= |old(~waterLevel~0)| 2)) (and .cse0 .cse1) (and (not .cse2) .cse3)) (or .cse4 (not .cse5)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse3)) .cse0) .cse6 .cse4 (not (< |old(~waterLevel~0)| 3))) (or (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse2 (= ~waterLevel~0 1) .cse0) .cse7 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse5))))))) [2021-11-23 03:32:49,469 INFO L854 garLoopResultBuilder]: At program point L784(lines 784 792) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or (= |old(~pumpRunning~0)| 0) (not (< |old(~waterLevel~0)| 3))) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2))) (or (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse0 (= ~waterLevel~0 1) .cse1) (not (= |old(~waterLevel~0)| 1))) (not (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,469 INFO L854 garLoopResultBuilder]: At program point L780(lines 780 797) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse5)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (let ((.cse6 (= ~pumpRunning~0 0))) (or (and .cse6 .cse2) (and (not .cse6) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse2)))))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= |old(~waterLevel~0)| 2))) (or (and .cse4 (= ~waterLevel~0 1) .cse3) .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse5 (and .cse1 .cse4 .cse3) (not (< |old(~waterLevel~0)| 3))) (not (= 0 ~systemActive~0))))) [2021-11-23 03:32:49,469 INFO L854 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse0 (not .cse6)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse1 .cse4 (or .cse0 .cse7))) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse1 (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2))) (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse2 .cse3 (= ~waterLevel~0 1) .cse4))) (or .cse5 (not .cse1)) (or .cse6 .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse7)) .cse3 .cse4) (not (< |old(~waterLevel~0)| 3))))))) [2021-11-23 03:32:49,470 INFO L858 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2021-11-23 03:32:49,470 INFO L854 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (and (or (= |old(~pumpRunning~0)| 0) (not (< |old(~waterLevel~0)| 3))) (not (= |old(~waterLevel~0)| 1)) (not (= |old(~waterLevel~0)| 2)) (not (= 0 ~systemActive~0))) [2021-11-23 03:32:49,470 INFO L858 garLoopResultBuilder]: For program point L748-2(lines 744 766) no Hoare annotation was computed. [2021-11-23 03:32:49,471 INFO L854 garLoopResultBuilder]: At program point L922(line 922) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse0 .cse3)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (and .cse0 (= ~waterLevel~0 1)) (not (= |old(~waterLevel~0)| 1))) (or .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse1 (not (< |old(~waterLevel~0)| 3))) (or (not .cse2) (and (= ~pumpRunning~0 0) .cse3) (not (= |old(~waterLevel~0)| 2)))))) [2021-11-23 03:32:49,471 INFO L854 garLoopResultBuilder]: At program point L922-1(line 922) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__2_#t~ret49#1|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse2 .cse3 .cse4)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1 (not (< |old(~waterLevel~0)| 3))) (or .cse1 (not (= 0 ~systemActive~0))) (or (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 (= ~waterLevel~0 1))) (or (not .cse0) (not (= |old(~waterLevel~0)| 2)) (and (= ~pumpRunning~0 0) .cse3 .cse4))))) [2021-11-23 03:32:49,471 INFO L854 garLoopResultBuilder]: At program point L790(line 790) the Hoare annotation is: (let ((.cse0 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse1 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or (= |old(~pumpRunning~0)| 0) (not (< |old(~waterLevel~0)| 3))) (or (not (= |old(~waterLevel~0)| 2)) (and .cse0 .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3)) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (not (= |old(~waterLevel~0)| 1))) (not (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,472 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 741 767) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse0 .cse3)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (and .cse0 (= ~waterLevel~0 1)) (not (= |old(~waterLevel~0)| 1))) (or .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse1 (not (< |old(~waterLevel~0)| 3))) (or (not .cse2) (and (= ~pumpRunning~0 0) .cse3) (not (= |old(~waterLevel~0)| 2)))))) [2021-11-23 03:32:49,472 INFO L858 garLoopResultBuilder]: For program point L939(lines 939 949) no Hoare annotation was computed. [2021-11-23 03:32:49,472 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 741 767) no Hoare annotation was computed. [2021-11-23 03:32:49,472 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-11-23 03:32:49,472 INFO L858 garLoopResultBuilder]: For program point L935(lines 935 952) no Hoare annotation was computed. [2021-11-23 03:32:49,473 INFO L854 garLoopResultBuilder]: At program point L935-1(lines 927 955) the Hoare annotation is: (let ((.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= 0 ~systemActive~0)) (.cse2 (not .cse5)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse1 (or .cse2 .cse4))) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0))) (and (or .cse0 (not .cse1)) (or .cse2 (and .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse1) (or .cse0 .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse4)) .cse3) (not (< |old(~waterLevel~0)| 3))) (let ((.cse6 (= ~pumpRunning~0 0))) (or .cse2 (not (= |old(~waterLevel~0)| 1)) (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse6 .cse3 (= ~waterLevel~0 1)) (and .cse6 .cse1 (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2))))))))) [2021-11-23 03:32:49,473 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2021-11-23 03:32:49,473 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 61 90) the Hoare annotation is: true [2021-11-23 03:32:49,473 INFO L861 garLoopResultBuilder]: At program point L86(lines 61 90) the Hoare annotation is: true [2021-11-23 03:32:49,473 INFO L858 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2021-11-23 03:32:49,473 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2021-11-23 03:32:49,473 INFO L861 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2021-11-23 03:32:49,473 INFO L861 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2021-11-23 03:32:49,473 INFO L861 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2021-11-23 03:32:49,474 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-11-23 03:32:49,474 INFO L854 garLoopResultBuilder]: At program point L151(lines 151 158) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) [2021-11-23 03:32:49,474 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-11-23 03:32:49,474 INFO L861 garLoopResultBuilder]: At program point L151-2(lines 151 158) the Hoare annotation is: true [2021-11-23 03:32:49,474 INFO L854 garLoopResultBuilder]: At program point L597-1(lines 597 603) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse0 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0) (and (not (= ~pumpRunning~0 0)) .cse0 (< ~waterLevel~0 3)) (and .cse0 (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,474 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse0 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0) (and (not (= ~pumpRunning~0 0)) .cse0 (< ~waterLevel~0 3)) (and .cse0 (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,475 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0) (and (not (= ~pumpRunning~0 0)) .cse0 (< ~waterLevel~0 3)) (and .cse0 (= ~waterLevel~0 1)) (and .cse0 (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,475 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:32:49,475 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-11-23 03:32:49,475 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:32:49,475 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse0 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0) (and (not (= ~pumpRunning~0 0)) .cse0 (< ~waterLevel~0 3)) (and .cse0 (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,475 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-11-23 03:32:49,475 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-11-23 03:32:49,476 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-11-23 03:32:49,476 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-11-23 03:32:49,476 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse0 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0) (and (not (= ~pumpRunning~0 0)) .cse0 (< ~waterLevel~0 3)) (and .cse0 (= 0 ~systemActive~0)))) [2021-11-23 03:32:49,476 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 653 664) no Hoare annotation was computed. [2021-11-23 03:32:49,476 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 653 664) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (= ~pumpRunning~0 0) .cse0 (not (< |old(~waterLevel~0)| 3))) (or (and (not (= |old(~waterLevel~0)| 1)) (not (= |old(~waterLevel~0)| 2))) .cse0) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-11-23 03:32:49,476 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 828 836) no Hoare annotation was computed. [2021-11-23 03:32:49,476 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 828 836) the Hoare annotation is: true [2021-11-23 03:32:49,479 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:49,481 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:32:49,524 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:32:49 BoogieIcfgContainer [2021-11-23 03:32:49,525 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:32:49,525 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:32:49,525 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:32:49,526 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:32:49,538 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:31:50" (3/4) ... [2021-11-23 03:32:49,542 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:32:49,548 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:32:49,549 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:32:49,549 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:32:49,549 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:32:49,549 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:32:49,549 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-23 03:32:49,560 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2021-11-23 03:32:49,561 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2021-11-23 03:32:49,562 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2021-11-23 03:32:49,563 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:32:49,563 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:32:49,564 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:32:49,565 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:32:49,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(pumpRunning) == 0 || ((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) < 3)) && (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) || !(0 == systemActive))) && (!(\old(waterLevel) == 1) || ((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && waterLevel == 1))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) [2021-11-23 03:32:49,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) == 2) || (pumpRunning == switchedOnBeforeTS && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel)) && (((0 == systemActive && pumpRunning == switchedOnBeforeTS) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS) || \old(pumpRunning) == 0) || ((0 == systemActive && pumpRunning == switchedOnBeforeTS) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || !(\old(waterLevel) < 3))) && (((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && 0 == systemActive)) [2021-11-23 03:32:49,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((0 == systemActive && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || \old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(\old(waterLevel) < 3))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && tmp == waterLevel) && waterLevel == 1)) || ((pumpRunning == 0 && 0 == systemActive) && !(tmp == 2))) [2021-11-23 03:32:49,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1))) && ((\old(pumpRunning) == 0 || ((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) < 3))) && !(0 == systemActive) [2021-11-23 03:32:49,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((\old(pumpRunning) == 0 || !(\old(waterLevel) < 3)) && !(\old(waterLevel) == 1)) && !(\old(waterLevel) == 2)) && !(0 == systemActive) [2021-11-23 03:32:49,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) && (((!(\old(pumpRunning) == 0) || (((tmp <= 0 && 0 < tmp + 1) && 2 == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (!(pumpRunning == 0) && 2 == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS) || \old(pumpRunning) == 0) || !(\old(waterLevel) < 3))) && !(0 == systemActive) [2021-11-23 03:32:49,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((\old(pumpRunning) == 0 || !(\old(waterLevel) < 3)) && (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) || !(\old(waterLevel) == 2))) && (((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(waterLevel) == 1))) && !(0 == systemActive) [2021-11-23 03:32:49,623 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:32:49,624 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:32:49,625 INFO L158 Benchmark]: Toolchain (without parser) took 61053.44ms. Allocated memory was 107.0MB in the beginning and 394.3MB in the end (delta: 287.3MB). Free memory was 72.1MB in the beginning and 256.1MB in the end (delta: -183.9MB). Peak memory consumption was 101.4MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,625 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 75.5MB. Free memory was 51.4MB in the beginning and 51.3MB in the end (delta: 29.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:32:49,626 INFO L158 Benchmark]: CACSL2BoogieTranslator took 533.74ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 75.7MB in the end (delta: -3.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,626 INFO L158 Benchmark]: Boogie Procedure Inliner took 98.84ms. Allocated memory is still 107.0MB. Free memory was 75.7MB in the beginning and 73.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,627 INFO L158 Benchmark]: Boogie Preprocessor took 69.94ms. Allocated memory is still 107.0MB. Free memory was 73.2MB in the beginning and 71.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,627 INFO L158 Benchmark]: RCFGBuilder took 795.52ms. Allocated memory is still 107.0MB. Free memory was 71.4MB in the beginning and 50.6MB in the end (delta: 20.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,628 INFO L158 Benchmark]: TraceAbstraction took 59435.81ms. Allocated memory was 107.0MB in the beginning and 394.3MB in the end (delta: 287.3MB). Free memory was 50.1MB in the beginning and 261.3MB in the end (delta: -211.2MB). Peak memory consumption was 211.2MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,628 INFO L158 Benchmark]: Witness Printer took 98.71ms. Allocated memory is still 394.3MB. Free memory was 261.3MB in the beginning and 256.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-23 03:32:49,631 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 75.5MB. Free memory was 51.4MB in the beginning and 51.3MB in the end (delta: 29.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 533.74ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 75.7MB in the end (delta: -3.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 98.84ms. Allocated memory is still 107.0MB. Free memory was 75.7MB in the beginning and 73.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 69.94ms. Allocated memory is still 107.0MB. Free memory was 73.2MB in the beginning and 71.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 795.52ms. Allocated memory is still 107.0MB. Free memory was 71.4MB in the beginning and 50.6MB in the end (delta: 20.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 59435.81ms. Allocated memory was 107.0MB in the beginning and 394.3MB in the end (delta: 287.3MB). Free memory was 50.1MB in the beginning and 261.3MB in the end (delta: -211.2MB). Peak memory consumption was 211.2MB. Max. memory is 16.1GB. * Witness Printer took 98.71ms. Allocated memory is still 394.3MB. Free memory was 261.3MB in the beginning and 256.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 59.3s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1350 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1326 mSDsluCounter, 2252 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1993 mSDsCounter, 691 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2575 IncrementalHoareTripleChecker+Invalid, 3266 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 691 mSolverCounterUnsat, 639 mSDtfsCounter, 2575 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 590 GetRequests, 384 SyntacticMatches, 1 SemanticMatches, 205 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3051 ImplicationChecksByTransitivity, 19.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=278occurred in iteration=11, InterpolantAutomatonStates: 142, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 501 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 654 PreInvPairs, 802 NumberOfFragments, 1185 HoareAnnotationTreeSize, 654 FomulaSimplifications, 39044 FormulaSimplificationTreeSizeReduction, 2.9s HoareSimplificationTime, 31 FomulaSimplificationsInter, 44828 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 655 NumberOfCodeBlocks, 655 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 769 ConstructedInterpolants, 0 QuantifiedInterpolants, 2641 SizeOfPredicates, 16 NumberOfNonLiveVariables, 925 ConjunctsInSsa, 46 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 402/436 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: ((((0 == systemActive && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (tmp == waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((0 == systemActive && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || \old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(\old(waterLevel) < 3))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && tmp == waterLevel) && waterLevel == 1)) || ((pumpRunning == 0 && 0 == systemActive) && !(tmp == 2))) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((\old(pumpRunning) == 0 || !(\old(waterLevel) < 3)) && !(\old(waterLevel) == 1)) && !(\old(waterLevel) == 2)) && !(0 == systemActive) - InvariantResult [Line: 784]: Loop Invariant Derived loop invariant: (((\old(pumpRunning) == 0 || !(\old(waterLevel) < 3)) && (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) || !(\old(waterLevel) == 2))) && (((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(waterLevel) == 1))) && !(0 == systemActive) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 776]: Loop Invariant Derived loop invariant: ((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) && (((!(\old(pumpRunning) == 0) || (((tmp <= 0 && 0 < tmp + 1) && 2 == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (!(pumpRunning == 0) && 2 == waterLevel)) || !(\old(waterLevel) == 2))) && ((((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS) || \old(pumpRunning) == 0) || !(\old(waterLevel) < 3))) && !(0 == systemActive) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1))) && ((\old(pumpRunning) == 0 || ((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) < 3))) && !(0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && waterLevel == 1) || (2 == waterLevel && splverifierCounter == 0)) || ((!(pumpRunning == 0) && splverifierCounter == 0) && waterLevel < 3)) || (splverifierCounter == 0 && 0 == systemActive) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((\old(pumpRunning) == 0 || ((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) < 3)) && (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) || !(0 == systemActive))) && (!(\old(waterLevel) == 1) || ((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && waterLevel == 1))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 597]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && waterLevel == 1) || (2 == waterLevel && splverifierCounter == 0)) || ((!(pumpRunning == 0) && splverifierCounter == 0) && waterLevel < 3)) || (splverifierCounter == 0 && 0 == systemActive) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((tmp == systemActive && pumpRunning == 0) && tmp == 1) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 755]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) == 2) || (pumpRunning == switchedOnBeforeTS && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel)) && (((0 == systemActive && pumpRunning == switchedOnBeforeTS) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS) || \old(pumpRunning) == 0) || ((0 == systemActive && pumpRunning == switchedOnBeforeTS) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || !(\old(waterLevel) < 3))) && (((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && 0 == systemActive)) - InvariantResult [Line: 61]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-23 03:32:49,711 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80082dac-98ee-4bb7-8c74-9fed83e1880c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE