./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:27:03,266 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:27:03,269 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:27:03,306 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:27:03,307 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:27:03,308 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:27:03,311 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:27:03,313 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:27:03,316 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:27:03,318 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:27:03,319 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:27:03,321 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:27:03,322 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:27:03,324 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:27:03,326 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:27:03,329 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:27:03,330 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:27:03,332 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:27:03,335 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:27:03,338 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:27:03,341 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:27:03,343 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:27:03,345 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:27:03,347 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:27:03,352 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:27:03,352 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:27:03,353 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:27:03,355 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:27:03,356 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:27:03,357 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:27:03,358 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:27:03,359 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:27:03,361 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:27:03,362 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:27:03,364 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:27:03,364 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:27:03,366 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:27:03,366 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:27:03,367 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:27:03,369 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:27:03,370 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:27:03,371 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:27:03,403 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:27:03,404 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:27:03,405 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:27:03,405 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:27:03,406 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:27:03,406 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:27:03,407 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:27:03,407 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:27:03,407 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:27:03,408 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:27:03,408 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:27:03,409 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:27:03,409 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:27:03,409 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:27:03,410 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:27:03,410 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:27:03,411 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:27:03,411 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:27:03,412 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:27:03,412 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:27:03,413 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:27:03,413 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:27:03,414 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:27:03,414 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:27:03,414 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:27:03,415 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:27:03,415 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:27:03,416 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:27:03,416 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:27:03,416 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:27:03,417 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:27:03,417 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:27:03,417 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:27:03,418 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:27:03,418 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:27:03,418 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:27:03,419 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:27:03,419 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:27:03,419 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:27:03,420 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:27:03,420 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:27:03,420 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2021-11-23 03:27:03,748 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:27:03,790 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:27:03,793 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:27:03,795 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:27:03,796 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:27:03,798 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-11-23 03:27:03,889 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/data/d6ddfa6c1/71047232c5714d7c87088929c67df690/FLAG3461bc7a1 [2021-11-23 03:27:04,515 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:27:04,516 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-11-23 03:27:04,534 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/data/d6ddfa6c1/71047232c5714d7c87088929c67df690/FLAG3461bc7a1 [2021-11-23 03:27:04,786 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/data/d6ddfa6c1/71047232c5714d7c87088929c67df690 [2021-11-23 03:27:04,789 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:27:04,791 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:27:04,793 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:27:04,793 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:27:04,809 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:27:04,810 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:27:04" (1/1) ... [2021-11-23 03:27:04,811 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3cdc222 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:04, skipping insertion in model container [2021-11-23 03:27:04,812 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:27:04" (1/1) ... [2021-11-23 03:27:04,822 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:27:04,884 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:27:05,246 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-11-23 03:27:05,293 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:27:05,304 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:27:05,362 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-11-23 03:27:05,391 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:27:05,415 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:27:05,416 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05 WrapperNode [2021-11-23 03:27:05,416 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:27:05,417 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:27:05,418 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:27:05,418 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:27:05,426 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,456 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,519 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 291 [2021-11-23 03:27:05,520 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:27:05,521 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:27:05,521 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:27:05,522 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:27:05,533 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,533 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,537 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,538 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,547 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,554 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,557 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,561 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:27:05,563 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:27:05,563 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:27:05,563 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:27:05,564 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (1/1) ... [2021-11-23 03:27:05,574 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:27:05,601 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:27:05,633 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:27:05,649 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:27:05,709 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:27:05,709 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:27:05,709 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:27:05,709 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:27:05,710 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:27:05,710 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:27:05,710 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:27:05,710 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:27:05,710 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:27:05,710 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:27:05,710 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:27:05,711 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-23 03:27:05,711 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-23 03:27:05,711 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-23 03:27:05,711 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-23 03:27:05,711 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-23 03:27:05,711 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-23 03:27:05,711 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:27:05,711 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:27:05,712 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:27:05,712 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:27:05,712 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:27:05,797 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:27:05,799 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:27:06,317 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:27:06,447 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:27:06,447 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:27:06,450 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:27:06 BoogieIcfgContainer [2021-11-23 03:27:06,451 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:27:06,453 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:27:06,453 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:27:06,465 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:27:06,466 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:27:04" (1/3) ... [2021-11-23 03:27:06,467 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@35d7ac47 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:27:06, skipping insertion in model container [2021-11-23 03:27:06,467 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:27:05" (2/3) ... [2021-11-23 03:27:06,468 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@35d7ac47 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:27:06, skipping insertion in model container [2021-11-23 03:27:06,468 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:27:06" (3/3) ... [2021-11-23 03:27:06,469 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2021-11-23 03:27:06,476 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:27:06,478 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:27:06,539 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:27:06,547 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:27:06,547 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:27:06,575 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 57 states have internal predecessors, (67), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-11-23 03:27:06,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 03:27:06,583 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:06,584 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:06,585 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:06,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:06,592 INFO L85 PathProgramCache]: Analyzing trace with hash 534369434, now seen corresponding path program 1 times [2021-11-23 03:27:06,620 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:06,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864633548] [2021-11-23 03:27:06,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:06,622 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:06,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:06,853 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:27:06,854 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:06,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864633548] [2021-11-23 03:27:06,855 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864633548] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:06,855 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:06,856 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:27:06,858 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [312539651] [2021-11-23 03:27:06,859 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:06,864 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:27:06,865 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:06,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:27:06,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:27:06,904 INFO L87 Difference]: Start difference. First operand has 74 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 57 states have internal predecessors, (67), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:06,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:06,993 INFO L93 Difference]: Finished difference Result 146 states and 203 transitions. [2021-11-23 03:27:06,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:27:06,997 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2021-11-23 03:27:06,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:07,009 INFO L225 Difference]: With dead ends: 146 [2021-11-23 03:27:07,009 INFO L226 Difference]: Without dead ends: 69 [2021-11-23 03:27:07,014 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:27:07,019 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:07,021 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 80 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:27:07,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2021-11-23 03:27:07,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2021-11-23 03:27:07,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 43 states have (on average 1.372093023255814) internal successors, (59), 53 states have internal predecessors, (59), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-23 03:27:07,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 92 transitions. [2021-11-23 03:27:07,079 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 92 transitions. Word has length 21 [2021-11-23 03:27:07,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:07,080 INFO L470 AbstractCegarLoop]: Abstraction has 69 states and 92 transitions. [2021-11-23 03:27:07,081 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:07,081 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 92 transitions. [2021-11-23 03:27:07,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2021-11-23 03:27:07,085 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:07,085 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:07,086 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:27:07,086 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:07,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:07,087 INFO L85 PathProgramCache]: Analyzing trace with hash 264026590, now seen corresponding path program 1 times [2021-11-23 03:27:07,088 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:07,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2067230202] [2021-11-23 03:27:07,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:07,089 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:07,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:07,213 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:27:07,214 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:07,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2067230202] [2021-11-23 03:27:07,215 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2067230202] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:07,215 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:07,215 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:27:07,215 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839694169] [2021-11-23 03:27:07,216 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:07,217 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:27:07,217 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:07,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:27:07,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:27:07,219 INFO L87 Difference]: Start difference. First operand 69 states and 92 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:07,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:07,316 INFO L93 Difference]: Finished difference Result 110 states and 146 transitions. [2021-11-23 03:27:07,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:27:07,318 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2021-11-23 03:27:07,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:07,322 INFO L225 Difference]: With dead ends: 110 [2021-11-23 03:27:07,324 INFO L226 Difference]: Without dead ends: 61 [2021-11-23 03:27:07,325 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:27:07,328 INFO L933 BasicCegarLoop]: 66 mSDtfsCounter, 14 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:07,328 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [18 Valid, 115 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:27:07,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2021-11-23 03:27:07,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2021-11-23 03:27:07,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 38 states have (on average 1.394736842105263) internal successors, (53), 48 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-23 03:27:07,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 81 transitions. [2021-11-23 03:27:07,345 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 81 transitions. Word has length 22 [2021-11-23 03:27:07,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:07,345 INFO L470 AbstractCegarLoop]: Abstraction has 61 states and 81 transitions. [2021-11-23 03:27:07,345 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:07,346 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 81 transitions. [2021-11-23 03:27:07,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-11-23 03:27:07,348 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:07,348 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:07,348 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:27:07,349 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:07,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:07,350 INFO L85 PathProgramCache]: Analyzing trace with hash 729428829, now seen corresponding path program 1 times [2021-11-23 03:27:07,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:07,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882872385] [2021-11-23 03:27:07,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:07,351 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:07,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:07,501 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:27:07,502 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:07,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882872385] [2021-11-23 03:27:07,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [882872385] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:07,503 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:07,503 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:27:07,503 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1673073488] [2021-11-23 03:27:07,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:07,504 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:27:07,504 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:07,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:27:07,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:27:07,505 INFO L87 Difference]: Start difference. First operand 61 states and 81 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:27:07,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:07,632 INFO L93 Difference]: Finished difference Result 179 states and 240 transitions. [2021-11-23 03:27:07,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:27:07,633 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2021-11-23 03:27:07,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:07,636 INFO L225 Difference]: With dead ends: 179 [2021-11-23 03:27:07,637 INFO L226 Difference]: Without dead ends: 120 [2021-11-23 03:27:07,638 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:27:07,640 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 66 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:07,641 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [66 Valid, 153 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:27:07,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2021-11-23 03:27:07,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2021-11-23 03:27:07,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 72 states have (on average 1.4027777777777777) internal successors, (101), 91 states have internal predecessors, (101), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2021-11-23 03:27:07,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 157 transitions. [2021-11-23 03:27:07,709 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 157 transitions. Word has length 25 [2021-11-23 03:27:07,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:07,711 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 157 transitions. [2021-11-23 03:27:07,712 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:27:07,712 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 157 transitions. [2021-11-23 03:27:07,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-11-23 03:27:07,715 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:07,715 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:07,716 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:27:07,716 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:07,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:07,717 INFO L85 PathProgramCache]: Analyzing trace with hash 1938685961, now seen corresponding path program 1 times [2021-11-23 03:27:07,718 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:07,718 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733660944] [2021-11-23 03:27:07,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:07,719 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:07,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:07,834 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-23 03:27:07,834 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:07,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733660944] [2021-11-23 03:27:07,835 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733660944] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:07,835 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:07,835 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 03:27:07,836 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2068926005] [2021-11-23 03:27:07,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:07,836 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 03:27:07,837 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:07,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 03:27:07,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 03:27:07,838 INFO L87 Difference]: Start difference. First operand 117 states and 157 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:08,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:08,160 INFO L93 Difference]: Finished difference Result 322 states and 445 transitions. [2021-11-23 03:27:08,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 03:27:08,161 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2021-11-23 03:27:08,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:08,166 INFO L225 Difference]: With dead ends: 322 [2021-11-23 03:27:08,168 INFO L226 Difference]: Without dead ends: 207 [2021-11-23 03:27:08,171 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 03:27:08,177 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 41 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:08,181 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [42 Valid, 336 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:27:08,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2021-11-23 03:27:08,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 198. [2021-11-23 03:27:08,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 129 states have (on average 1.310077519379845) internal successors, (169), 146 states have internal predecessors, (169), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2021-11-23 03:27:08,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 257 transitions. [2021-11-23 03:27:08,266 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 257 transitions. Word has length 28 [2021-11-23 03:27:08,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:08,267 INFO L470 AbstractCegarLoop]: Abstraction has 198 states and 257 transitions. [2021-11-23 03:27:08,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:27:08,268 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 257 transitions. [2021-11-23 03:27:08,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-11-23 03:27:08,276 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:08,276 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:08,277 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:27:08,277 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:08,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:08,280 INFO L85 PathProgramCache]: Analyzing trace with hash -710785848, now seen corresponding path program 1 times [2021-11-23 03:27:08,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:08,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294639969] [2021-11-23 03:27:08,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:08,282 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:08,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:08,509 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:27:08,509 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:08,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294639969] [2021-11-23 03:27:08,510 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294639969] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:08,511 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:08,512 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 03:27:08,516 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105530577] [2021-11-23 03:27:08,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:08,519 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 03:27:08,520 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:08,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 03:27:08,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-23 03:27:08,523 INFO L87 Difference]: Start difference. First operand 198 states and 257 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:27:08,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:08,808 INFO L93 Difference]: Finished difference Result 590 states and 762 transitions. [2021-11-23 03:27:08,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 03:27:08,821 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 38 [2021-11-23 03:27:08,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:08,826 INFO L225 Difference]: With dead ends: 590 [2021-11-23 03:27:08,827 INFO L226 Difference]: Without dead ends: 394 [2021-11-23 03:27:08,828 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:27:08,830 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 156 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:08,830 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 226 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:27:08,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2021-11-23 03:27:08,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 384. [2021-11-23 03:27:08,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 384 states, 251 states have (on average 1.2868525896414342) internal successors, (323), 279 states have internal predecessors, (323), 71 states have call successors, (71), 59 states have call predecessors, (71), 61 states have return successors, (95), 64 states have call predecessors, (95), 71 states have call successors, (95) [2021-11-23 03:27:08,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 384 states to 384 states and 489 transitions. [2021-11-23 03:27:08,946 INFO L78 Accepts]: Start accepts. Automaton has 384 states and 489 transitions. Word has length 38 [2021-11-23 03:27:08,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:08,947 INFO L470 AbstractCegarLoop]: Abstraction has 384 states and 489 transitions. [2021-11-23 03:27:08,947 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:27:08,947 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 489 transitions. [2021-11-23 03:27:08,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-23 03:27:08,952 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:08,953 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:08,953 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:27:08,953 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:08,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:08,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1358853564, now seen corresponding path program 1 times [2021-11-23 03:27:08,955 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:08,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1480283784] [2021-11-23 03:27:08,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:08,956 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:09,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:09,224 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:27:09,225 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:09,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1480283784] [2021-11-23 03:27:09,225 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1480283784] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:09,226 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:09,226 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:27:09,226 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1719681995] [2021-11-23 03:27:09,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:09,227 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:27:09,227 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:09,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:27:09,228 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:27:09,229 INFO L87 Difference]: Start difference. First operand 384 states and 489 transitions. Second operand has 8 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 03:27:09,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:09,863 INFO L93 Difference]: Finished difference Result 900 states and 1171 transitions. [2021-11-23 03:27:09,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 03:27:09,864 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 41 [2021-11-23 03:27:09,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:09,880 INFO L225 Difference]: With dead ends: 900 [2021-11-23 03:27:09,880 INFO L226 Difference]: Without dead ends: 630 [2021-11-23 03:27:09,882 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:27:09,888 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 309 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 297 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 429 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 297 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:09,894 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [318 Valid, 279 Invalid, 429 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 297 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:27:09,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 630 states. [2021-11-23 03:27:10,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 630 to 566. [2021-11-23 03:27:10,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 566 states, 376 states have (on average 1.2792553191489362) internal successors, (481), 416 states have internal predecessors, (481), 100 states have call successors, (100), 76 states have call predecessors, (100), 89 states have return successors, (139), 99 states have call predecessors, (139), 100 states have call successors, (139) [2021-11-23 03:27:10,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 566 states to 566 states and 720 transitions. [2021-11-23 03:27:10,025 INFO L78 Accepts]: Start accepts. Automaton has 566 states and 720 transitions. Word has length 41 [2021-11-23 03:27:10,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:10,028 INFO L470 AbstractCegarLoop]: Abstraction has 566 states and 720 transitions. [2021-11-23 03:27:10,028 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 03:27:10,028 INFO L276 IsEmpty]: Start isEmpty. Operand 566 states and 720 transitions. [2021-11-23 03:27:10,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-11-23 03:27:10,034 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:10,034 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:10,035 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 03:27:10,035 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:10,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:10,037 INFO L85 PathProgramCache]: Analyzing trace with hash -222157931, now seen corresponding path program 1 times [2021-11-23 03:27:10,037 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:10,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112369778] [2021-11-23 03:27:10,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:10,038 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:10,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:10,136 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:27:10,136 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:10,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112369778] [2021-11-23 03:27:10,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112369778] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:27:10,137 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:27:10,137 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 03:27:10,137 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1101364121] [2021-11-23 03:27:10,137 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:27:10,138 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 03:27:10,138 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:10,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 03:27:10,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:27:10,140 INFO L87 Difference]: Start difference. First operand 566 states and 720 transitions. Second operand has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-23 03:27:10,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:10,299 INFO L93 Difference]: Finished difference Result 672 states and 854 transitions. [2021-11-23 03:27:10,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 03:27:10,300 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 62 [2021-11-23 03:27:10,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:10,303 INFO L225 Difference]: With dead ends: 672 [2021-11-23 03:27:10,304 INFO L226 Difference]: Without dead ends: 273 [2021-11-23 03:27:10,305 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 03:27:10,310 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 106 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:10,311 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [106 Valid, 144 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:27:10,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2021-11-23 03:27:10,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 273. [2021-11-23 03:27:10,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 182 states have (on average 1.2307692307692308) internal successors, (224), 200 states have internal predecessors, (224), 47 states have call successors, (47), 36 states have call predecessors, (47), 43 states have return successors, (66), 48 states have call predecessors, (66), 47 states have call successors, (66) [2021-11-23 03:27:10,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 337 transitions. [2021-11-23 03:27:10,351 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 337 transitions. Word has length 62 [2021-11-23 03:27:10,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:10,351 INFO L470 AbstractCegarLoop]: Abstraction has 273 states and 337 transitions. [2021-11-23 03:27:10,352 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-23 03:27:10,352 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 337 transitions. [2021-11-23 03:27:10,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2021-11-23 03:27:10,354 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:10,354 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:10,354 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 03:27:10,355 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:10,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:10,356 INFO L85 PathProgramCache]: Analyzing trace with hash 1146335313, now seen corresponding path program 1 times [2021-11-23 03:27:10,356 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:10,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941804082] [2021-11-23 03:27:10,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:10,357 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:10,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:10,488 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 10 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-23 03:27:10,495 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:10,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941804082] [2021-11-23 03:27:10,495 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941804082] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:27:10,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [330472206] [2021-11-23 03:27:10,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:10,496 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:27:10,497 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:27:10,502 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:27:10,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:27:10,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:10,673 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-23 03:27:10,682 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:27:11,049 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:27:11,050 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:27:11,365 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 14 proven. 8 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 03:27:11,366 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [330472206] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:27:11,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [966668604] [2021-11-23 03:27:11,396 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2021-11-23 03:27:11,396 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:27:11,406 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:27:11,413 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:27:11,414 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:27:23,219 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 307 for LOIs [2021-11-23 03:27:23,311 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2021-11-23 03:27:23,646 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 58 for LOIs [2021-11-23 03:27:23,980 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 34 for LOIs [2021-11-23 03:27:24,030 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 55 for LOIs [2021-11-23 03:27:24,050 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:27:36,338 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7574#(and (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (<= 2 |old(~waterLevel~0)|) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1|) (= |#NULL.base| 0))' at error location [2021-11-23 03:27:36,339 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:27:36,339 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:27:36,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2021-11-23 03:27:36,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1795644270] [2021-11-23 03:27:36,339 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:27:36,341 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-23 03:27:36,341 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:36,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-23 03:27:36,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=288, Invalid=1692, Unknown=0, NotChecked=0, Total=1980 [2021-11-23 03:27:36,343 INFO L87 Difference]: Start difference. First operand 273 states and 337 transitions. Second operand has 14 states, 12 states have (on average 8.083333333333334) internal successors, (97), 13 states have internal predecessors, (97), 8 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (21), 10 states have call predecessors, (21), 8 states have call successors, (21) [2021-11-23 03:27:37,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:37,455 INFO L93 Difference]: Finished difference Result 444 states and 551 transitions. [2021-11-23 03:27:37,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-11-23 03:27:37,456 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 8.083333333333334) internal successors, (97), 13 states have internal predecessors, (97), 8 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (21), 10 states have call predecessors, (21), 8 states have call successors, (21) Word has length 73 [2021-11-23 03:27:37,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:37,462 INFO L225 Difference]: With dead ends: 444 [2021-11-23 03:27:37,462 INFO L226 Difference]: Without dead ends: 298 [2021-11-23 03:27:37,466 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 187 SyntacticMatches, 7 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1354 ImplicationChecksByTransitivity, 12.9s TimeCoverageRelationStatistics Valid=510, Invalid=3272, Unknown=0, NotChecked=0, Total=3782 [2021-11-23 03:27:37,467 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 256 mSDsluCounter, 600 mSDsCounter, 0 mSdLazyCounter, 588 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 637 SdHoareTripleChecker+Invalid, 751 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 588 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:37,468 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [256 Valid, 637 Invalid, 751 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 588 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-23 03:27:37,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2021-11-23 03:27:37,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 296. [2021-11-23 03:27:37,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 196 states have (on average 1.1887755102040816) internal successors, (233), 215 states have internal predecessors, (233), 50 states have call successors, (50), 42 states have call predecessors, (50), 49 states have return successors, (62), 52 states have call predecessors, (62), 50 states have call successors, (62) [2021-11-23 03:27:37,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 345 transitions. [2021-11-23 03:27:37,499 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 345 transitions. Word has length 73 [2021-11-23 03:27:37,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:37,499 INFO L470 AbstractCegarLoop]: Abstraction has 296 states and 345 transitions. [2021-11-23 03:27:37,500 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 8.083333333333334) internal successors, (97), 13 states have internal predecessors, (97), 8 states have call successors, (21), 5 states have call predecessors, (21), 8 states have return successors, (21), 10 states have call predecessors, (21), 8 states have call successors, (21) [2021-11-23 03:27:37,500 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 345 transitions. [2021-11-23 03:27:37,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-11-23 03:27:37,502 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:37,503 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:37,559 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:27:37,718 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2021-11-23 03:27:37,718 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:37,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:37,719 INFO L85 PathProgramCache]: Analyzing trace with hash -2064584164, now seen corresponding path program 1 times [2021-11-23 03:27:37,719 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:37,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368271944] [2021-11-23 03:27:37,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:37,720 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:37,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:37,964 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 37 proven. 18 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-11-23 03:27:37,964 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:37,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368271944] [2021-11-23 03:27:37,965 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368271944] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:27:37,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1265961463] [2021-11-23 03:27:37,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:37,965 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:27:37,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:27:37,966 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:27:37,973 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:27:38,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:38,109 INFO L263 TraceCheckSpWp]: Trace formula consists of 545 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-23 03:27:38,115 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:27:38,565 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 66 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 03:27:38,565 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:27:39,152 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 48 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-23 03:27:39,153 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1265961463] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:27:39,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [904463035] [2021-11-23 03:27:39,157 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2021-11-23 03:27:39,158 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:27:39,158 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:27:39,159 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:27:39,159 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:27:44,439 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 56 for LOIs [2021-11-23 03:27:44,451 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2021-11-23 03:27:44,920 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 29 for LOIs [2021-11-23 03:27:44,987 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 26 for LOIs [2021-11-23 03:27:45,023 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 56 for LOIs [2021-11-23 03:27:45,043 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:27:51,439 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9361#(and (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~head~0.base) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (<= 0 ~methaneLevelCritical~0) (= |old(~waterLevel~0)| ~waterLevel~0) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= ~head~0.base 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|) (<= 0 |#NULL.offset|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1|) (= |#NULL.base| 0))' at error location [2021-11-23 03:27:51,439 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:27:51,440 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:27:51,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 9, 9] total 27 [2021-11-23 03:27:51,440 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010256635] [2021-11-23 03:27:51,440 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:27:51,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2021-11-23 03:27:51,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:27:51,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2021-11-23 03:27:51,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=442, Invalid=2638, Unknown=0, NotChecked=0, Total=3080 [2021-11-23 03:27:51,444 INFO L87 Difference]: Start difference. First operand 296 states and 345 transitions. Second operand has 27 states, 27 states have (on average 4.518518518518518) internal successors, (122), 27 states have internal predecessors, (122), 13 states have call successors, (25), 5 states have call predecessors, (25), 9 states have return successors, (26), 14 states have call predecessors, (26), 13 states have call successors, (26) [2021-11-23 03:27:54,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:27:54,069 INFO L93 Difference]: Finished difference Result 796 states and 1018 transitions. [2021-11-23 03:27:54,074 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-11-23 03:27:54,074 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 4.518518518518518) internal successors, (122), 27 states have internal predecessors, (122), 13 states have call successors, (25), 5 states have call predecessors, (25), 9 states have return successors, (26), 14 states have call predecessors, (26), 13 states have call successors, (26) Word has length 96 [2021-11-23 03:27:54,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:27:54,080 INFO L225 Difference]: With dead ends: 796 [2021-11-23 03:27:54,080 INFO L226 Difference]: Without dead ends: 494 [2021-11-23 03:27:54,084 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 351 GetRequests, 258 SyntacticMatches, 7 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2787 ImplicationChecksByTransitivity, 8.1s TimeCoverageRelationStatistics Valid=1045, Invalid=6611, Unknown=0, NotChecked=0, Total=7656 [2021-11-23 03:27:54,085 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 727 mSDsluCounter, 744 mSDsCounter, 0 mSdLazyCounter, 1334 mSolverCounterSat, 535 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 727 SdHoareTripleChecker+Valid, 761 SdHoareTripleChecker+Invalid, 1869 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 535 IncrementalHoareTripleChecker+Valid, 1334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:27:54,086 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [727 Valid, 761 Invalid, 1869 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [535 Valid, 1334 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-11-23 03:27:54,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 494 states. [2021-11-23 03:27:54,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 494 to 331. [2021-11-23 03:27:54,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 219 states have (on average 1.178082191780822) internal successors, (258), 244 states have internal predecessors, (258), 55 states have call successors, (55), 46 states have call predecessors, (55), 56 states have return successors, (73), 57 states have call predecessors, (73), 55 states have call successors, (73) [2021-11-23 03:27:54,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 386 transitions. [2021-11-23 03:27:54,133 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 386 transitions. Word has length 96 [2021-11-23 03:27:54,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:27:54,133 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 386 transitions. [2021-11-23 03:27:54,134 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 4.518518518518518) internal successors, (122), 27 states have internal predecessors, (122), 13 states have call successors, (25), 5 states have call predecessors, (25), 9 states have return successors, (26), 14 states have call predecessors, (26), 13 states have call successors, (26) [2021-11-23 03:27:54,134 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 386 transitions. [2021-11-23 03:27:54,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2021-11-23 03:27:54,136 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:27:54,137 INFO L514 BasicCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:27:54,174 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:27:54,357 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:27:54,357 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:27:54,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:27:54,358 INFO L85 PathProgramCache]: Analyzing trace with hash 1893254194, now seen corresponding path program 1 times [2021-11-23 03:27:54,358 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:27:54,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [954538347] [2021-11-23 03:27:54,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:54,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:27:54,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:54,668 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 20 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2021-11-23 03:27:54,668 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:27:54,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [954538347] [2021-11-23 03:27:54,669 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [954538347] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:27:54,669 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951613831] [2021-11-23 03:27:54,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:27:54,669 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:27:54,669 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:27:54,670 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:27:54,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 03:27:54,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:27:54,798 INFO L263 TraceCheckSpWp]: Trace formula consists of 559 conjuncts, 30 conjunts are in the unsatisfiable core [2021-11-23 03:27:54,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:27:55,317 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 62 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:27:55,317 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:27:56,032 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 54 proven. 5 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2021-11-23 03:27:56,032 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951613831] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:27:56,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2128510304] [2021-11-23 03:27:56,037 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2021-11-23 03:27:56,037 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:27:56,038 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:27:56,038 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:27:56,038 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:28:04,372 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 310 for LOIs [2021-11-23 03:28:04,438 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2021-11-23 03:28:04,818 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 29 for LOIs [2021-11-23 03:28:04,895 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 27 for LOIs [2021-11-23 03:28:04,927 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 56 for LOIs [2021-11-23 03:28:04,946 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:28:16,737 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11779#(and (= |timeShift_getWaterLevel_~retValue_acc~7#1| |timeShift_getWaterLevel_#res#1|) (= ~methaneLevelCritical~0 0) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (<= 0 ~head~0.base) (= |timeShift_getWaterLevel_~retValue_acc~7#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1|) (= |#NULL.base| 0))' at error location [2021-11-23 03:28:16,737 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:28:16,738 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:28:16,738 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 11] total 31 [2021-11-23 03:28:16,738 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1798506560] [2021-11-23 03:28:16,738 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:28:16,740 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2021-11-23 03:28:16,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:28:16,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2021-11-23 03:28:16,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=491, Invalid=3049, Unknown=0, NotChecked=0, Total=3540 [2021-11-23 03:28:16,742 INFO L87 Difference]: Start difference. First operand 331 states and 386 transitions. Second operand has 31 states, 30 states have (on average 5.166666666666667) internal successors, (155), 31 states have internal predecessors, (155), 17 states have call successors, (31), 7 states have call predecessors, (31), 12 states have return successors, (31), 18 states have call predecessors, (31), 16 states have call successors, (31) [2021-11-23 03:28:20,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:28:20,253 INFO L93 Difference]: Finished difference Result 896 states and 1068 transitions. [2021-11-23 03:28:20,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2021-11-23 03:28:20,254 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 5.166666666666667) internal successors, (155), 31 states have internal predecessors, (155), 17 states have call successors, (31), 7 states have call predecessors, (31), 12 states have return successors, (31), 18 states have call predecessors, (31), 16 states have call successors, (31) Word has length 101 [2021-11-23 03:28:20,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:28:20,256 INFO L225 Difference]: With dead ends: 896 [2021-11-23 03:28:20,256 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:28:20,263 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 383 GetRequests, 270 SyntacticMatches, 15 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3941 ImplicationChecksByTransitivity, 13.8s TimeCoverageRelationStatistics Valid=1336, Invalid=8564, Unknown=0, NotChecked=0, Total=9900 [2021-11-23 03:28:20,264 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 1499 mSDsluCounter, 1020 mSDsCounter, 0 mSdLazyCounter, 2052 mSolverCounterSat, 1092 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1499 SdHoareTripleChecker+Valid, 1052 SdHoareTripleChecker+Invalid, 3144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1092 IncrementalHoareTripleChecker+Valid, 2052 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2021-11-23 03:28:20,264 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1499 Valid, 1052 Invalid, 3144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1092 Valid, 2052 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2021-11-23 03:28:20,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:28:20,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:28:20,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:28:20,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:28:20,266 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 101 [2021-11-23 03:28:20,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:28:20,267 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:28:20,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 5.166666666666667) internal successors, (155), 31 states have internal predecessors, (155), 17 states have call successors, (31), 7 states have call predecessors, (31), 12 states have return successors, (31), 18 states have call predecessors, (31), 16 states have call successors, (31) [2021-11-23 03:28:20,267 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:28:20,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:28:20,271 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:28:20,319 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 03:28:20,486 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:28:20,488 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:28:26,771 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 871 878) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,771 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 871 878) no Hoare annotation was computed. [2021-11-23 03:28:26,771 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 778 784) no Hoare annotation was computed. [2021-11-23 03:28:26,771 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 778 784) the Hoare annotation is: true [2021-11-23 03:28:26,772 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 666 677) the Hoare annotation is: true [2021-11-23 03:28:26,772 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 666 677) no Hoare annotation was computed. [2021-11-23 03:28:26,772 INFO L854 garLoopResultBuilder]: At program point L1018(line 1018) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or (and .cse1 .cse3 .cse4 .cse5) .cse6 .cse7 .cse8 (and .cse3 .cse4 .cse5 .cse9) .cse10) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse4 .cse2) (let ((.cse11 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (or (not (<= |old(~waterLevel~0)| 1)) (and (<= ~waterLevel~0 0) .cse3 (or .cse11 .cse12) .cse5 .cse9) (and .cse1 (or .cse11 (and (<= |old(~waterLevel~0)| 0) .cse12)) .cse3 .cse5) .cse6 .cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 .cse8 .cse2 .cse10) (or .cse0 .cse6 (and .cse1 .cse3 .cse12 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (not (< |old(~waterLevel~0)| 3))))) [2021-11-23 03:28:26,772 INFO L854 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse2 (not (< |old(~waterLevel~0)| 3))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2) (or .cse0 .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,773 INFO L858 garLoopResultBuilder]: For program point L1018-1(line 1018) no Hoare annotation was computed. [2021-11-23 03:28:26,773 INFO L854 garLoopResultBuilder]: At program point L857-1(lines 838 862) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse2 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) (and .cse5 .cse2 .cse3))) (or (and (= 2 ~waterLevel~0) .cse6 .cse4) .cse7 (and .cse5 .cse6) .cse0 (not (< |old(~waterLevel~0)| 3))) (let ((.cse8 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse5 (or .cse8 (and (<= |old(~waterLevel~0)| 0) .cse6)) .cse3) (and (<= ~waterLevel~0 0) (or .cse8 .cse6) .cse3 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse7 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,773 INFO L858 garLoopResultBuilder]: For program point L758-2(lines 754 776) no Hoare annotation was computed. [2021-11-23 03:28:26,773 INFO L854 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (< |old(~waterLevel~0)| 3))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2) (or .cse0 .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse0 .cse2) (or .cse3 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,774 INFO L858 garLoopResultBuilder]: For program point L846(lines 846 854) no Hoare annotation was computed. [2021-11-23 03:28:26,774 INFO L854 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 0)) (.cse10 (not (< |old(~waterLevel~0)| 3))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse3 (and .cse6 (= ~pumpRunning~0 1))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse7 (and .cse8 (or .cse6 (= ~waterLevel~0 1)))) (or .cse1 .cse2 .cse9 .cse4 .cse10) (or .cse5 (and .cse8 .cse6) .cse1 .cse10) (or .cse5 .cse1 .cse11 .cse9 .cse4) (or .cse1 .cse2 .cse11 .cse3) (or .cse0 .cse5 .cse1 .cse9 .cse4)))) [2021-11-23 03:28:26,774 INFO L854 garLoopResultBuilder]: At program point L1003-1(line 1003) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret52#1|)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 (or .cse3 (= ~waterLevel~0 1)))) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (and .cse2 .cse3) .cse4 (not (< |old(~waterLevel~0)| 3))) (or .cse0 .cse3 .cse7 .cse1 .cse8) (or .cse4 .cse5 (and .cse3 .cse6 (= ~pumpRunning~0 1)) .cse7 .cse8))) [2021-11-23 03:28:26,775 INFO L854 garLoopResultBuilder]: At program point L842(lines 842 859) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (= ~pumpRunning~0 0) .cse8)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (= ~waterLevel~0 1) .cse2 .cse3) .cse4) (or .cse5 .cse6 .cse0 .cse4) (or .cse7 .cse0 .cse1 (and (<= ~waterLevel~0 0) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) .cse8) .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse7 .cse5 .cse6 .cse0) (or .cse5 (not (= 0 ~systemActive~0)))))) [2021-11-23 03:28:26,775 INFO L858 garLoopResultBuilder]: For program point L1020(lines 1020 1030) no Hoare annotation was computed. [2021-11-23 03:28:26,775 INFO L858 garLoopResultBuilder]: For program point L1016(lines 1016 1033) no Hoare annotation was computed. [2021-11-23 03:28:26,775 INFO L854 garLoopResultBuilder]: At program point L1016-1(lines 1008 1036) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse9 (= 1 ~systemActive~0)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (and .cse1 .cse9 .cse3 .cse4)) (.cse14 (not (< |old(~waterLevel~0)| 3))) (.cse7 (not .cse9)) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse12 (= ~waterLevel~0 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2) (or (and .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 (and .cse1 .cse9 .cse3 .cse4 .cse5) (not (<= |old(~waterLevel~0)| 0)) .cse10) (or .cse0 .cse11 .cse12 .cse2) (or (and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2) .cse4) .cse0 (not (<= |old(~waterLevel~0)| 2)) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse13 (and .cse3 .cse4 .cse6) .cse7 .cse14) (let ((.cse15 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse16 (< 0 |old(~waterLevel~0)|))) (or (and .cse1 .cse15 .cse16 .cse9 .cse3 .cse5) .cse11 .cse7 (and .cse15 .cse16 .cse3 .cse5 .cse6) .cse8 .cse10)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse13 .cse7 .cse14) (or (and .cse1 .cse9 .cse3 .cse12 .cse5) .cse7 .cse8 (not (= |old(~waterLevel~0)| 2)) (and .cse3 .cse12 .cse5 .cse6))))) [2021-11-23 03:28:26,776 INFO L858 garLoopResultBuilder]: For program point L1021(lines 1021 1027) no Hoare annotation was computed. [2021-11-23 03:28:26,776 INFO L854 garLoopResultBuilder]: At program point L765-1(lines 765 771) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse2 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) (and .cse5 .cse2 .cse3)) (or (and (= 2 ~waterLevel~0) .cse6 .cse4) .cse7 (and .cse5 .cse6) .cse0 (not (< |old(~waterLevel~0)| 3))) (or .cse7 .cse5 .cse8) (let ((.cse9 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse5 (or .cse9 (and (<= |old(~waterLevel~0)| 0) .cse6)) .cse3) (and (<= ~waterLevel~0 0) (or .cse9 .cse6) .cse3 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse8) (or .cse7 .cse6 (not (<= |old(~waterLevel~0)| 2)) .cse8 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:28:26,776 INFO L854 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (= ~waterLevel~0 1) .cse2 .cse3) (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and (<= ~waterLevel~0 0) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse0 (not (< |old(~waterLevel~0)| 3))) (or .cse4 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,777 INFO L854 garLoopResultBuilder]: At program point L848(line 848) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (= ~waterLevel~0 1) .cse2 .cse3) (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and (<= ~waterLevel~0 0) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse0 (not (< |old(~waterLevel~0)| 3))) (or .cse4 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,777 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 751 777) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 0)) (.cse10 (not (< |old(~waterLevel~0)| 3))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse3 (and .cse6 (= ~pumpRunning~0 1))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse7 (and .cse8 (or .cse6 (= ~waterLevel~0 1)))) (or .cse1 .cse2 .cse9 .cse4 .cse10) (or .cse5 (and .cse8 .cse6) .cse1 .cse10) (or .cse5 .cse1 .cse11 .cse9 .cse4) (or .cse1 .cse2 .cse11 .cse3) (or .cse0 .cse5 .cse1 .cse9 .cse4)))) [2021-11-23 03:28:26,777 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 751 777) no Hoare annotation was computed. [2021-11-23 03:28:26,777 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 561) no Hoare annotation was computed. [2021-11-23 03:28:26,778 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2021-11-23 03:28:26,778 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2021-11-23 03:28:26,778 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2021-11-23 03:28:26,778 INFO L858 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2021-11-23 03:28:26,778 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-11-23 03:28:26,778 INFO L861 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2021-11-23 03:28:26,778 INFO L861 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2021-11-23 03:28:26,779 INFO L861 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2021-11-23 03:28:26,779 INFO L858 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2021-11-23 03:28:26,779 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-11-23 03:28:26,779 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-11-23 03:28:26,779 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2021-11-23 03:28:26,779 INFO L854 garLoopResultBuilder]: At program point L977-1(lines 977 983) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-11-23 03:28:26,779 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse3 (< ~waterLevel~0 3)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 .cse4))) [2021-11-23 03:28:26,779 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse3 (< ~waterLevel~0 3)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 .cse4))) [2021-11-23 03:28:26,779 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:28:26,779 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-11-23 03:28:26,780 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:28:26,780 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2021-11-23 03:28:26,780 INFO L854 garLoopResultBuilder]: At program point L508(lines 508 515) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-23 03:28:26,780 INFO L861 garLoopResultBuilder]: At program point L508-2(lines 508 515) the Hoare annotation is: true [2021-11-23 03:28:26,780 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse3 (< ~waterLevel~0 3)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 .cse4))) [2021-11-23 03:28:26,780 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-11-23 03:28:26,780 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2021-11-23 03:28:26,781 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-11-23 03:28:26,781 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-11-23 03:28:26,781 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-11-23 03:28:26,781 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 619) no Hoare annotation was computed. [2021-11-23 03:28:26,781 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse3 (< ~waterLevel~0 3)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (= 2 ~waterLevel~0) .cse1 .cse2 .cse4))) [2021-11-23 03:28:26,781 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 786 810) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,781 INFO L854 garLoopResultBuilder]: At program point L800(line 800) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (or (<= 2 ~waterLevel~0) (and (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1)) (<= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)))) (not (< ~waterLevel~0 3))))) [2021-11-23 03:28:26,782 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 786 810) no Hoare annotation was computed. [2021-11-23 03:28:26,782 INFO L854 garLoopResultBuilder]: At program point L794(lines 794 802) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (or (<= 2 ~waterLevel~0) (and (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1)) (<= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)))) (not (< ~waterLevel~0 3))))) [2021-11-23 03:28:26,782 INFO L854 garLoopResultBuilder]: At program point L790(lines 790 807) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,782 INFO L854 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,782 INFO L858 garLoopResultBuilder]: For program point L805-1(lines 786 810) no Hoare annotation was computed. [2021-11-23 03:28:26,783 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 654 665) no Hoare annotation was computed. [2021-11-23 03:28:26,783 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 654 665) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0 .cse3) (or .cse4 .cse3 (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse3 (not (<= 1 ~switchedOnBeforeTS~0)) (not (< |old(~waterLevel~0)| 3))))) [2021-11-23 03:28:26,783 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 812 836) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,783 INFO L854 garLoopResultBuilder]: At program point L826(line 826) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,784 INFO L854 garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,784 INFO L858 garLoopResultBuilder]: For program point L820(lines 820 828) no Hoare annotation was computed. [2021-11-23 03:28:26,784 INFO L854 garLoopResultBuilder]: At program point L816(lines 816 833) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (< ~waterLevel~0 3))) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-23 03:28:26,784 INFO L854 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (< ~waterLevel~0 3))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2))) [2021-11-23 03:28:26,785 INFO L858 garLoopResultBuilder]: For program point L831-1(lines 812 836) no Hoare annotation was computed. [2021-11-23 03:28:26,785 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 812 836) no Hoare annotation was computed. [2021-11-23 03:28:26,785 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 890 898) no Hoare annotation was computed. [2021-11-23 03:28:26,785 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 890 898) the Hoare annotation is: true [2021-11-23 03:28:26,789 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:28:26,791 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:28:26,830 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:28:26 BoogieIcfgContainer [2021-11-23 03:28:26,830 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:28:26,831 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:28:26,831 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:28:26,831 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:28:26,832 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:27:06" (3/4) ... [2021-11-23 03:28:26,835 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:28:26,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-23 03:28:26,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:28:26,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:28:26,843 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:28:26,843 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:28:26,843 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:28:26,843 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:28:26,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-11-23 03:28:26,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-23 03:28:26,856 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 82 nodes and edges [2021-11-23 03:28:26,857 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2021-11-23 03:28:26,858 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2021-11-23 03:28:26,859 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:28:26,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:28:26,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:28:26,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:28:26,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && (\old(waterLevel) == waterLevel || waterLevel == 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= aux-isPumpRunning()-aux)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((\old(waterLevel) == waterLevel && 1 <= aux-isPumpRunning()-aux) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:28:26,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((((2 == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && 1 <= switchedOnBeforeTS)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) [2021-11-23 03:28:26,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((((((tmp == waterLevel && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((tmp == 2 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) && 1 == systemActive) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((((((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (((tmp == waterLevel && waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) [2021-11-23 03:28:26,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 03:28:26,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) < 3)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 03:28:26,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((((2 == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && 1 <= switchedOnBeforeTS)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 03:28:26,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel < 3)) && ((((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1) [2021-11-23 03:28:26,894 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel < 3)) && ((((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1) [2021-11-23 03:28:26,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (2 <= waterLevel || (0 < tmp + 1 && tmp <= 0)))) || !(waterLevel < 3)) [2021-11-23 03:28:26,928 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:28:26,929 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:28:26,929 INFO L158 Benchmark]: Toolchain (without parser) took 82138.82ms. Allocated memory was 88.1MB in the beginning and 648.0MB in the end (delta: 559.9MB). Free memory was 51.5MB in the beginning and 267.0MB in the end (delta: -215.5MB). Peak memory consumption was 344.7MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,930 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 88.1MB. Free memory is still 68.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:28:26,930 INFO L158 Benchmark]: CACSL2BoogieTranslator took 624.01ms. Allocated memory was 88.1MB in the beginning and 113.2MB in the end (delta: 25.2MB). Free memory was 51.3MB in the beginning and 81.5MB in the end (delta: -30.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,931 INFO L158 Benchmark]: Boogie Procedure Inliner took 102.94ms. Allocated memory is still 113.2MB. Free memory was 81.5MB in the beginning and 78.4MB in the end (delta: 3.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,931 INFO L158 Benchmark]: Boogie Preprocessor took 40.62ms. Allocated memory is still 113.2MB. Free memory was 78.4MB in the beginning and 76.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,931 INFO L158 Benchmark]: RCFGBuilder took 888.03ms. Allocated memory is still 113.2MB. Free memory was 76.8MB in the beginning and 54.5MB in the end (delta: 22.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,932 INFO L158 Benchmark]: TraceAbstraction took 80377.42ms. Allocated memory was 113.2MB in the beginning and 648.0MB in the end (delta: 534.8MB). Free memory was 53.7MB in the beginning and 274.4MB in the end (delta: -220.6MB). Peak memory consumption was 361.8MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,932 INFO L158 Benchmark]: Witness Printer took 97.79ms. Allocated memory is still 648.0MB. Free memory was 274.4MB in the beginning and 267.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 03:28:26,934 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 88.1MB. Free memory is still 68.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 624.01ms. Allocated memory was 88.1MB in the beginning and 113.2MB in the end (delta: 25.2MB). Free memory was 51.3MB in the beginning and 81.5MB in the end (delta: -30.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 102.94ms. Allocated memory is still 113.2MB. Free memory was 81.5MB in the beginning and 78.4MB in the end (delta: 3.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.62ms. Allocated memory is still 113.2MB. Free memory was 78.4MB in the beginning and 76.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 888.03ms. Allocated memory is still 113.2MB. Free memory was 76.8MB in the beginning and 54.5MB in the end (delta: 22.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 80377.42ms. Allocated memory was 113.2MB in the beginning and 648.0MB in the end (delta: 534.8MB). Free memory was 53.7MB in the beginning and 274.4MB in the end (delta: -220.6MB). Peak memory consumption was 361.8MB. Max. memory is 16.1GB. * Witness Printer took 97.79ms. Allocated memory is still 648.0MB. Free memory was 274.4MB in the beginning and 267.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 80.3s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 9.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3189 SdHoareTripleChecker+Valid, 4.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3174 mSDsluCounter, 3783 SdHoareTripleChecker+Invalid, 3.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3210 mSDsCounter, 1979 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4671 IncrementalHoareTripleChecker+Invalid, 6650 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1979 mSolverCounterUnsat, 1002 mSDtfsCounter, 4671 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1036 GetRequests, 734 SyntacticMatches, 29 SemanticMatches, 273 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8117 ImplicationChecksByTransitivity, 35.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=566occurred in iteration=6, InterpolantAutomatonStates: 136, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 10 MinimizatonAttempts, 251 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1546 PreInvPairs, 1772 NumberOfFragments, 2560 HoareAnnotationTreeSize, 1546 FomulaSimplifications, 8758 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 43 FomulaSimplificationsInter, 24724 FormulaSimplificationTreeSizeReductionInter, 5.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 4.4s InterpolantComputationTime, 777 NumberOfCodeBlocks, 777 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1031 ConstructedInterpolants, 0 QuantifiedInterpolants, 3126 SizeOfPredicates, 25 NumberOfNonLiveVariables, 1579 ConjunctsInSsa, 56 ConjunctsInUnsatCore, 16 InterpolantComputations, 7 PerfectInterpolantSequences, 485/599 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel < 3)) && ((((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel < 3)) && ((((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) || pumpRunning == 1) - InvariantResult [Line: 1003]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && (\old(waterLevel) == waterLevel || waterLevel == 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= aux-isPumpRunning()-aux)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((\old(waterLevel) == waterLevel && 1 <= aux-isPumpRunning()-aux) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((((((tmp == waterLevel && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((tmp == 2 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((((((((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) && 1 == systemActive) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((((((((pumpRunning == 0 && 1 == systemActive) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (((tmp == waterLevel && waterLevel == 1) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel <= 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (2 <= waterLevel || (0 < tmp + 1 && tmp <= 0)))) || !(waterLevel < 3)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((((2 == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && 1 <= switchedOnBeforeTS)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel < 3) || ((((1 == systemActive && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && waterLevel < 3) && pumpRunning == 1)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || (((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == 1) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) < 3)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((((2 == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) < 3))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && 1 <= switchedOnBeforeTS)) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning == 1)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-11-23 03:28:27,004 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_027d86af-dce8-4004-be43-fbad60115c9f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE